Collaborate Disseminate
Akamai flags six zero-day vulnerabilities in Hitron DVRs exploited to ensnare devices in the InfectedSlurs botnet.
The post Hitron DVR Zero-Day Vulnerabilities Exploited by InfectedSlurs Botnet appeared first on SecurityWeek.
Continue reading Hitron DVR Zero-Day Vulnerabilities Exploited by InfectedSlurs Botnet
The Atlassian Confluence vulnerability CVE-2023-22527 is being exploited in the wild just days after it was disclosed.
The post Hackers Targeting Critical Atlassian Confluence Vulnerability Days After Disclosure appeared first on SecurityWeek.
Continue reading Hackers Targeting Critical Atlassian Confluence Vulnerability Days After Disclosure
CVE-2023-34048, a vCenter Server vulnerability patched in October 2023, had been exploited as zero-day for a year and a half.
The post Chinese Spies Exploited VMware vCenter Server Vulnerability Since 2021 appeared first on SecurityWeek.
Continue reading Chinese Spies Exploited VMware vCenter Server Vulnerability Since 2021
The number of Ivanti VPN appliances compromised through exploitation of recent flaws increases and another vulnerability is added to exploited list.
The post Ivanti EPMM Vulnerability Targeted in Attacks as Exploitation of VPN Flaws Increases appeared … Continue reading Ivanti EPMM Vulnerability Targeted in Attacks as Exploitation of VPN Flaws Increases
VMware warns customers that CVE-2023-34048, a vCenter Server vulnerability patched in October 2023, is being exploited in the wild.
The post VMware vCenter Server Vulnerability Exploited in Wild appeared first on SecurityWeek.
Continue reading VMware vCenter Server Vulnerability Exploited in Wild
Citrix is aware of attacks exploiting two new NetScaler ADC and Gateway zero-day vulnerabilities tracked as CVE-2023-6548 and CVE-2023-6549.
The post Citrix Warns NetScaler ADC Customers of New Zero-Day Exploitation appeared first on SecurityWeek.
Continue reading Citrix Warns NetScaler ADC Customers of New Zero-Day Exploitation
The recently disclosed Ivanti VPN zero-days have been exploited to hack at least 1,700 devices, including government, telecoms, defense, and tech.
The post Government, Military Targeted as Widespread Exploitation of Ivanti Zero-Days Begins appeared fir… Continue reading Government, Military Targeted as Widespread Exploitation of Ivanti Zero-Days Begins
CISA has added a critical Microsoft SharePoint Server flaw (CVE-2023-29357) to its Known Exploited Vulnerabilities catalog.
The post CISA Urges Patching of Exploited SharePoint Server Vulnerability appeared first on SecurityWeek.
Continue reading CISA Urges Patching of Exploited SharePoint Server Vulnerability
CISA has added a critical-severity Apache Superset flaw (CVE-2023-27524) to its Known Exploited Vulnerabilities catalog.
The post CISA Warns of Apache Superset Vulnerability Exploitation appeared first on SecurityWeek.
Continue reading CISA Warns of Apache Superset Vulnerability Exploitation
Shadowserver sees possible in-the-wild exploitation of a critical Apache OFBiz vulnerability tracked as CVE-2023-49070.
The post Critical Apache OFBiz Vulnerability in Attacker Crosshairs appeared first on SecurityWeek.
Continue reading Critical Apache OFBiz Vulnerability in Attacker Crosshairs