vulnerability

Atlassian patches critical Confluence bug, urges for immediate action (CVE-2023-22518)

October 31, 2023

Atlassian is urging enterprise administrators to update their on-premises Confluence Data Center and Server installations quickly to plug a critical security vulnerability …

F5 fixes critical BIG-IP vulnerability, PoC is public (CVE-2023-46747)

October 30, 2023

F5 Networks has released hotfixes for two vulnerabilities affecting its BIG-IP multi-purpose networking devices/modules, including a critical authentication bypass …

Citrix Bleed: Mass exploitation in progress (CVE-2023-4966)

October 30, 2023

CVE-2023-4966, aka “Citrix Bleed”, a critical information disclosure vulnerability affecting Citrix NetScaler ADC/Gateway devices, is being massively exploited by …

Apple news: iLeakage attack, MAC address leakage bug

October 27, 2023

On Wednesday, Apple released security updates for all supported branches of iOS and iPadOS, macOS, tvOS, watchOS and Safari. This time around, the updates did not garner as …

VMware patches critical vulnerability in vCenter Server (CVE-2023-34048)

October 25, 2023

VMware has fixed a critical out-of-bounds write vulnerability (CVE-2023-34048) and a moderate-severity information disclosure flaw (CVE-2023-34056) in vCenter Server, its …

North Korean hackers are targeting software developers and impersonating IT workers

October 20, 2023

State-sponsored North Korean hackers have significantly intensified their focus on the IT sector in recent years, by infiltrating firms developing software and companies …

DIY attack surface management: Simple, cost-effective and actionable perimeter insights

October 16, 2023

Modern-day attack surface management (ASM) can be an intimidating task for most organizations, with assets constantly changing due to new deployments, assets being …

Unmasking the limitations of yearly penetration tests

October 12, 2023

In this Help Net Security interview, Charles d’Hondt, Head of Operations, Ambionics Security, talks about the necessity of implementing continuous penetration testing …

Critical Atlassian Confluence vulnerability exploited by state-backed threat actor

October 11, 2023

A critical flaw in Atlassian Confluence Data Center and Server (CVE-2023-22515) has been exploited by a state-backed threat actor, Microsoft’s threat analysts have …

Curl project squashes high-severity bug in omnipresent libcurl library (CVE-2023-38545)

October 11, 2023

Curl v8.4.0 is out, and fixes – among other things – a high-severity SOCKS5 heap buffer overflow vulnerability (CVE-2023-38545). Appropriate patches for some older …

Dangerous vulnerability can be exploited to carry out massive DDoS attacks (CVE-2023-44487)

October 10, 2023

Cloudflare, Google, and Amazon AWS revealed that a zero-day vulnerability in the HTTP/2 protocol has been used to mount massive, high-volume DDoS attacks, which they dubbed …

GNOME users at risk of RCE attack (CVE-2023-43641)