Newswires
December 19, 2023
The cybercriminal collective known as the 8220 Gang has been detected exploiting a significant vulnerability (CVE-2020-14883) in Oracle's WebLogic Server to disseminate their malware.
December 18, 2023
Microsoft has unearthed four vulnerabilities in the Perforce Helix Core Server, a source code management platform extensively utilized in the gaming, government, military, and technology industries.
December 18, 2023
New insights have been disclosed about two recently patched security vulnerabilities in Microsoft Windows that could be exploited by cybercriminals to perform remote code execution on the Outlook email service without any user action.
December 14, 2023
NKAbuse, a new multi-platform malware, is the first to exploit the NKN (New Kind of Network) technology for data exchange, making it a covert threat.
December 13, 2023
The US Cybersecurity and Infrastructure Security Agency (CISA), along with its cybersecurity partners and intelligence services, has issued a warning that the APT29 hacking group, associated with Russia's Foreign Intelligence Service (SVR), has been focusing on unpatched TeamCity servers in a series of widespread attacks beginning in September 2023.
December 13, 2023
Hackers have begun to exploit a recently resolved critical vulnerability in Apache Struts, an open-source web application framework.
December 13, 2023
Sophos has retroactively implemented a fix for the critical code injection vulnerability, CVE-2022-3236, in its end-of-life (EOL) firewall firmware versions.
December 12, 2023
Microsoft's December 2023 Patch Tuesday has seen the release of security updates addressing a total of 34 vulnerabilities, including one previously disclosed but unpatched flaw in AMD CPUs.
December 12, 2023
A major unauthenticated remote control execution (RCE) vulnerability has been discovered in a widely used WordPress plug-in, Backup Migration, exposing many WordPress websites to potential compromise.
December 12, 2023
Approximately 1,450 instances of pfSense, a widely used open-source firewall and router software, are currently exposed to potential remote code execution (RCE) attacks.
