Cyber Security / Vulnerability
by do son · Published October 12, 2024
Fortinet’s FortiGuard Labs recently released a detailed analysis of a sophisticated cyberattack targeting the Ivanti Cloud Services Appliance (CSA). The attackers, suspected to be a nation-state actor, exploited a chain...
by do son · Published October 12, 2024
HashiCorp has issued a security bulletin disclosing a vulnerability in its Vault secret management platform that could allow attackers to escalate their privileges to the highly sensitive root policy. Tracked...
Microsoft is taking a significant step towards enhancing VPN security by deprecating the aging Point-to-Point Tunneling Protocol (PPTP) and Layer 2 Tunneling Protocol (L2TP) in upcoming versions of Windows Server....
by do son · Published October 11, 2024
Electronics giant Casio has disclosed a significant security breach resulting from a ransomware attack. The incident, which began on October 5th, has impacted various servers, leading to system failures and...
by do son · Published October 11, 2024
Mozilla has issued an urgent security update for its Firefox browser to address a critical vulnerability that is currently being exploited in the wild. The flaw, tracked as CVE-2024-9680 and...
by do son · Published October 11, 2024
In the ever-evolving landscape of cybersecurity, penetration testing (pen testing) and security assessments are vital to identifying vulnerabilities before they can be exploited by malicious actors. However, one of the...
Cyber Security / Vulnerability
by do son · Published October 11, 2024
Recently, the National Security Agency (NSA), Federal Bureau of Investigation (FBI), the United States Cyber Command’s Cyber National Mission Force (CNMF), and the United Kingdom’s National Cyber Security Centre (NCSC)...
Palo Alto Networks has discovered a new ransomware threat actor dubbed “Lynx” that is actively targeting organizations in various sectors across the U.S. and UK. This new malware is not...
by do son · Published October 11, 2024
The Department of Justice (DOJ) has unsealed charges against 18 individuals and entities for widespread fraud and market manipulation. The scheme, which involved cryptocurrency companies, market makers, and fraudulent trading...
by do son · Published October 11, 2024
The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent alert warning organizations about a vulnerability involving unencrypted persistent cookies in the F5 BIG-IP Local Traffic Manager (LTM) module,...
by do son · Published October 10, 2024
In a recent alert, Sophos X-Ops MDR and Incident Response revealed a surge in ransomware attacks exploiting a critical vulnerability in Veeam Backup & Replication software, CVE-2024-40711. Over the past...
by do son · Published October 10, 2024
SonicWall has released security updates to address multiple vulnerabilities affecting its SMA 1000 series SSL-VPN appliances and the associated Connect Tunnel Windows client. These flaws could allow attackers to launch...
by do son · Published October 10, 2024
A critical vulnerability, CVE-2024-9465, has been discovered in Palo Alto Networks’ Expedition tool by security researcher Zach Hanley of Horizon3.ai. This SQL injection flaw, with a CVSS score of 9.2,...
by do son · Published October 10, 2024
A recent security announcement from security researcher Serhii Boiarynov at the Zyxel EMEA team has uncovered malicious activity targeting Zyxel security appliances. Attackers are exploiting previously known vulnerabilities in the...
by do son · Published October 10, 2024
Mitel has issued a critical security advisory addressing a newly discovered vulnerability, CVE-2024-41713, in the MiCollab platform. This path traversal vulnerability, which carries a CVSS score of 9.8, affects the...
Support Securityonline.info site. Thanks!
