Collaborate Disseminate
In this video for Help Net Security, Yotam Perkal, VP of Research at Rezilion, talks about the most critical vulnerabilities published during Q1 2022, and the relevant remediation and mitigation steps you need to take. The first quarter of 2022 was pac… Continue reading Vulnerabilities that kept security leaders busy in Q1 2022
A team of security researchers has discovered that attackers are… Continue reading New Report Says Hackers Exploiting Spring4Shell Flaw to Spread Mirai Malware
Microsoft has published details about a critical security vulnerability dubbed… Continue reading Microsoft Publishes Advisory About New Spring4Shell Cyberattacks
It’s been almost a week since the Spring4Shell vulnerability (CVE-2022-22965) came to light and since the Spring development team fixed it in new versions of the Spring Framework. There have been reports of scanning, exploit attempts and attempts… Continue reading CISA adds Spring4Shell to list of exploited vulnerabilities
Web applications created in the Spring platform could leave users open to remote code execution, CISA and others are warning.
The post ‘Spring4Shell’ bug in framework for Java programming draws widespread warnings appeared first on CyberScoop.
Continue reading ‘Spring4Shell’ bug in framework for Java programming draws widespread warnings
[Editor’s note: There is a second, fake iteration of this column out today. This is obviously the real column.] An alert from CISA, combined with an unsealed pair of indictments, …read more Continue reading This Week in Security: More State-Sponsored Activity, Spring4Shell
In this video for Help Net Security, Ax Sharma, Senior Security Researcher at Sonatype, talks about the latest developments regarding Spring4Shell, the unauthenticated RCE zero-day vulnerability in Spring Core whose existence has finally been confirmed… Continue reading Spring4Shell: New info and fixes (CVE-2022-22965)
Whoever came up with the name “Spring4Shell” didn’t help at all… we cut through the Spring Bug confusion Continue reading Two different “VMware Spring” bugs at large – we cut through the confusion