Tag: cvss

Fortinet confirms zero-day flaw used in attacks against its firewalls

Jan 15, 2025 5:02 AM

by

Andy Stern

in SecurityNews

Tags: access, advisory, attack, authentication, control, credentials, cve, cvss, cybersecurity, dns, exploit, firewall, flaw, fortinet, framework, google, group, login, malicious, microsoft, network, password, service, threat, update, vpn, vulnerability, zero-day

Fortinet has confirmed the existence of a critical authentication bypass vulnerability in specific versions of FortiOS firewalls and FortiProxy secure web gateways. The flaw has been exploited in the wild since early December in what appears to be an indiscriminate and widespread campaign, according to cybersecurity firm Arctic Wolf.The fix for this zero-day is part…
Cloud Attackers Exploit Max-Critical Aviatrix RCE Flaw

Jan 14, 2025 8:46 AM

by

Andy Stern

in SecurityNews

Tags: cloud, cve, cvss, exploit, flaw, rce, remote-code-execution, vulnerability

The security vulnerability tracked as CVE-2024-50603, which rates 10 out of 10 on the CVSS scale, enables unauthenticated remote code execution on affected systems, which cyberattackers are using to plant malware. First seen on darkreading.com Jump to article: www.darkreading.com/cloud-security/cloud-attackers-exploit-max-critical-aviatrix-rce-flaw
SonicWall firewall hit with critical authentication bypass vulnerability

Jan 9, 2025 9:18 PM

by

Andy Stern

in SecurityNews

Tags: access, authentication, cloud, cve, cvss, email, exploit, firewall, firmware, Hardware, Internet, malicious, network, update, vpn, vulnerability

SonicWall is warning customers of a severe vulnerability in its SonicOS SSLVPN with high exploitability that remote attackers could use to bypass authentication.The bug is an improper authentication vulnerability in the SSL VPN authentication mechanism, according to emails sent to customers and published on SonicWall’s official subreddit.”We have identified a high (severity) firewall vulnerability that…
Ivanti warns critical RCE flaw in Connect Secure exploited as zero-day

Jan 9, 2025 5:18 AM

by

Andy Stern

in SecurityNews

Tags: advisory, apt, attack, authentication, cve, cvss, cybersecurity, data-breach, exploit, flaw, google, government, group, intelligence, Internet, ivanti, law, mandiant, microsoft, network, rce, remote-code-execution, risk, software, threat, tool, vpn, vulnerability, zero-day

IT software provider Ivanti released patches Wednesday for its Connect Secure SSL VPN appliances to address two memory corruption vulnerabilities, one of which has already been exploited in the wild as a zero-day to compromise devices.The exploited vulnerability, tracked as CVE-2025-0282, is a stack-based buffer overflow rated as critical with a CVSS score of 9.0.…
Critical Mitel, Oracle flaws find active exploitation, CISA urges patching

Jan 8, 2025 6:18 PM

by

Andy Stern

in SecurityNews

Tags: access, advisory, attack, cisa, cve, cvss, cyber, cyberattack, cybersecurity, data, exploit, flaw, infrastructure, kev, malicious, network, oracle, risk, unauthorized, update, vulnerability

Attackers are actively expoiting flaws in Mitel MiCollab flaws to gain unauthorized access to sensitive system files, the US Cybersecurity and Infrastructure Security Agency (CISA) has warned.On Tuesday the agency added two path traversal vulnerabilities in the widely used communication platform to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of exploitation.”These type of vulnerabilities…
Open source vulnerability scanner found with a serious vulnerability in its own code

Jan 6, 2025 2:18 PM

by

Andy Stern

in SecurityNews

Tags: access, cloud, cve, cvss, data, flaw, malicious, network, open-source, tool, update, vulnerability

