Tag: RCE
‘MagicDot’ Windows Weakness Allows Unprivileged Rootkit Activity
A known issue associated with the DOS-to-NT path conversion process in Windows opens up significant risk for businesses, by allowing attackers to gain rootkit-like...
Breaking News
92K D-Link NAS Devices Open to Critical Command-Injection Bug
A critical flaw in several end-of-life (EOL) models of D-Link network-attached storage (NAS) devices can allow attackers to backdoor the device and gain access...
How Do We Integrate LLMs Security Into Application Development?
Question: What do we really know about large language model (LLM) security? And are we willingly opening the front door to chaos by using...
Patch Now: Critical Fortinet RCE Bug Under Active Attack
As expected, cyberattackers have pounced on a critical remote code execution (RCE) vulnerability in the Fortinet Enterprise Management Server (EMS) that was patched last...
Ivanti Keeps Security Teams Scrambling With 2 More Vulns
Ivanti, whose products have been a big target for attackers recently, has disclosed two more critical vulnerabilities in its technologies — raising more questions...
Session Takeover Bug in AWS Apache Airflow Reveals Larger Cloud Risk
A vulnerability in Amazon Web Services' (AWS) Managed Workflows for Apache Airflow (MWAA) could have allowed hackers to access users' sessions, perform remote code...
Fortra Releases Update on Critical Severity RCE Flaw
Fortra this week released an update for a critical vulnerability that was initially discovered in August 2023.Tracked as CVE-2024-25153 with a critical severity CVSS...
Stealth Bomber: Atlassian Confluence Exploits Drop Web Shells In-Memory
Fresh proof-of-concept (PoC) exploits are circulating in the wild for a widely targeted Atlassian Confluence Data Center and Confluence Server flaw. The new attack...
JetBrains TeamCity Mass Exploitation Underway, Rogue Accounts Thrive
Attacks targeting two security vulnerabilities in the TeamCity CI/CD platform have begun in earnest just days after its developer, JetBrains, disclosed the flaws on...
Cloud-y Linux Malware Rains on Apache, Docker, Redis & Confluence
Researchers have spotted a concerted cyber compromise campaign targeting cloud servers running vulnerable instances of Apache Hadoop, Atlassian Confluence, Docker, and Redis. The attackers...
Attackers Exploit Microsoft Security-Bypass Zero-Day Bugs
Microsoft's scheduled Patch Tuesday security update for February includes fixes for two zero-day security vulnerabilities under active attack, plus 71 other flaws across a...
Linux Distros Hit by RCE Vulnerability in Shim Bootloader
Linux shim, a small piece of code that many major Linux distros use during the secure boot process, has a remote code execution vulnerability...
Latest Intelligence
