Collaborate Disseminate
A second remote code execution vulnerability, tracked as CVE-2024-6409, was found in OpenSSH during an analysis of the regreSSHion flaw.
The post Microsoft Says Windows Not Impacted by regreSSHion as Second OpenSSH Bug Is Found appeared first on Securi… Continue reading Microsoft Says Windows Not Impacted by regreSSHion as Second OpenSSH Bug Is Found
Twilio has confirmed a data breach after hackers leaked 33 million phone numbers associated with the Authy app.
The post Twilio Confirms Data Breach After Hackers Leak 33M Authy User Phone Numbers appeared first on SecurityWeek.
Continue reading Twilio Confirms Data Breach After Hackers Leak 33M Authy User Phone Numbers
Twilio has confirmed a data breach after hackers leaked 33 million phone numbers associated with the Authy app.
The post Twilio Confirms Data Breach After Hackers Leak 33M Authy User Phone Numbers appeared first on SecurityWeek.
Continue reading Twilio Confirms Data Breach After Hackers Leak 33M Authy User Phone Numbers
Roundup of the more than two dozen cybersecurity-related merger and acquisition (M&A) deals announced in June 2024.
The post Cybersecurity M&A Roundup: 29 Deals Announced in June 2024 appeared first on SecurityWeek.
Continue reading Cybersecurity M&A Roundup: 29 Deals Announced in June 2024
Researchers disclosed a new high-precision Branch Target Injection attack method named Indirector, but Intel says no new mitigations are needed.
The post Intel Says No New Mitigations Required for Indirector CPU Attack appeared first on SecurityWeek.
Continue reading Intel Says No New Mitigations Required for Indirector CPU Attack
The critical OpenSSH vulnerability tracked as regreSSHion and CVE-2024-6387 may already be targeted by attackers, but mass exploitation is unlikely.
The post regreSSHion OpenSSH Flaw: Potential Exploitation Attempts Seen, but Mass Attacks Unlikely appe… Continue reading regreSSHion OpenSSH Flaw: Potential Exploitation Attempts Seen, but Mass Attacks Unlikely
Fintech companies Wise and Affirm are impacted by the data breach at Evolve Bank, which has shared additional details on the recent ransomware attack.
The post Evolve Bank Shares Data Breach Details as Fintech Firms Report Being Hit appeared first on S… Continue reading Evolve Bank Shares Data Breach Details as Fintech Firms Report Being Hit
PTC has patched a critical vulnerability in the Creo Elements/Direct License Server that can be exploited for unauthenticated command execution.
The post Critical Flaw in PTC License Server Can Allow Lateral Movement in Industrial Organizations appeare… Continue reading Critical Flaw in PTC License Server Can Allow Lateral Movement in Industrial Organizations
Google has announced a new KVM bug bounty program named kvmCTF with rewards of up to $250,000 for a full VM escape.
The post Google Offering $250,000 for Full VM Escape in New KVM Bug Bounty Program appeared first on SecurityWeek.
Continue reading Google Offering $250,000 for Full VM Escape in New KVM Bug Bounty Program
Millions of OpenSSH servers could be vulnerable to unauthenticated remote code execution due to a vulnerability tracked as regreSSHion and CVE-2024-6387.
The post Millions of OpenSSH Servers Potentially Vulnerable to Remote regreSSHion Attack appeared … Continue reading Millions of OpenSSH Servers Potentially Vulnerable to Remote regreSSHion Attack