Vulnerabilities - Security Ticks

Feline Hackers Among Us? (A Deep Dive and Simulation of the Meow Attack)

data breach, Database Protection, Emerging Threats, Security Research, Vulnerabilities / SecurityTicks

Feline Hackers Among Us? (A Deep Dive and Simulation of the Meow Attack) 2024-10-17 at 22:04 By Karl Biron Introduction In the perpetually evolving field of cybersecurity, new threats materialize daily. Attackers are on the prowl for weaknesses in infrastructure and software like a cat eyeing its helpless prey. This article is an excerpt from […]

React to this headline:

Feline Hackers Among Us? (A Deep Dive and Simulation of the Meow Attack) Read More »

Combating Misinformation and Cyber Threats to Secure the 2024 US Election

Artificial Intelligence, email security, Emerging Threats, Government, Vulnerabilities / SecurityTicks

Combating Misinformation and Cyber Threats to Secure the 2024 US Election 2024-10-15 at 16:01 By Karl Sigler As we near the 2024 election, safeguarding the integrity of our democratic process is of paramount importance. This article is an excerpt from Trustwave Blog View Original Source React to this headline:

React to this headline:

Combating Misinformation and Cyber Threats to Secure the 2024 US Election Read More »

Strengthening Email Security: DOJ Disrupts Russian Spear-Phishing Campaign

email security, Emerging Threats, Government, Microsoft Security, Vulnerabilities / SecurityTicks

Strengthening Email Security: DOJ Disrupts Russian Spear-Phishing Campaign 2024-10-09 at 16:02 By The need for an iron-clad email security solution is once again making headlines. This article is an excerpt from Trustwave Blog View Original Source React to this headline:

React to this headline:

Strengthening Email Security: DOJ Disrupts Russian Spear-Phishing Campaign Read More »

Analyzing Latrodectus: The New Face of Malware Loaders

Emerging Threats, Threat Intelligence, Vulnerabilities / SecurityTicks

Analyzing Latrodectus: The New Face of Malware Loaders 2024-10-08 at 16:01 By This report is the latest in a series that will delve into the deep research theTrustwave SpiderLabs Threat Intelligence team conducts daily on the major threat actor groups currently operating globally. This article is an excerpt from Trustwave Blog View Original Source React

React to this headline:

Analyzing Latrodectus: The New Face of Malware Loaders Read More »

Pronsis Loader: A JPHP-Driven Malware Diverging from D3F@ck Loader

Emerging Threats, Managed Security Services, Security Research, Threat Intelligence, Vulnerabilities / SecurityTicks

Pronsis Loader: A JPHP-Driven Malware Diverging from D3F@ck Loader 2024-10-08 at 16:01 By Cris Tomboc and King Orande Trustwave’s Threat Intelligence team has discovered a new malware dubbed Pronsis Loader, with its earliest known variant dating back to November 2023. This article is an excerpt from SpiderLabs Blog View Original Source React to this headline:

React to this headline:

Pronsis Loader: A JPHP-Driven Malware Diverging from D3F@ck Loader Read More »

After Code Execution, Researchers Show How CUPS Can Be Abused for DDoS Attacks

Vulnerabilities / SecurityTicks

After Code Execution, Researchers Show How CUPS Can Be Abused for DDoS Attacks 2024-10-02 at 15:46 By Eduard Kovacs Over 58,000 internet-exposed CUPS hosts can be abused for significant DDoS attacks, according to Akamai. The post After Code Execution, Researchers Show How CUPS Can Be Abused for DDoS Attacks appeared first on SecurityWeek. This article

React to this headline:

After Code Execution, Researchers Show How CUPS Can Be Abused for DDoS Attacks Read More »

Critical Zimbra Vulnerability Exploited One Day After PoC Release

Email, email security, exploited, Vulnerabilities, Zimbra / SecurityTicks

Critical Zimbra Vulnerability Exploited One Day After PoC Release 2024-10-02 at 13:31 By Ionut Arghire A critical-severity vulnerability in Zimbra has been exploited in the wild to deploy a web shell on vulnerable servers. The post Critical Zimbra Vulnerability Exploited One Day After PoC Release appeared first on SecurityWeek. This article is an excerpt from

