Threat actors have been leveraging zero and n-day vulnerabilities in Cisco security appliances (CVE-2024-20481), Microsoft Sharepoint (CVE-2024-38094), and Google’s Chrome browser (CVE-2024-4947). CVE-2024-20481 (Cisco ASA/FTD) In the… Article Source https://www.helpnetsecurity.com/2024/10/25/cve-2024-20481-cve-2024-38094-cve-2024-4947/
The Cybersecurity and Infrastructure Security Agency (CISA) has announced the addition of two new vulnerabilities to its Known Exploited Vulnerabilities Catalog. These vulnerabilities in widely used technologies are… Article Source https://cybersecuritynews.com/cisco-asa-roundcube-vulnerabilities/
Cisco fixed tens of vulnerabilities, including an actively exploited one Pierluigi Paganini October 24, 2024 Cisco patched vulnerabilities in ASA, FMC, and FTD products, including one actively exploited in a large-scale brute-force… Article Source https://securityaffairs.com/170203/breaking-news/cisco-fixed-tens-of-vulnerabilities-including-actively-exploited-one.html
NVIDIA have released a security bulletin to detail new security issues, so it’s time to update your GPU driver once again. There’s six vulnerabilities being disclosed today, although the date stated is October 22nd, they only emailed it today…. Article Source https://www.gamingonlinux.com/2024/10/nvidia-detail-new-gpu-driver-vulnerabilities-in-their-october-2024-security-bulletin/
Linus Torvalds, the creator of Linux, is apparently “frustrated” with the buggy hardware by the likes of Intel, AMD & NVIDIA, claiming that manufacturers are the reason behind vulnerabilities. Linus Torvalds Expresses… Article Source https://wccftech.com/linuxs-creator-linus-torvalds-calls-out-intel-amd-nvidia-for-buggy-hardware/
Cisco Patches High-Severity Vulnerabilities in Analog Telephone Adapters SecurityWeek Article Source https://www.securityweek.com/cisco-patches-high-severity-vulnerabilities-in-analog-telephone-adapters/
Oracle Patches Over 200 Vulnerabilities With October 2024 CPU SecurityWeek Article Source https://www.securityweek.com/oracle-patches-over-200-vulnerabilities-with-october-2024-cpu/
Oracle has released its October 2024 Critical Patch Update (CPU), addressing a staggering 334 security vulnerabilities across its vast product portfolio. This quarterly update, the fourth and final of 2024,… Article Source https://cybersecuritynews.com/oracle-security-update-334-patches/
Multiple privilege escalation issues in Microsoft Azure’s cloud-based Health Bot service opened the platform to server-side request forgery (SSRF) and could have allowed access to cross-tenant resources. The vulnerabilities, identified by Tenable… Article Source https://www.darkreading.com/application-security/microsoft-azure-ai-health-bot-infected-with-critical-vulnerabilities
Ransomware groups have been exploiting both known and zero-day vulnerabilities to breach organizations more frequently in the past year. This was revealed by James Nutland from Cisco Talos, who detailed the tactics of 14 ransomware groups between 2023 and 2024. LockBit was the most active group during this period, despite recent law enforcement efforts to … Read more