2024

VMware fixes critical vCenter Server RCE bug – again! (CVE-2024-38812)

VMware fixes critical vCenter Server RCE bug – again! (CVE-2024-38812) 2024-10-22 at 14:02 By Zeljka Zorz Broadcom has released new patches for previously fixed vulnerabilities (CVE-2024-38812, CVE-2024-38813) in vCenter Server, one of which hasn’t been fully addressed the first time and could allow attackers to achieve remote code execution. The vulnerabilities were privately reported by […]

VMware fixes critical vCenter Server RCE bug – again! (CVE-2024-38812) Read More »

Clock’s ticking on PostgreSQL 12, but not everyone is ready to say goodbye

Clock’s ticking on PostgreSQL 12, but not everyone is ready to say goodbye 2024-10-22 at 13:45 By Lindsay Clark 11% of databases still on aging version with a month of support left Users of PostgreSQL 12 have less than a month to prepare for the database to enter end of life and become unsupported.… This

Clock’s ticking on PostgreSQL 12, but not everyone is ready to say goodbye Read More »

Bumblebee and Latrodectus Malware Return with Sophisticated Phishing Strategies

Bumblebee and Latrodectus Malware Return with Sophisticated Phishing Strategies 2024-10-22 at 13:19 By Two malware families that suffered setbacks in the aftermath of a coordinated law enforcement operation called Endgame have resurfaced as part of new phishing campaigns. Bumblebee and Latrodectus, which are both malware loaders, are designed to steal personal data, along with downloading

Bumblebee and Latrodectus Malware Return with Sophisticated Phishing Strategies Read More »

Malicious npm Packages Target Developers’ Ethereum Wallets with SSH Backdoor

Malicious npm Packages Target Developers’ Ethereum Wallets with SSH Backdoor 2024-10-22 at 13:19 By Cybersecurity researchers have discovered a number of suspicious packages published to the npm registry that are designed to harvest Ethereum private keys and gain remote access to the machine via the secure shell (SSH) protocol. The packages attempt to “gain SSH

Malicious npm Packages Target Developers’ Ethereum Wallets with SSH Backdoor Read More »

Palo Alto Networks extends security into harsh industrial environments

Palo Alto Networks extends security into harsh industrial environments 2024-10-22 at 13:01 By Industry News The convergence of IT and operational technology (OT) and the digital transformation of OT have created new opportunities for innovation and efficiency in critical Industrial Automation and Control Systems. However, these advancements also broaden the potential attack surface, making it

Palo Alto Networks extends security into harsh industrial environments Read More »

Using gRPC and HTTP/2 for Cryptominer Deployment: An Unconventional Approach

Using gRPC and HTTP/2 for Cryptominer Deployment: An Unconventional Approach 2024-10-22 at 12:47 By In this blog entry, we discuss how malicious actors are exploiting Docker remote API servers via gRPC/h2c to deploy the cryptominer SRBMiner to facilitate their mining of XRP on Docker hosts. This article is an excerpt from Trend Micro Research, News

Using gRPC and HTTP/2 for Cryptominer Deployment: An Unconventional Approach Read More »

Roundcube XSS flaw exploited to steal credentials, email (CVE-2024-37383)

Roundcube XSS flaw exploited to steal credentials, email (CVE-2024-37383) 2024-10-22 at 12:34 By Zeljka Zorz Attackers have exploited an XSS vulnerability (CVE-2024-37383) in the Roundcube Webmail client to target a governmental organization of a CIS country, Positive Technologies (PT) analysts have discovered. The vulnerability was patched in May 2024, in Roundcube Webmail versions 1.5.7 and

Roundcube XSS flaw exploited to steal credentials, email (CVE-2024-37383) Read More »

Ivanti Neurons for App Control strengthens endpoint security

Ivanti Neurons for App Control strengthens endpoint security 2024-10-22 at 12:12 By Industry News Ivanti introduced Ivanti Neurons for App Control, which safeguards devices from unauthorized applications. In addition, Ivanti released new analytics in the Ivanti Neurons platform and new features for Ivanti Neurons for Patch Management to enhance security and ensure compliance. With Ivanti’s

Ivanti Neurons for App Control strengthens endpoint security Read More »

Fastly DDoS Protection blocks malicious traffic

Fastly DDoS Protection blocks malicious traffic 2024-10-22 at 11:33 By Industry News Fastly released Fastly DDoS Protection to provide automatic protection from Layer 7 and other application-level DDoS attacks. With a click of a button, organizations can enable Fastly DDoS Protection to automatically shield their applications and APIs against highly disruptive data and query floods.

Fastly DDoS Protection blocks malicious traffic Read More »

VMware Releases vCenter Server Update to Fix Critical RCE Vulnerability

VMware Releases vCenter Server Update to Fix Critical RCE Vulnerability 2024-10-22 at 10:19 By VMware has released software updates to address an already patched security flaw in vCenter Server that could pave the way for remote code execution. The vulnerability, tracked as CVE-2024-38812 (CVSS score: 9.8), concerns a case of heap-overflow vulnerability in the implementation

VMware Releases vCenter Server Update to Fix Critical RCE Vulnerability Read More »

Lab-grown human brain cells drive virtual butterfly in simulation

Lab-grown human brain cells drive virtual butterfly in simulation 2024-10-22 at 09:35 By Thomas Claburn Could organoid-driven computing be the future of AI power? Researchers affiliated with the neuroscience platform FinalSpark have devised a 3D simulation depicting a butterfly that’s directed by human brain cells.… This article is an excerpt from The Register View Original

Lab-grown human brain cells drive virtual butterfly in simulation Read More »

Pixel perfect Ghostpulse malware loader hides inside PNG image files

Pixel perfect Ghostpulse malware loader hides inside PNG image files 2024-10-22 at 08:33 By Connor Jones Miscreants combine it with an equally tricky piece of social engineering The Ghostpulse malware strain now retrieves its main payload via a PNG image file’s pixels. This development, security experts say, is “one of the most significant changes” made

Pixel perfect Ghostpulse malware loader hides inside PNG image files Read More »

CISA Adds ScienceLogic SL1 Vulnerability to Exploited Catalog After Active Zero-Day Attack

CISA Adds ScienceLogic SL1 Vulnerability to Exploited Catalog After Active Zero-Day Attack 2024-10-22 at 08:04 By The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a critical security flaw impacting ScienceLogic SL1 to its Known Exploited Vulnerabilities (KEV) catalog, following reports of active exploitation as a zero-day. The vulnerability in question, tracked as

CISA Adds ScienceLogic SL1 Vulnerability to Exploited Catalog After Active Zero-Day Attack Read More »

IT security and government services: Balancing transparency and security

IT security and government services: Balancing transparency and security 2024-10-22 at 07:33 By Help Net Security Government information technology leaders find themselves at a challenging balance point: On one end of the scale are increasing threats from cyber actors, bolstered by advanced technology like artificial intelligence (AI); on the other end is a longstanding commitment

IT security and government services: Balancing transparency and security Read More »

Phishing scams and malicious domains take center stage as the US election approaches

Phishing scams and malicious domains take center stage as the US election approaches 2024-10-22 at 07:03 By Help Net Security Phishing scams aimed at voters, malicious domain registrations impersonating candidates, and other threat activity designed to exploit unassuming victims take center stage as the US election approaches, according to Fortinet. “As the 2024 US presidential

Phishing scams and malicious domains take center stage as the US election approaches Read More »

Scroll to Top