Tag: vulnerabilities

CISA Adds SonicWall SonicOS MFA Bypass Vulnerability To KEV Catalog

Risk & Resilience
CISA has added CVE-2026-19868 to its Known Exploited Vulnerabilities catalog after reports of potential exploitation targeting SonicWall SonicOS SSL-VPN.

Researchers Reveal Connected Car Account Takeover Risks At Two Automakers

Risk & Resilience
Security researchers found misconfigured ForgeRock identity systems that exposed customer accounts and connected-car controls at two unnamed automakers.

AhsayCBS Vulnerabilities Exploited To Install Crypto Miners On Affected Systems

Risk & Resilience
Threat actors are exploiting AhsayCBS vulnerabilities to gain remote access, deploy web shells, and install XMRig cryptocurrency miners disguised as Microsoft Edge processes.

Kiteworks Issues Preventive System Shutdown Advisory Following Threat Intelligence Alert

Risk & Resilience
Kiteworks has advised customers to temporarily shut down systems after receiving threat intelligence about a possible cyber attack while stating no customer compromise has been confirmed.

CISA Lists Five Exploited Vulnerabilities Affecting Artifactory ScreenConnect And RouterOS

Risk & Resilience
CISA has added five actively exploited vulnerabilities affecting JFrog Artifactory, ConnectWise ScreenConnect, and MikroTik RouterOS to its Known Exploited Vulnerabilities catalog.

JFrog Artifactory Vulnerabilities Allow Attackers To Create Admin Accounts And Malware Access

Risk & Resilience
Attackers chained JFrog Artifactory flaws to gain administrator control, create accounts, install malicious plugins, and deploy backdoors on vulnerable self-hosted servers.

CISA Updates KEV Catalog With Seven Actively Exploited Security Vulnerabilities

Risk & Resilience
CISA has added seven actively exploited vulnerabilities to its Known Exploited Vulnerabilities catalog following reports of reverse shell deployment, cryptocurrency mining, and attacks targeting AI infrastructure.

Critical Langflow And Ruby On Rails Vulnerabilities Face Active Exploitation

Risk & Resilience
VulnCheck has detected active exploitation of critical Langflow and Ruby on Rails vulnerabilities, with attackers targeting credentials, sensitive data and remote code execution.

Cisco Releases Security Updates For Critical Crosswork And Secure Workload Vulnerabilities

Risk & Resilience
Cisco has released security updates addressing nine vulnerabilities in Crosswork platforms and Secure Workload Software, including five critical flaws with CVSS 10.0 ratings.

Critical NASA Ground Software Flaws Allow Unauthenticated Spacecraft Control

Risk & Resilience
Security researchers at Cycode have identified critical flaws in NASA AIT-GUI software that allow attackers to issue unauthenticated spacecraft commands.

CISA Flags Apple Microsoft And VMware Vulnerabilities Exploited In Active Attacks

Risk & Resilience
CISA adds four critical vulnerabilities affecting macOS, SharePoint, VMware vCenter, and Microsoft IKE Service Extensions to its KEV catalog.

Redis Releases Security Fixes For AI Discovered Remote Code Execution Flaws

Risk & Resilience
Redis has released seven security updates after researchers disclosed AI discovered vulnerabilities that could enable authenticated remote code execution through Redis Streams and RedisBloom components.

NodeBB Releases Security Updates For Eight High Severity Vulnerabilities

Risk & Resilience
NodeBB has patched eight high severity vulnerabilities identified by Aikido Security AI pentest agents, urging administrators to upgrade to version 4.14.2 to protect forums from potential attacks.

Unpatched Vulnerabilities Found In FatFs Filesystem Affecting Millions Of Embedded And IoT Devices

Risk & Resilience
Security researchers have disclosed seven vulnerabilities in FatFs filesystem library used in embedded devices, exposing risks across IoT systems including cameras, drones, industrial controllers, and more.
12Page 1 of 2

Recent articles

spot_img