A widely popular open-source tool, Nuclei, used for scanning vulnerabilities and weaknesses in websites, cloud applications, and networks is found to have a high-severity flaw that could potentially allow attackers to execute malicious codes on local systems.The flaw tracked as CVE-2024-43405 is assigned a CVSS score of 7.4 out of 10 and is said to…
Researchers Uncover Nuclei Vulnerability Enabling Signature Bypass and Code Execution

Jan 5, 2025 11:17 AM

by

Andy Stern

in SecurityNews

Tags: cve, cvss, exploit, flaw, malicious, open-source, vulnerability

A high-severity security flaw has been disclosed in ProjectDiscovery’s Nuclei, a widely-used open-source vulnerability scanner that, if successfully exploited, could allow attackers to bypass signature checks and potentially execute malicious code.Tracked as CVE-2024-43405, it carries a CVSS score of 7.4 out of a maximum of 10.0. It impacts all versions of Nuclei later than 3.0.0.”The…
Das anhaltende Risiko der Remote-Code-Ausführung

Jan 4, 2025 12:17 AM

by

Andy Stern

in SecurityNews

Tags: cvss, risk, vulnerability

Im Jahr 2023 wurden fast 29.000 Schwachstellen veröffentlicht, 3.800 mehr als im Jahr 2022. Noch beunruhigender als die schiere Menge der Schwachstellen im Jahr 2023 ist, dass mehr als die Hälfte von ihnen mit einem CVSS-Score bewertet wurden, der auf einen hohen oder kritischen Schweregrad hinweist ein Anstieg von 57 % im Vergleich zum ……
Top 12 ways hackers broke into your systems in 2024

Dec 31, 2024 8:27 AM

by

Andy Stern

in SecurityNews

Tags: access, adobe, ai, api, apt, attack, authentication, backdoor, breach, business, china, cloud, control, corporate, credentials, cve, cvss, cyber, cybercrime, cybersecurity, data, data-breach, defense, detection, email, endpoint, exploit, finance, flaw, fortinet, government, group, hacker, healthcare, identity, infection, injection, Internet, iran, ivanti, jobs, malicious, malware, mfa, microsoft, mitigation, mobile, moveIT, north-korea, okta, open-source, phishing, pypi, ransomware, rce, remote-code-execution, risk, russia, scam, software, sql, strategy, supply-chain, tactics, theft, tool, unauthorized, update, vpn, vulnerability, zero-day

In 2024, hackers had a field day finding sneaky ways into systems, from convincing phishing scams that played on human curiosity to brutal software flaws that exposed gaps in tech upkeep. It was a year of clever breaches, showing just how wide the gap is between user habits and security practices.”While every year brings new…
Best of 2024: CVE-2024-38063: An In-Depth Look at the Critical Remote Code Execution Vulnerability

Dec 27, 2024 4:44 PM

by

Andy Stern

in SecurityNews

Tags: advisory, cve, cvss, flaw, microsoft, remote-code-execution, vulnerability

In a recent security advisory, Microsoft disclosed a high-severity vulnerability identified as CVE-2024-38063. This critical Remote Code Execution (RCE) flaw, rated with a CVSS score of 9.8, poses a significant… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/12/cve-2024-38063-an-in-depth-look-at-the-critical-remote-code-execution-vulnerability-2/
Apache MINA CVE-2024-52046: CVSS 10.0 Flaw Enables RCE via Unsafe Serialization

Dec 27, 2024 8:43 AM

by

Andy Stern

in SecurityNews

Tags: apache, cve, cvss, flaw, framework, network, rce, remote-code-execution, software, vulnerability

The Apache Software Foundation (ASF) has released patches to address a maximum severity vulnerability in the MINA Java network application framework that could result in remote code execution under specific conditions.Tracked as CVE-2024-52046, the vulnerability carries a CVSS score of 10.0. It affects versions 2.0.X, 2.1.X, and 2.2.X.”The ObjectSerializationDecoder in Apache MINA uses Java’s First…
CVSS Base Score vs Temporal Score: What You Need to Know