React to this headline:

Critical Zimbra Vulnerability Exploited One Day After PoC Release Read More »

Organizations Warned of Exploited SAP, Gpac and D-Link Vulnerabilities

CISA KEV, exploited, Vulnerabilities / SecurityTicks

Organizations Warned of Exploited SAP, Gpac and D-Link Vulnerabilities 2024-10-01 at 16:01 By Ionut Arghire CISA warns that years-old vulnerabilities in SAP Commerce, Gpac framework, and D-Link DIR-820 routers are exploited in the wild. The post Organizations Warned of Exploited SAP, Gpac and D-Link Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from

React to this headline:

Organizations Warned of Exploited SAP, Gpac and D-Link Vulnerabilities Read More »

What We Know So Far About Zero-Day CUPS Vulnerabilities: CVE-2024-47176, CVE-2024-47076, CVE-2024-47175, and CVE-2024-47177

DFIR, Emerging Threats, Security Research, Threat Intelligence, Trustwave Rapid Response, Vulnerabilities / SecurityTicks

What We Know So Far About Zero-Day CUPS Vulnerabilities: CVE-2024-47176, CVE-2024-47076, CVE-2024-47175, and CVE-2024-47177 2024-09-30 at 22:01 By On September 26, 2024, security researcher Simone Margaritelli disclosed the details of four OpenPrinting Common UNIX Printing System (CUPS) vulnerabilities, that, when chained together, can allow malicious actors to launch remote code execution (RCE) attacks on vulnerable systems. This article is

React to this headline:

What We Know So Far About Zero-Day CUPS Vulnerabilities: CVE-2024-47176, CVE-2024-47076, CVE-2024-47175, and CVE-2024-47177 Read More »

Highly Anticipated Linux Flaw Allows Remote Code Execution, but Less Serious Than Expected

CUPS, Featured, Linux, Linux vulnerability, printer, Vulnerabilities / SecurityTicks

Highly Anticipated Linux Flaw Allows Remote Code Execution, but Less Serious Than Expected 2024-09-27 at 13:31 By Eduard Kovacs A researcher has disclosed the details of an unpatched vulnerability that was expected to pose a serious threat to many Linux systems. The post Highly Anticipated Linux Flaw Allows Remote Code Execution, but Less Serious Than

React to this headline:

Highly Anticipated Linux Flaw Allows Remote Code Execution, but Less Serious Than Expected Read More »

Cisco Patches High-Severity Vulnerabilities in IOS Software

Cisco, Vulnerabilities, vulnerability / SecurityTicks

Cisco Patches High-Severity Vulnerabilities in IOS Software 2024-09-26 at 16:16 By Ionut Arghire Cisco has released patches for seven high-severity vulnerabilities affecting products running IOS and IOS XE software. The post Cisco Patches High-Severity Vulnerabilities in IOS Software appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source React

React to this headline:

Cisco Patches High-Severity Vulnerabilities in IOS Software Read More »

Third Recent Ivanti Vulnerability Exploited in the Wild

exploited, Ivanti, Vulnerabilities / SecurityTicks

Third Recent Ivanti Vulnerability Exploited in the Wild 2024-09-25 at 14:17 By Eduard Kovacs CVE-2024-7593 is the third Ivanti product vulnerability patched in recent months that has been exploited in the wild. The post Third Recent Ivanti Vulnerability Exploited in the Wild appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed

React to this headline:

Third Recent Ivanti Vulnerability Exploited in the Wild Read More »

Second Pwn2Own Automotive Contest Offers Over $1 Million in Prizes

Pwn2Own, Vulnerabilities / SecurityTicks

Second Pwn2Own Automotive Contest Offers Over $1 Million in Prizes 2024-09-25 at 14:17 By Ionut Arghire ZDI offers over $1 million in cash and prizes at the next Pwn2Own Automotive hacking contest, set for January 2025 in Tokyo. The post Second Pwn2Own Automotive Contest Offers Over $1 Million in Prizes appeared first on SecurityWeek. This

React to this headline:

Second Pwn2Own Automotive Contest Offers Over $1 Million in Prizes Read More »

