VirusTotal Provides Clarifications on Data Leak Affecting Premium Accounts

VirusTotal has provided clarifications on the recent data leak that resulted in the exposure of information on 5,600 of the threat analysis service’s customers.
The post VirusTotal Provides Clarifications on Data Leak Affecting Premium Accounts appear… Continue reading VirusTotal Provides Clarifications on Data Leak Affecting Premium Accounts

Citrix Zero-Day Exploited Against Critical Infrastructure Organization

CISA says the new Citrix zero day vulnerability tracked as CVE-2023-3519 has been exploited against a critical infrastructure organization.
The post Citrix Zero-Day Exploited Against Critical Infrastructure Organization appeared first on SecurityWeek.
Continue reading Citrix Zero-Day Exploited Against Critical Infrastructure Organization

New AMI BMC Flaws Allowing Takeover and Physical Damage Could Impact Millions of Devices

Two new serious vulnerabilities in AMI BMC, which is used by millions of devices, can allow attackers to take control of systems and cause physical damage.
The post New AMI BMC Flaws Allowing Takeover and Physical Damage Could Impact Millions of Device… Continue reading New AMI BMC Flaws Allowing Takeover and Physical Damage Could Impact Millions of Devices

Recently Patched GE Cimplicity Vulnerabilities Reminiscent of Russian ICS Attacks

Over a dozen vulnerabilities patched by GE in its Cimplicity HMI/SCADA product are reminiscent of ICS attacks conducted by the Russian Sandworm group.
The post Recently Patched GE Cimplicity Vulnerabilities Reminiscent of Russian ICS Attacks appeared … Continue reading Recently Patched GE Cimplicity Vulnerabilities Reminiscent of Russian ICS Attacks

Exploitation of New Citrix Zero-Day Likely to Increase, Organizations Warned

Citrix has patched several vulnerabilities, including CVE-2023-3519, a critical remote code execution zero-day that has been exploited in attacks.
The post Exploitation of New Citrix Zero-Day Likely to Increase, Organizations Warned appeared first on S… Continue reading Exploitation of New Citrix Zero-Day Likely to Increase, Organizations Warned

Two New Adobe ColdFusion Vulnerabilities Exploited in Attacks

At least two new Adobe ColdFusion vulnerabilities have been exploited in the wild, including one that has not been completely patched by the software giant.
The post Two New Adobe ColdFusion Vulnerabilities Exploited in Attacks appeared first on Securi… Continue reading Two New Adobe ColdFusion Vulnerabilities Exploited in Attacks