The Apache CloudStack project has issued an important security advisory alongside the release of Long-Term Support (LTS) updates, versions 4.18.2.5 and 4.19.1.3, addressing a critical vulnerability, CVE-2024-50386 (CVSS 8.5), affecting...
Zoom Video Communications has issued a security bulletin addressing multiple vulnerabilities affecting its Workplace Apps, SDKs, and Rooms Clients across various platforms. These flaws could allow attackers to escalate privileges,...
Two severe vulnerabilities have been discovered in Kanboard, a project management software that adheres to the Kanban methodology. Both vulnerabilities, identified by Deutsche Telekom Security GmbH, pose significant threats to...
Modern IT environments are becoming increasingly complicated since organizations require better performance, larger volumes of data and bigger storage to support production and provide quality services. In addition, IT infrastructures...
Microsoft’s November 2024 Patch Tuesday addresses 92 vulnerabilities, including four critical and 83 deemed “important.” Notably, this release includes patches for four zero-day vulnerabilities actively exploited in the wild, underscoring...
ClearSky Cyber Security has recently uncovered a new Iranian campaign targeting the aerospace industry with a deceitful “dream job” scheme. This campaign, dubbed the Iranian “Dream Job” campaign, involves the...
Dell Networking has released security updates for its SmartFabric OS10 operating system to address multiple vulnerabilities that could be exploited by malicious actors. The vulnerabilities affect several versions of OS10...
In a recent discovery, Cyble Research and Intelligence Lab (CRIL) detailed a complex, multi-stage PowerShell campaign that employs several advanced techniques to infiltrate networks, maintain persistence, and enable covert communications....
Software company Ivanti has released urgent security updates for its Endpoint Manager to address a range of vulnerabilities, including several that could allow for remote code execution (RCE). The vulnerabilities,...
Security researchers at watchTowr have uncovered two critical vulnerabilities in Citrix Session Recording Manager that, when chained together, allow unauthenticated remote code execution (RCE) on Citrix Virtual Apps and Desktops....
Citrix has issued a security bulletin warning of two vulnerabilities affecting NetScaler ADC and NetScaler Gateway, products that provide application delivery and security services. The vulnerabilities, tracked as CVE-2024-8534 and...
A critical security vulnerability has been discovered in Siemens TeleControl Server Basic V3.1, a software solution used for remote monitoring and control of industrial plants. The vulnerability, identified as CVE-2024-44102...
Schneider Electric has issued a security notification regarding critical vulnerabilities in its Modicon M340, Momentum, and MC80 controllers. These programmable automation controllers (PACs) are used widely in industrial settings to...
SAP has released eight new security notes and two updates to previously released notes in its November 2024 Security Patch Day, addressing critical vulnerabilities across various products. The security notes...
In a surprise move, Broadcom has announced that VMware Fusion and Workstation, its popular desktop hypervisor products, are now completely free for all users. This significant shift, effective November 11,...
Support Securityonline.info site. Thanks!
