Vulnerabilities (Page 21)

Cyber Security Vulnerabilities | Infosec Vulnerabilities | Information Security Vulnerabilities | Bug bounty

Critical vulnerability breaks Site Isolation feature in Google Chrome. Update immediately

On: December 21, 2021

Tagged: Chrome, Cyberattack, cybercrime, cybersecurity, Firefox, Google, Google Project Zero, Hacking, incidents, Information Security, security flaws, Site Isolation, vulnerability, Web Browsers

Cybersecurity specialists report the detection of a flaw that would allow threat actors to abuse a set of load optimization features in Google Chrome to evade the Site Isolation feature.Read More →

New critical vulnerabilities in Zoho ManageEngine exploited by hackers

On: December 21, 2021

In: Vulnerabilities

Tagged: advanced persistent threat (APT), Common Vulnerability Scoring System (CVSS), Cyberattack, cybercrime, cybersecurity, Federal Bureau of Investigation (FBI), Hacking, Information Security, Microsoft, security flaws, Zoho, Zoho ManageEngine

The cybersecurity unit of the Federal Bureau of Investigation (FBI) has launched an alert to notify organizations using ManageEngine Desktop Central, developed by Zoho, that a hacking group is exploitingRead More →

Free tool to detect Log4j components in your network infrastructure: Check if your servers are vulnerable

On: December 20, 2021

In: Vulnerabilities

Tagged: Cyberattack, cybersecurity, GitHub, Hacking, Hacking Tools, Information Security, Linux, Log4j, macOS, network security, operating systems, security flaws, vulnerability, Windows

Exploiting vulnerabilities detected in previous versions of Log4j remains a severe issue, so the cybersecurity community is still looking for the best ways to prevent a cyberattack. However, some usersRead More →

Critical vulnerability in All In One SEO WordPress plugin affects 3 million websites

On: December 17, 2021

In: Vulnerabilities

Tagged: All in One SEO, content management system (CMS), Cyberattack, cybercrime, cybersecurity, data security, data theft, Hacking, Information Security, infosec, Plugins, security flaws, vulnerability, Wordpress

Cybersecurity specialists report the detection of a critical vulnerability in All In One SEO, one of the most popular plugins in WordPress, installed on more than 3 million websites operatedRead More →

Critical remote code execution vulnerability in Log4j affects VMware Tanzu, vSphere, Site Recovery, Carbon Black, vRealize, and other products

On: December 13, 2021

In: Vulnerabilities

Tagged: Carbon Black, Common Vulnerability Scoring System (CVSS), Cyberattack, cybercrime, cybersecurity, Hacking, incidents, remote code execution (RCE), security flaws, Site Recovery, Tanzu, technology, VMware, vSphere

During the past week, the detection of CVE-2021-44228, a critical remote code execution (RCE) vulnerability in Log4j, the log library used by thousands of online platforms, was reported. The flawRead More →

TP-Link wireless router vulnerability makes your home network a part of new botnet

On: December 13, 2021

In: Vulnerabilities

Tagged: botnet, cybersecurity, Denial of Service (DDoS), Hacking, incidents, Information Security, malware, Manga botnet, Mirai botnet, remote code execution (RCE), Routers, security flaws, vulnerability

Cybersecurity specialists report the detection of Manga, a new variant of the Mirai botnet focused especially on the compromise of TP-Link routers using the CVE-2021-41653 vulnerability. The flaw affects TL-WE840NRead More →

Critical vulnerability in SanDisk Secure Access: Patch immediately

On: December 10, 2021

In: Vulnerabilities

Tagged: Common Vulnerability Scoring System (CVSS), Cyberattack, cybercr, cybersecurity, Hacking, incidents, International Institute of Cyber Security (IICS), SanDisk, SanDisk Secure Access, vulnerability, Western Digital

Western Digital announced an update to its SanDisk SecureAccess/PrivateAccess product, hoping to address a vulnerability that would allow its users’ data to be accessed through brute force and dictionary attacks.Read More →

Critical vulnerability in GraphQL API platform

On: December 9, 2021

In: Vulnerabilities

Tagged: Cyberattack, cybercrime, cybersecurity, Exploitation, GraphQL API, Hacking, incidents, Information Security, Salt Labs, security flaws

A security report details the discovery of a GraphQL API authorization vulnerability in a major B2B financial platform whose exploitation would allow threat actors to conduct unauthorized transactions against theRead More →

Two unpatched vulnerabilities in SolarWinds Serv-U

On: December 9, 2021

In: Vulnerabilities

Tagged: Common Vulnerability Scoring System (CVSS), cross-site request forgery (CSRF) attack, cybersecurity, Hacking, incidents, Information Security, security flaws, SolarWinds, vulnerability

Information security specialists reported the finding of two critical vulnerabilities affecting SolarWinds Serv-U. According to the report, successful exploitation of these flaws would allow the deployment of multiple attack scenarios.Read More →