Collaborate Disseminate
Google has patched CVE-2024-36971, a high-severity kernel zero-day vulnerability in Android that has been exploited in targeted attacks.
The post Google Patches Android Zero-Day Exploited in Targeted Attacks appeared first on SecurityWeek.
Continue reading Google Patches Android Zero-Day Exploited in Targeted Attacks
An Avtech camera vulnerability that likely remains unfixed has been exploited in the wild, according to CISA.
The post CISA Warns of Avtech Camera Vulnerability Exploited in Wild appeared first on SecurityWeek.
Continue reading CISA Warns of Avtech Camera Vulnerability Exploited in Wild
Threat actors have started exploiting critical-severity vulnerabilities in ServiceNow shortly after public disclosure.
The post Threat Actors Exploit Fresh ServiceNow Vulnerabilities in Attacks appeared first on SecurityWeek.
Continue reading Threat Actors Exploit Fresh ServiceNow Vulnerabilities in Attacks
CISA warns of the in-the-wild exploitation of CVE-2024-39891, a Twilio Authy bug leading to the disclosure of phone number data.
The post Organizations Warned of Exploited Twilio Authy Vulnerability appeared first on SecurityWeek.
Continue reading Organizations Warned of Exploited Twilio Authy Vulnerability
Adobe and CISA warn that a recent Adobe Commerce vulnerability has been exploited in the wild.
The post Recent Adobe Commerce Vulnerability Exploited in Wild appeared first on SecurityWeek.
Continue reading Recent Adobe Commerce Vulnerability Exploited in Wild
A recently patched Apache HugeGraph-Server vulnerability tracked as CVE-2024-27348 is being targeted in attacks.
The post Apache HugeGraph Vulnerability Exploited in Wild appeared first on SecurityWeek.
Continue reading Apache HugeGraph Vulnerability Exploited in Wild
CISA says it has evidence that a recent critical-severity vulnerability in GeoServer is exploited in the wild.
The post Organizations Warned of Exploited GeoServer Vulnerability appeared first on SecurityWeek.
Continue reading Organizations Warned of Exploited GeoServer Vulnerability
The Void Banshee APT exploited the CVE-2024-38112 Windows zero-day to infect systems with the Atlantida stealer.
The post APT Exploits Windows Zero-Day to Execute Code via Disabled Internet Explorer appeared first on SecurityWeek.
Continue reading APT Exploits Windows Zero-Day to Execute Code via Disabled Internet Explorer
Cisco has patched an NX-OS command injection zero-day exploited by China-linked cyberespionage group Velvet Ant.
The post Cisco Patches NX-OS Zero-Day Exploited by Chinese Cyberspies appeared first on SecurityWeek.
Continue reading Cisco Patches NX-OS Zero-Day Exploited by Chinese Cyberspies
CISA on Wednesday warned that three older flaws in GeoServer, Linux kernel, and Roundcube webmail are exploited in the wild.
The post CISA Warns of Exploited GeoServer, Linux Kernel, and Roundcube Vulnerabilities appeared first on SecurityWeek.
Continue reading CISA Warns of Exploited GeoServer, Linux Kernel, and Roundcube Vulnerabilities