Dec 26, 2024 2:44 PM

by

Andy Stern

in SecurityNews

Tags: ciso, cvss, cybersecurity, mitigation, risk, vulnerability

CVSS base scores and temporal scores are not the same. Understanding the distinctions between them is critical for any cybersecurity pro. In the fast-paced and high-stakes world of cybersecurity, there are often more risks than there are mitigation resources. It’s impossible to address every vulnerability immediately. CISOs and other security managers must triage vulnerabilities, establish……
Critical SQL Injection Vulnerability in Apache Traffic Control Rated 9.9 CVSS, Patch Now

Dec 25, 2024 4:43 PM

by

Andy Stern

in SecurityNews

Tags: apache, control, cve, cvss, exploit, flaw, injection, software, sql, update, vulnerability

The Apache Software Foundation (ASF) has shipped security updates to address a critical security flaw in Traffic Control that, if successfully exploited, could allow an attacker to execute arbitrary Structured Query Language (SQL) commands in the database.The SQL injection vulnerability, tracked as CVE-2024-45387, is rated 9.9 out of 10.0 on the CVSS scoring system.”An SQL…
The 2024 cyberwar playbook: Tricks used by nation-state actors

Dec 25, 2024 7:43 AM

by

Andy Stern

in SecurityNews

Tags: access, ai, apt, at&t, attack, authentication, backdoor, blizzard, botnet, breach, china, cisa, cloud, control, credentials, cve, cvss, cyber, cybersecurity, data, ddos, defense, detection, email, espionage, exploit, flaw, fortinet, google, government, group, hacker, hacking, healthcare, india, infrastructure, iran, ivanti, linux, login, malicious, malware, mfa, microsoft, mobile, network, offense, office, open-source, password, phishing, powershell, remote-code-execution, router, russia, service, social-engineering, software, spear-phishing, spy, strategy, supply-chain, tactics, theft, threat, tool, unauthorized, update, vpn, vulnerability, warfare, windows, worm, zero-day

In 2024, nation-state cyber activity was off the charts, with Chinese, Russian, and Iranian actors leading the charge. Their campaigns weren’t just relentless, they were innovative, using a crafty mix of Tactics, Techniques, and Procedures (TTPs) to gain footholds, stay hidden, and spy-like pros.”There was definitely a continued and noted uptick in nation-state activity in…
Fortinet Warns of Critical FortiWLM Flaw That Could Lead to Admin Access Exploits

Dec 19, 2024 1:42 PM

by

Andy Stern

in SecurityNews

Tags: access, advisory, cve, cvss, exploit, flaw, fortinet, vulnerability

Fortinet has issued an advisory for a now-patched critical security flaw impacting Wireless LAN Manager (FortiWLM) that could lead to disclosure of sensitive information.The vulnerability, tracked as CVE-2023-34990, carries a CVSS score of 9.6 out of a maximum of 10.0.”A relative path traversal [CWE-23] in FortiWLM may allow a remote unauthenticated attacker to read sensitive…
Patch Alert: Critical Apache Struts Flaw Found, Exploitation Attempts Detected

Dec 18, 2024 7:42 AM

by

Andy Stern

in SecurityNews

Tags: apache, cve, cvss, exploit, flaw, threat, update, vulnerability

Threat actors are attempting to exploit a recently disclosed security flaw impacting Apache Struts that could pave the way for remote code execution.The issue, tracked as CVE-2024-53677, carries a CVSS score of 9.5 out of 10.0, indicating critical severity. The vulnerability shares similarities with another critical bug the project maintainers addressed in December 2023 (CVE-2023-50164,…
Hitachi Authentication Bypass Vulnerability Allows Attackers to Hack the System Remotely

