PoC Exploit Released for Critical Git RCE Vulnerability

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical vulnerability in Git, identified as CVE-2024-32002, has recently come to light, posing significant risks to users of the widely used version control system. The vulnerability allows for remote code execution (RCE) during the cloning of repositories with submodules, …

Chrome Security Update : Patch for High Severity Flaws

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Google has recently rolled out a crucial security update for its Chrome web browser, applicable to Windows, Mac, and Linux operating systems. This update aims to rectify various vulnerabilities, with some being classified as high severity. The latest stable channel …

EPA Warns Of Cyber Attacks & Vulnerabilities In Drinking Water Systems

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The U.S. Environmental Protection Agency (EPA) has sent an enforcement warning about the serious cyber threats and holes in community drinking water systems. The National Security Council and the Cybersecurity and Infrastructure Security Agency (CISA) of the Department of Homeland …

Ivanti Endpoint Manager SQL Injection Flaw Let Attackers Execute Arbitrary Code

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Multiple vulnerabilities involving SQL injection have been identified in Ivanti Endpoint Manager. These vulnerabilities could potentially enable malicious actors to carry out various unauthorized actions, including initiating Denial of Service attacks and executing arbitrary code on affected systems. One of …

Veeam Enterprise Backup Manager Flaw Allows Unauthorized Access

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Veeam Backup And Replication is backup software for creating secure backups that enable clean recovery and data resilience. The software replicates VM backups to a secondary location, which will quickly recover from a failover to a replica VM during a …

Rockwell Automation Warns Admin to Disconnect Devices From Internet

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Rockwell Automation has sent an urgent message to all of its customers because of rising geopolitical issues and hostile cyber activity worldwide. The company is asking that any devices currently connected to the public internet be checked out immediately and …

Critical VMware Vulnerabilities Let Attackers Execute Code & Trigger DOS

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

VMware, a leading virtualization and cloud computing software provider, has issued patches for several critical and important vulnerabilities affecting its ESXi, Workstation, Cloud Foundation, and Fusion products. If exploited, these vulnerabilities could allow attackers to execute malicious code on host …

Critical Unauthenticated RCE Vulnerability in Fortinet FortiSIEM: PoC Published

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A proof-of-concept (PoC) exploit has been released for a critical unauthenticated, remote code execution vulnerability in Fortinet FortiSIEM, tracked as CVE-2023-34992. The vulnerability, which has a CVSS score of 10.0, was discovered by researchers at Horizon3.ai during an audit of …

New Hijack Loader Attack Windows with Enhanced Anti-Evasion Capabilities

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Security researchers from ANY.RUN have identified a new version of the Hijack Loader malware, which now boasts updated anti-evasion techniques. This development marks a significant evolution in the malware’s ability to avoid detection and enhance its stealth operations. Hijack Loader, …

Why Your Wi-Fi Router Doubles as an Apple AirTag

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

Image: Shutterstock. Apple and the satellite-based broadband service Starlink each recently took steps to address new research into the potential security and privacy implications of how their services geo-locate devices. Researchers from the University of Maryland say they relied on …