Collaborate Disseminate
VMware warns customers that CVE-2023-34048, a vCenter Server vulnerability patched in October 2023, is being exploited in the wild.
The post VMware vCenter Server Vulnerability Exploited in Wild appeared first on SecurityWeek.
Continue reading VMware vCenter Server Vulnerability Exploited in Wild
Seven vulnerabilities found in Rapid SCADA could be exploited to gain access to sensitive industrial systems, but they remain unpatched.
The post Unpatched Rapid SCADA Vulnerabilities Expose Industrial Organizations to Attacks appeared first on Securit… Continue reading Unpatched Rapid SCADA Vulnerabilities Expose Industrial Organizations to Attacks
Russian threat group ColdRiver has developed Spica, a malware that enables it to compromise systems and steal information.
The post Russian APT Known for Phishing Attacks Is Also Developing Malware, Google Warns appeared first on SecurityWeek.
Continue reading Russian APT Known for Phishing Attacks Is Also Developing Malware, Google Warns
Foxsemicon’s website defaced with a message from the LockBit ransomware group, which claims to have stolen 5 Tb of data.
The post Ransomware Group Targets Foxconn Subsidiary Foxsemicon appeared first on SecurityWeek.
Continue reading Ransomware Group Targets Foxconn Subsidiary Foxsemicon
Researchers show how a new attack named LeftoverLocals, which impacts GPUs from AMD, Apple and Qualcomm, can be used to obtain AI data.
The post AI Data Exposed to ‘LeftoverLocals’ Attack via Vulnerable AMD, Apple, Qualcomm GPUs appeared fi… Continue reading AI Data Exposed to ‘LeftoverLocals’ Attack via Vulnerable AMD, Apple, Qualcomm GPUs
Citrix is aware of attacks exploiting two new NetScaler ADC and Gateway zero-day vulnerabilities tracked as CVE-2023-6548 and CVE-2023-6549.
The post Citrix Warns NetScaler ADC Customers of New Zero-Day Exploitation appeared first on SecurityWeek.
Continue reading Citrix Warns NetScaler ADC Customers of New Zero-Day Exploitation
Aria Automation is affected by a critical vulnerability that could be exploited to gain access to remote organizations and workflows.
The post VMware Urges Customers to Patch Critical Aria Automation Vulnerability appeared first on SecurityWeek.
Continue reading VMware Urges Customers to Patch Critical Aria Automation Vulnerability
The recently disclosed Ivanti VPN zero-days have been exploited to hack at least 1,700 devices, including government, telecoms, defense, and tech.
The post Government, Military Targeted as Widespread Exploitation of Ivanti Zero-Days Begins appeared fir… Continue reading Government, Military Targeted as Widespread Exploitation of Ivanti Zero-Days Begins
Netscout sees over one million IPs conducting reconnaissance scanning on the web due to increase in use of cheap or free cloud servers.
The post Cloud Server Abuse Leads to Huge Spike in Botnet Scanning appeared first on SecurityWeek.
Continue reading Cloud Server Abuse Leads to Huge Spike in Botnet Scanning
Juniper Networks patches over 100 vulnerabilities, including a critical flaw that can be exploited for remote code execution against firewalls and switches.
The post Juniper Networks Patches Critical Remote Code Execution Flaw in Firewalls, Switches ap… Continue reading Juniper Networks Patches Critical Remote Code Execution Flaw in Firewalls, Switches