Collaborate Disseminate
A researcher analyzing building access control vulnerabilities says a US healthcare facility has yet to patch security holes one year after being notified.
The post Researcher Says Healthcare Facility’s Doors Hackable for Over a Year appeared fir… Continue reading Researcher Says Healthcare Facility’s Doors Hackable for Over a Year
CVE-2024-7593 is the third Ivanti product vulnerability patched in recent months that has been exploited in the wild.
The post Third Recent Ivanti Vulnerability Exploited in the Wild appeared first on SecurityWeek.
Continue reading Third Recent Ivanti Vulnerability Exploited in the Wild
Bitsight finds critical vulnerabilities in several automatic tank gauge (ATG) products used in various critical infrastructure sectors.
The post Automatic Tank Gauges Used in Critical Infrastructure Plagued by Critical Vulnerabilities appeared first on… Continue reading Automatic Tank Gauges Used in Critical Infrastructure Plagued by Critical Vulnerabilities
Hackers can take control of Riello UPS devices by exploiting unpatched vulnerabilities, a cybersecurity company has warned.
The post Unpatched Vulnerabilities Expose Riello UPSs to Hacking: Security Firm appeared first on SecurityWeek.
Continue reading Unpatched Vulnerabilities Expose Riello UPSs to Hacking: Security Firm
Deloitte says no sensitive data exposed after a notorious hacker leaked what he claimed to be internal communications.
The post Deloitte Says No Threat to Sensitive Data After Hacker Claims Server Breach appeared first on SecurityWeek.
Continue reading Deloitte Says No Threat to Sensitive Data After Hacker Claims Server Breach
Microchip Advanced Software Framework (ASF) 3 is affected by a critical vulnerability that could lead to remote code execution.
The post CERT/CC Warns of Unpatched Critical Vulnerability in Microchip ASF appeared first on SecurityWeek.
Continue reading CERT/CC Warns of Unpatched Critical Vulnerability in Microchip ASF
The Tor Project has responded to claims that German law enforcement has found a way to deanonymize users.
The post Tor Responds to Reports of German Police Deanonymizing Users appeared first on SecurityWeek.
Continue reading Tor Responds to Reports of German Police Deanonymizing Users
In addition to the Ivanti CSA flaw CVE-2024-8190, another vulnerability affecting the same product, tracked as CVE-2024-8963, has been exploited.
The post Ivanti Warns of Second CSA Vulnerability Exploited in Attacks appeared first on SecurityWeek.
Continue reading Ivanti Warns of Second CSA Vulnerability Exploited in Attacks
CISA is warning organizations that two Oracle vulnerabilities tracked as CVE-2022-21445 and CVE-2020-14644 are being exploited in the wild.
The post CISA: Oracle Vulnerabilities From ‘Miracle Exploit’ Targeted in Attacks appeared first on … Continue reading CISA: Oracle Vulnerabilities From ‘Miracle Exploit’ Targeted in Attacks
The US government has announced the disruption of Raptor Train, a Flax Typhoon botnet powered by hacked consumer devices.
The post US Disrupts ‘Raptor Train’ Botnet of Chinese APT Flax Typhoon appeared first on SecurityWeek.
Continue reading US Disrupts ‘Raptor Train’ Botnet of Chinese APT Flax Typhoon