Dec 17, 2024 8:42 AM

by

Andy Stern

in SecurityNews

Tags: authentication, cve, cvss, cyber, infrastructure, risk, vulnerability

Critical Authentication Bypass Vulnerability Identified in Hitachi Infrastructure Analytics Advisor and Ops Center Analyzer. A severe vulnerability has been discovered in Hitachi’s Infrastructure Analytics Advisor and Ops Center Analyzer, posing a significant security risk to users of these products. The vulnerability, identified as CVE-2024-10205, has a CVSS 3.1 score of 9.4, categorized as >>High.
CVSS 10.0 – Alarmstufe Rot für die Cloud Services Application von Ivanti

Dec 17, 2024 7:44 AM

by

Andy Stern

in SecurityNews

Tags: cloud, cvss, ivanti, service

First seen on security-insider.de Jump to article: www.security-insider.de/ivanti-cloud-services-sicherheitsupdate-a-af37ebf25237d03e0e394e141d611278/
Hackers Exploiting Apache Struts2 Vulnerability to Upload Malicious Payloads

Dec 16, 2024 1:42 PM

by

Andy Stern

in SecurityNews

Tags: apache, cve, cvss, cyber, exploit, framework, hacker, malicious, open-source, vulnerability

Hackers have begun exploiting a newly discovered vulnerability in Apache Struts2, a widely used open-source framework for developing Java web applications. The vulnerability, assigned the identifier CVE-2024-53677, has a critical CVSS score of 9.5, indicating its potential for severe impact if left unaddressed. Background on the Vulnerability Apache Struts2 announced the vulnerability last week, highlighting…
Critical OpenWrt Vulnerability Exposes Devices to Malicious Firmware Injection

Dec 13, 2024 7:05 PM

by

Andy Stern

in SecurityNews

Tags: cve, cvss, exploit, firmware, flaw, injection, malicious, vulnerability

A security flaw has been disclosed in OpenWrt’s Attended Sysupgrade (ASU) feature that, if successfully exploited, could have been abused to distribute malicious firmware packages.The vulnerability, tracked as CVE-2024-54143, carries a CVSS score of 9.3 out of a maximum of 10, indicating critical severity. Flatt Security researcher RyotaK has been credited with discovering and reporting…
Maximaler CVSS 10.0 – Sailpoint IdentityIQ enthält hochriskante Schwachstelle

Dec 13, 2024 8:05 AM

by

Andy Stern

in SecurityNews

Tags: cvss, vulnerability

First seen on security-insider.de Jump to article: www.security-insider.de/-kritische-sicherheitsluecke-sailpoints-identityiq-notfall-fix-a-941c95e1e094d9b26d222f656a449fe3/
Security researchers find deep flaws in CVSS vulnerability scoring system

Dec 12, 2024 9:05 PM

by

Andy Stern

in SecurityNews

Tags: access, apt, breach, business, citrix, control, cve, cvss, cybersecurity, ddos, exploit, finance, flaw, framework, Hardware, metric, privacy, risk, service, software, threat, vulnerability

The industrywide method for assessing the severity of vulnerabilities in software and hardware needs to be revised because it provides potential misleading severity assessment, delegates at Black Hat Europe were told Thursday.The Common Vulnerability Scoring System (CVSS) makes use of various metrics to quantify vulnerability severity. A presentation at Black Hat by cybersecurity experts from…
Chinese Hacker Pwns 81K Sophos Devices With Zero-Day Bug

Dec 12, 2024 5:05 PM

by

Andy Stern

in SecurityNews

Tags: china, cvss, flaw, hacker, injection, sophos, sql, zero-day

The US State Department has offered a $10 million reward for Guan Tianfeng, who has been accused of developing and testing a critical SQL injection flaw with a CVSS score of 9.8 used in Sophos attacks. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/chinese-hacker-pwns-81k-sophos-devices-with-zero-day-bug
OpenWrt Update Flaw Exposed Devices to Malicious Firmware

Dec 10, 2024 10:08 PM

by

Andy Stern

in SecurityNews

Tags: cve, cvss, data-breach, firmware, flaw, hacker, linux, malicious, service, update, vulnerability

