vulnerability

FritzFrog botnet exploits Log4Shell, PwnKit vulnerabilities

February 1, 2024

The FritzFrog cryptomining botnet has new potential for growth: a recently analyzed variant of the bot is exploiting the Log4Shell (CVE-2021-44228) and PwnKit (CVE-2021-4034) …

Self-managed GitLab installations should be patched again (CVE-2024-0402)

January 30, 2024

Less than two weeks after having plugged a security hole that allows account takeover without user interaction, GitLab Inc. has patched a critical vulnerability …

Critical Jenkins RCE flaw exploited in the wild. Patch now! (CVE-2024-23897)

January 29, 2024

Several proof-of-concept (PoC) exploits for a recently patched critical vulnerability (CVE-2024-23897) in Jenkins have been made public and there’s evidence of …

PoC for easily exploitable Fortra GoAnywhere MFT vulnerability released (CVE-2024-0204)

January 24, 2024

Proof-of-concept (PoC) exploit code for a critical vulnerability (CVE-2024-0204) in Fortra’s GoAnywhere MFT solution has been made public, sparking fears that attackers …

Attackers can steal NTLM password hashes via calendar invites

January 22, 2024

A recently patched vulnerability in Microsoft Outlook (CVE-2023-35636) that can be used by attackers to steal users’ NTLM v2 hashes can be exploited by adding two …

Ivanti EPMM and MobileIron Core vulnerability is actively exploited, CISA confirms (CVE-2023-35082)

January 19, 2024

A previously patched critical vulnerability (CVE-2023-35082) affecting Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core is being actively exploited, the Cybersecurity …

VMware: Plug critical Aria Automation hole immediately! (CVE-2023-34063)

January 18, 2024

A critical vulnerability (CVE-2023-34063) affecting VMware Aria Automation and VMware Cloud Foundation can be exploited by attackers to gain access to remote organizations and …

Atlassian reveals critical Confluence RCE flaw, urges “immediate action” (CVE-2023-22527)

January 16, 2024

Atlassian has patched a critical vulnerability (CVE-2023-22527) in Confluence Data Center and Confluence Server that could lead to remote code execution. The good news is that …

Juniper fixes critical RCE in its SRX firewalls and EX switches (CVE-2024-21591)

January 15, 2024

Juniper Networks has fixed a critical pre-authentication remote code execution (RCE) vulnerability (CVE-2024-21591) in Junos OS on SRX firewalls and EX switches. About …

Akira ransomware attackers are wiping NAS and tape backups

January 12, 2024

“The Akira ransomware malware, which was first detected in Finland in June 2023, has been particularly active at the end of the year,” the Finnish National …

Critical GitLab flaw allows account takeover without user interaction, patch quickly! (CVE-2023-7028)

January 12, 2024

A critical vulnerability in GitLab CE/EE (CVE-2023-7028) can be easily exploited by attackers to reset GitLab user account passwords. While also vulnerable, users who have …

Critical Cisco Unity Connection flaw gives attackers root privileges. Patch now! (CVE-2024-20272)

January 11, 2024

Cisco has fixed a critical vulnerability (CVE-2024-20272) in Cisco Unity Connection that could allow an unauthenticated attacker to upload arbitrary files and gain root …