Collaborate Disseminate
Four EPICS Base flaws found by an autonomous system could let attackers crash processes at particle accelerators and fusion labs.
The post Long-Hidden Flaws Patched in EPICS Research Facility Control Software appeared first on SecurityWeek.
Continue reading Long-Hidden Flaws Patched in EPICS Research Facility Control Software
CISA added the Brotli flaw to its KEV catalog, and two honeypot operators logged attempts, including one that used a broken exploit.
The post CISA Warns of Node2Shell Exploitation as Honeypots Log Attack Attempts appeared first on SecurityWeek.
Continue reading CISA Warns of Node2Shell Exploitation as Honeypots Log Attack Attempts
Tailscale is preparing a patch for Tailscale SSH flaws whose details went public over the weekend, before any fixes had been released.
The post Tailscale Rushes Patches After Uncoordinated Disclosure of ‘Tailworm’ Flaws appeared first on Se… Continue reading Tailscale Rushes Patches After Uncoordinated Disclosure of ‘Tailworm’ Flaws
Apple patched 286 vulnerabilities in iOS and macOS 27.2 and brought the fix for an exploited CoreGraphics zero-day to older iPhones.
The post iOS, macOS 27.2 Patch 286 Bugs; Fix for Exploited Flaw Backported to iOS 18 appeared first on SecurityWeek.
Continue reading iOS, macOS 27.2 Patch 286 Bugs; Fix for Exploited Flaw Backported to iOS 18
Blue Initiative indexes nearly 30,000 IT and OT vulnerabilities relevant to ships and ports, 37 of them in maritime-specific products.
The post Maritime Coalition Launches Free Vulnerability Database for Ship and Port Systems appeared first on Security… Continue reading Maritime Coalition Launches Free Vulnerability Database for Ship and Port Systems
Siemens, Schneider Electric, ABB and others have confirmed that some of their products are affected by the PHP2Shell vulnerabilities.
The post Industrial Vendors Check Products for PHP2Shell Vulnerabilities appeared first on SecurityWeek.
Continue reading Industrial Vendors Check Products for PHP2Shell Vulnerabilities
Attackers successfully exploited the PHP2Shell flaws against honeypots, launching 35 shells from two IP addresses on October 24.
The post PHP2Shell Exploitation Moves From Probes to Working Shells appeared first on SecurityWeek.
Continue reading PHP2Shell Exploitation Moves From Probes to Working Shells
An out-of-bounds write in Google’s Brotli decoder affects Node.js, .NET, PowerShell, and Python packages, and can lead to code execution.
The post Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages appeared first on Se… Continue reading Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages
Researchers tie PHP2Shell attempts to a Mirai botnet and show an ASLR bypass, but no successful compromise has been confirmed yet.
The post Mirai Botnet Operators Join PHP2Shell Attacks as ASLR Bypass Exploits Emerge appeared first on SecurityWeek.
Continue reading Mirai Botnet Operators Join PHP2Shell Attacks as ASLR Bypass Exploits Emerge
Atlassian’s October bulletin lists 176 vulnerability entries, including 14 critical-severity issues, all in third-party components.
The post Atlassian Patches 75 Flaws in Data Center and Server Products appeared first on SecurityWeek.
Continue reading Atlassian Patches 75 Flaws in Data Center and Server Products