Collaborate Disseminate
November 2024 Patch Tuesday is here, and Microsoft has dropped fixes for 89 new security issues in its various products, two of which – CVE-2024-43451 and CVE-2024-49039 – are actively exploited by attackers. The exploited vulnerabilities (… Continue reading Microsoft fixes actively exploited zero-days (CVE-2024-43451, CVE-2024-49039)
Aftermath of MOVEit vulnerability: Data vigilante ‘Nam3L3ss’ leaks nearly 8 million employee records from industry giants like Amazon,… Continue reading Data Vigilante Leaks 8 Million Employee Records from Amazon, HP and Others
Sergiu Gatlan reports: Amazon confirmed a data breach involving employee information after data allegedly stolen during the May 2023 MOVEit attacks was leaked on a hacking forum. The threat actor behind this data leak, known as Nam3L3ss, published over… Continue reading Amazon confirms employee data breach after vendor hack
A vulnerability in Microsoft Bookings can expose your organization to serious security risks. Learn how attackers can exploit… Continue reading Microsoft Bookings Flaw Enables Account Hijacking and Impersonation
A critical security vulnerability in Palo Alto Networks’ Expedition tool is being actively exploited by hackers. CISA urges… Continue reading CISA Urges Patching of Critical Palo Alto Networks’ Expedition Tool Vulnerability
Hackers can exploit critical vulnerabilities in Mazda’s infotainment system, including one that enables code execution via USB, compromising… Continue reading Hackers Can Access Mazda Vehicle Controls Via System Vulnerabilities
A vulnerability (CVE-2024-5910) in Palo Alto Networks Expedition, a firewall configuration migration tool, is being exploited by attackers in the wild, the Cybersecurity and Infrastructure Security Agency (CISA) confirmed on Thursday. About CVE-2024-59… Continue reading Critical Palo Alto Networks Expedition bug exploited (CVE-2024-5910)
I am looking at this vulnerability: CVE-2019-0231
The NVD description says:
Handling of the close_notify SSL/TLS message does not lead to a
connection closure, leading the server to retain the socket opened and
to have the client potentia… Continue reading why CVE-2019-0231 is critical? [closed]
CloudSEK reports that the Androxgh0st botnet has integrated with the Mozi botnet and exploits a wide range of… Continue reading Androxgh0st Botnet Integrates Mozi, Expands Attacks on IoT Vulnerabilities
Cisco has fixed a critical command injection vulnerability (CVE-2024-20418) affecting its Ultra-Reliable Wireless Backhaul (URWB) Access Points that can be exploited via a HTTP requests and allows complete compromise of the devices. There are no workar… Continue reading Critical vulnerability in Cisco industrial wireless access points fixed (CVE-2024-20418)