Embedded Device Operating Sytem Had Flaw Allowing Hacers to Bypass Integrity Check. A critical flaw in the updating service of a popular Linux operating system for embedded devices could enable hackers to compromise firmware with malicious images. OpenWrt developers patched the vulnerability, with a CVSS core of 9.3 and tracked as CVE-2024-54143. First seen on…
CVE-2024-11205: WPForms Plugin Vulnerability Exposes 6 Million WordPress Sites to Financial Risk

Dec 10, 2024 10:07 AM

by

Andy Stern

in SecurityNews

Tags: cve, cvss, finance, risk, vulnerability, wordpress

A critical vulnerability, identified as CVE-2024-11205, was discovered in the WPForms plugin, a popular WordPress form builder used by over 6 million active websites. This vulnerability, which has been assigned a high CVSS score of 8.5, targets businesses relying on WPForms for payment processing and subscription management, especially those using Stripe integration. First seen on…
Veeam issues patch for critical RCE bug

Dec 4, 2024 3:48 PM

by

Andy Stern

in SecurityNews

Tags: advisory, backup, cisco, cve, cvss, data, exploit, flaw, germany, Internet, leak, microsoft, mitigation, ntlm, ransomware, rce, remote-code-execution, service, threat, unauthorized, update, veeam, vulnerability, windows

Veeam is warning its customers of two vulnerabilities, of which one is a critical RCE bug, affecting the Service Provider Console (VSPC), a web-based management platform for managed service providers (MSPs).On Tuesday, the data protection and backup solutions provider that powers IT systems availability for leading brands like Cisco, Lenovo, and NASA, issued an advisory…
Critical SailPoint IdentityIQ Vulnerability Exposes Files to Unauthorized Access

Dec 4, 2024 6:48 AM

by

Andy Stern

in SecurityNews

Tags: access, cve, cvss, flaw, identity, software, unauthorized, vulnerability

A critical security vulnerability has been disclosed in SailPoint’s IdentityIQ identity and access management (IAM) software that allows unauthorized access to content stored within the application directory.The flaw, tracked as CVE-2024-10905, has a CVSS score of 10.0, indicating maximum severity. It affects IdentityIQ versions 8.2. 8.3, 8.4, and other previous versions.IdentityIQ “allows First seen on…
Veeam Issues Patch for Critical RCE Vulnerability in Service Provider Console

Dec 4, 2024 6:48 AM

by

Andy Stern

in SecurityNews

Tags: cve, cvss, flaw, rce, remote-code-execution, service, update, veeam, vulnerability

Veeam has released security updates to address a critical flaw impacting Service Provider Console (VSPC) that could pave the way for remote code execution on susceptible instances.The vulnerability, tracked as CVE-2024-42448, carries a CVSS score of 9.9 out of a maximum of 10.0. The company noted that the bug was identified during internal testing.”From the…
SmokeLoader picks up ancient MS Office bugs to pack fresh credential stealer

Dec 3, 2024 2:48 PM

by

Andy Stern

in SecurityNews

Tags: access, antivirus, attack, browser, credentials, cve, cvss, data, email, exploit, flaw, fortinet, framework, healthcare, login, malicious, malware, microsoft, office, phishing, remote-code-execution, risk, software, threat, vulnerability, windows

Threat actors are using a well-known modular malware loader, SmokeLoader, to exploit known Microsoft Office vulnerabilities and steal sensitive browser credentials.The loader which runs a framework to deploy multiple malware modules, was observed by Fortinet’s FortiGuard Labs in attacks targeting manufacturing, healthcare, and IT companies in Taiwan.”SmokeLoader, known for its ability to deliver other malicious…
CVSS-Wert ist unzureichend – Unternehmen schließen nur selten Sicherheitslücken

Dec 3, 2024 8:49 AM

by

Andy Stern

in SecurityNews

Tags: cvss

First seen on security-insider.de Jump to article: www.security-insider.de/analyse-schwachstellenmanagement-unternehmen-a-2f1a61b367bfe87694e8805a6e9f678b/