04 April 2022
The maintainers of Spring Framework have released an emergency patch to address a newly disclosed remote code execution flaw that, if successfully exploited, could allow an unauthenticated attacker to take control of a targeted system.
The maintainers of Spring Framework have released an emergency patch to address a newly disclosed remote code execution flaw that, if successfully exploited, could allow an unauthenticated attacker to take control of a targeted system.
Σύμφωνα με ερευνητές ασφαλείας μία νέα καμπάνια διανομής του κακόβουλου λογισμικού Mars Stealer χρησιμοποιεί τις διαφημίσεις στο Google Ads και διαδίδεται μέσω κλωνοποιημένων ιστοτόπων που διαφημίζουν γνωστά λογισμικά.
Five new security weaknesses have been disclosed in Dell BIOS that, if successfully exploited, could lead to code execution on vulnerable systems.
Ερευνητές ασφαλείας διαπίστωσαν μία αύξηση στις κακόβουλες εφαρμογές Android που διατίθενται στο Google Play Store για κινητά τηλέφωνα. Στις περισσότερες περιπτώσεις, οι χρήστες εν αγνοία τους μπορεί να κατεβάσουν το κακόβουλο λογισμικό μέσα από διάφορες εφαρμογές.
Taiwanese hardware vendor QNAP warns most of its Network Attached Storage (NAS) devices are impacted by a high severity Linux vulnerability dubbed 'Dirty Pipe' that allows attackers with local access to gain root privileges.
Με την επανεμφάνιση του κακόβουλου λογισμικού Emotet τον περασμένο Νοέμβριο, ο αριθμός των μολυσμένων συσκευών αυξάνεται αργά και σταθερά. Υπολογίζεται ότι μέχρι στιγμής έχουν μολυνθεί περισσότερες από 130 χιλιάδες συσκευές σε 179 χώρες.
HP has disclosed 16 high-impact UEFI firmware vulnerabilities that could allow threat actors to infect devices with malware that gain high privileges and remain undetectable by installed security software.
Τις τελευταίες μέρες παρατηρείται αυξημένη δραστηριότητα όσον αφορά τις κυβερνοεπιθέσεις εναντίον οργανισμών του δημόσιου και ιδιωτικού τομέα λόγο του τεταμένου κλίματος που επικρατεί στην ευρύτερη περιοχή.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) last week published an industrial control system (ICS) advisory related to multiple vulnerabilities impacting Schneider Electric's Easergy medium voltage protection relays.
A notification from the U.S. Cybersecurity Infrastructure and Security Agency (CISA) warns that threat actors are exploiting vulnerabilities in Zabbix open-source tool for monitoring networks, servers, virtual machines, and cloud services.
VMware on Tuesday patched several high-severity vulnerabilities impacting ESXi, Workstation, Fusion, Cloud Foundation, and NSX Data Center for vSphere that could be exploited to execute arbitrary code and cause a denial-of-service (DoS) condition.
Researchers have revealed details of a now-patched high-severity security vulnerability in Apache Cassandra that, if left unaddressed, could be abused to gain remote code execution (RCE) on affected installations. Apache Cassandra is an open-source, distributed, NoSQL database management system for managing very large amounts of structured data across commodity servers.
Adobe on Sunday rolled out patches to contain a critical security vulnerability impacting its Commerce and Magento Open Source products that it said is being actively exploited in the wild.
Τα Κυπριακά Ταχυδρομεία πληροφορούν το κοινό ότι παρατηρήθηκε νέα απόπειρα εξαπάτησης με την αποστολή μηνυμάτων σε κινητά τηλέφωνα, χρησιμοποιώντας το όνομα των Κυπριακών Ταχυδρομείων.
Cisco has patched multiple critical security vulnerabilities impacting its RV Series routers that could be weaponized to elevate privileges and execute arbitrary code on affected systems, while also warning of the existence of proof-of-concept (PoC) exploit code targeting some of these bugs.
A cross-site scripting (XSS) Zimbra security vulnerability is actively exploited in attacks targeting European media and government organizations. Zimbra is an email and collaboration platform that also includes instant messaging, contacts, video conferencing, file sharing, and cloud storage capabilities.
Researchers have discovered critical vulnerabilities in the UEFI firmware from InsydeH2O used by multiple computer vendors such as Fujitsu, Intel, AMD, Lenovo, Dell, ASUS, HP, Siemens, Microsoft, and Acer.
Taiwanese company QNAP has warned customers to secure network-attached storage (NAS) appliances and routers against a new ransomware variant called DeadBolt.
The vulnerability was identified and fixed in 2013 but in 2014 Microsoft revised the fix allowing Malsmoke hackers in 2022 to spread ZLoader malware.
Researchers discovered a critical vulnerability in Apache Log4j library, which scores perfect 10 out of 10 in CVSS.
Page 6 of 19