vulnerability

Admins, patch your Cisco enterprise security solutions! (CVE-2023-20032)

February 17, 2023

Cisco has released security updates for several of its enterprise security and networking products, fixing (among other things): A critical vulnerability (CVE-2023-20032) in …

XIoT vendors get serious about security, devote resources to protect cyber-physical systems

February 17, 2023

Cyber-physical system vulnerabilities disclosed in the second half (2H) of 2022 have declined by 14% since hitting a peak during 2H 2021, while vulnerabilities found by …

Vulnerabilities open Korenix JetWave industrial networking devices to attack

February 13, 2023

Three vulnerabilities found in a variety of Korenix JetWave industrial access points and LTE cellular gateways may allow attackers to either disrupt their operation or to use …

CISA releases ESXiArgs ransomware recovery script

February 8, 2023

According to the latest data, the number of ESXiArgs ransomware victims has surpassed 3,800, and CISA has published a recovery script for victim organizations. Fixing the mess …

Thousands of unpatched VMware ESXi servers hit by ransomware via old bug (CVE-2021-21974)

February 6, 2023

Late last week, unknown attackers launched a widespread ransomware attack hitting VMware ESXi hypervisors via CVE-2021-21974, an easily exploitable vulnerability that allows …

Patch your Jira Service Management Server and Data Center and check for compromise! (CVE-2023-22501)

February 3, 2023

Australian software maker Atlassian has released patches for CVE-2023-22501, a critical authentication vulnerability in Jira Service Management Server and Data Center, and is …

Vulnerability in Cisco industrial appliances is a potential nightmare (CVE-2023-20076)

February 1, 2023

Cisco has released patches for a high-severity vulnerability (CVE-2023-20076) found in some of its industrial routers, gateways and enterprise wireless access points, which …

Critical QNAP NAS vulnerability fixed, update your device ASAP! (CVE-2022-27596)

January 31, 2023

QNAP Systems has fixed a critical vulnerability (CVE-2022-27596) affecting QNAP network-attached storage (NAS) devices, which could be exploited by remote attackers to inject …

Critical OpenEMR vulnerabilities may allow attackers to access patients’ health records

January 30, 2023

Critical vulnerabilities discovered in OpenEMR can be chained to gain code execution on a server running a vulnerable version of the popular open-source electronic health …

Researchers release PoC exploit for critical Windows CryptoAPI bug (CVE-2022-34689)

January 26, 2023

Akamai researchers have published a PoC exploit for a critical vulnerability (CVE-2022-34689) in Windows CryptoAPI, which validates public key certificates. “An attacker …

Critical VMware vRealize Log Insight flaws patched (CVE-2022-31706, CVE-2022-31704)

January 25, 2023

VMware has fixed two critical (CVE-2022-31706, CVE-2022-31704) and two important (CVE-2022-31710, CVE-2022-31711) security vulnerabilities in VMware vRealize Log Insight, its …

Extent of reported CVEs overwhelms critical infrastructure asset owners

January 23, 2023

The sheer volume of reported ICS vulnerabilities and CVEs may cause critical infrastructure asset owners to feel overwhelmed, or need help knowing where to begin, according to …