Critical Oracle Security Update, 334 Vulnerabilities Patched
Oracle has released its October 2024 Critical Patch Update (CPU), addressing a staggering 334 security vulnerabilities across its vast product…
Tag: vulnerabilities
Microsoft Azure AI Health Bot Infected With Critical Vulnerabilities
Multiple privilege escalation issues in Microsoft Azure’s cloud-based Health Bot service opened the platform to server-side request forgery (SSRF) and…
TechTarget reports that ransomware gangs are increasingly taking advantage of vulnerabilities
Ransomware groups have been exploiting both known and zero-day vulnerabilities to breach organizations more frequently in the past year. This…
Top Patch Tuesday: Significant bugs in Windows licensing and two other vulnerabilities under attack
Microsoft’s July Patch Tuesday fix package is causing chaos for sysadmins, with at least two bugs actively being exploited. The…
SecurityWeek: VMware addresses critical vulnerabilities allowing sandbox escape in ESXi
VMware has recently addressed critical vulnerabilities in its ESXi virtualization platform that could allow attackers to escape from the sandboxed…
Summary of Vulnerabilities 7/8/24: Intel, Cisco and Other Companies at Risk
Last week, multiple critical vulnerabilities were discovered across various platforms, impacting network infrastructure, software libraries, IoT devices, and CPUs. OpenSSH…
CISA includes Cisco NX-OS Command Injection bug in list of Exploited Vulnerabilities
The US Cybersecurity and Infrastructure Security Agency (CISA) has added the Cisco NX-OS command injection bug, known as CVE-2024-20399, to…
Cyble Urges Immediate Fixes for Vulnerabilities in Juniper, OpenSSH, and GitLab as Revealed in Weekly Report
In their weekly report from June 26 to July 2, Cyble Research and Intelligence Laboratories (CRIL) analyzed 29 vulnerabilities, including…
Exploiting Vulnerabilities in Cisco NX-OS Software (AL-077)
Cisco has recently released security updates to address a critical vulnerability (CVE-2024-20399) in its Cisco NX-OS software. This vulnerability is…
More old Oracle WebLogic vulnerabilities exploited for cryptomining
Oracle WebLogic servers that are vulnerable to old flaws, specifically identified as CVE-2017-3506, CVE-2017-10271, and CVE-2023-21839, have recently been targeted…