Collaborate Disseminate
Canadian authorities arrest a suspect linked to the Snowflake data breach, exposing vulnerabilities in cloud infrastructure. The breach… Continue reading Canada Arrests Suspected Hacker Linked to Snowflake Data Breaches
I am looking at this CVE: https://nvd.nist.gov/vuln/detail/CVE-2021-22044
The description says:
In Spring Cloud OpenFeign 3.0.0 to 3.0.4, 2.2.0.RELEASE to
2.2.9.RELEASE, and older unsupported versions, applications using type-level @Reque… Continue reading how is CVE-2021-22044 risky
Google has delivered fixes for two vulnerabilities endangering Android users that “may be under limited, targeted exploitation”: CVE-2024-43047, a flaw affecting Qualcomm chipsets, and CVE-2024-43093, a vulnerability in the Google Play fram… Continue reading Google patches actively exploited Android vulnerability (CVE-2024-43093)
The November security bulletin includes two CVE’s reportedly exploited in the wild.
The post Android warns of Qualcomm exploit in latest security bulletin appeared first on CyberScoop.
Continue reading Android warns of Qualcomm exploit in latest security bulletin
Synology has released fixes for an unauthenticated “zero-click” remote code execution flaw (CVE-2024-10443, aka RISK:STATION) affecting its popular DiskStation and BeeStation network attached storage (NAS) devices. About CVE-2024-10443 CVE-… Continue reading Millions of Synology NAS devices vulnerable to zero-click attacks (CVE-2024-10443)
Mindgard researchers uncovered critical vulnerabilities in Microsoft’s Azure AI Content Safety service, allowing attackers to bypass its safeguards… Continue reading Azure AI Vulnerabilities Allowed Attacks to Bypass Moderation Safeguards
A threat actor – or possibly several – has hit approximately 22,000 vulnerable instances of CyberPanel and encrypted files on the servers running it with the PSAUX and other ransomware. The PSAUX ransom note (Source: LeakIX) The CyberPanel … Continue reading Ransomware hits web hosting servers via vulnerable CyberPanel instances
Apple unveils ‘Apple Intelligence’ for iPhone, iPad, and Mac devices while offering a $1 million bug bounty for… Continue reading Apple Launches ‘Apple Intelligence’ and Offers $1M Bug Bounty for Security
This article details a new campaign by TeamTNT, a notorious hacking group, leveraging exposed Docker daemons to deploy… Continue reading TeamTNT Exploits 16 Million IPs in Malware Attack on Docker Clusters
Fortinet and Mandiant investigated the mass exploitation of FortiManager devices via CVE-2024-47575, impacting 50+ systems across industries. Threat… Continue reading UNC5820 Exploits FortiManager Zero-Day Vulnerability (CVE-2024-47575)