HTML Smuggling: How Blob URLs are Abused to Deliver Phishing Content

data breach, email security, Emerging Threats, Security Research, Threat Intelligence, Vulnerabilities / SecurityTicks

HTML Smuggling: How Blob URLs are Abused to Deliver Phishing Content 2024-09-24 at 16:01 By Mike Casayuran HTML smuggling techniques have been around for quite some time. A previous Trustwave SpiderLabs’ blog discussed its use in distributing malware by storing binaries in immutable blob data within JavaScript code that gets decoded on the client-side browser, eventually delivering

React to this headline:

HTML Smuggling: How Blob URLs are Abused to Deliver Phishing Content Read More »

ESET Patches Privilege Escalation Vulnerabilities in Windows, macOS Products

ESET, security product vulnerability, Vulnerabilities / SecurityTicks

ESET Patches Privilege Escalation Vulnerabilities in Windows, macOS Products 2024-09-23 at 17:02 By Ionut Arghire ESET has released patches for two local privilege escalation vulnerabilities in security products for Windows and macOS. The post ESET Patches Privilege Escalation Vulnerabilities in Windows, macOS Products appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS

React to this headline:

ESET Patches Privilege Escalation Vulnerabilities in Windows, macOS Products Read More »

CERT/CC Warns of Unpatched Critical Vulnerability in Microchip ASF

Microchip, Vulnerabilities / SecurityTicks

CERT/CC Warns of Unpatched Critical Vulnerability in Microchip ASF 2024-09-23 at 17:02 By Eduard Kovacs Microchip Advanced Software Framework (ASF) 3 is affected by a critical vulnerability that could lead to remote code execution. The post CERT/CC Warns of Unpatched Critical Vulnerability in Microchip ASF appeared first on SecurityWeek. This article is an excerpt from

React to this headline:

CERT/CC Warns of Unpatched Critical Vulnerability in Microchip ASF Read More »

Versa Networks Patches Vulnerability Exposing Authentication Tokens

Versa Director, Vulnerabilities, vulnerability / SecurityTicks

Versa Networks Patches Vulnerability Exposing Authentication Tokens 2024-09-23 at 15:01 By Ionut Arghire Versa Networks has released patches for a Versa Director vulnerability for which proof-of-concept (PoC) code exists. The post Versa Networks Patches Vulnerability Exposing Authentication Tokens appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source React

React to this headline:

Versa Networks Patches Vulnerability Exposing Authentication Tokens Read More »

Ivanti Warns of Second CSA Vulnerability Exploited in Attacks

exploited, Featured, Ivanti, Vulnerabilities / SecurityTicks

Ivanti Warns of Second CSA Vulnerability Exploited in Attacks 2024-09-20 at 11:46 By Eduard Kovacs In addition to the Ivanti CSA flaw CVE-2024-8190, another vulnerability affecting the same product, tracked as CVE-2024-8963, has been exploited. The post Ivanti Warns of Second CSA Vulnerability Exploited in Attacks appeared first on SecurityWeek. This article is an excerpt

React to this headline:

Ivanti Warns of Second CSA Vulnerability Exploited in Attacks Read More »

Atlassian Patches Vulnerabilities in Bamboo, Bitbucket, Confluence, Crowd

Atlassian, Vulnerabilities, vulnerability / SecurityTicks

Atlassian Patches Vulnerabilities in Bamboo, Bitbucket, Confluence, Crowd 2024-09-19 at 15:46 By Ionut Arghire Atlassian’s September 2024 monthly security bulletin details multiple high-severity vulnerabilities in four products. The post Atlassian Patches Vulnerabilities in Bamboo, Bitbucket, Confluence, Crowd appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source React to

React to this headline:

Atlassian Patches Vulnerabilities in Bamboo, Bitbucket, Confluence, Crowd Read More »

GitLab Patches Critical Authentication Bypass Vulnerability

GitLab, Vulnerabilities, vulnerability / SecurityTicks

GitLab Patches Critical Authentication Bypass Vulnerability 2024-09-19 at 13:16 By Ionut Arghire GitLab has patched a critical-severity SAML authentication bypass affecting both Community Edition (CE) and Enterprise Edition (EE) instances. The post GitLab Patches Critical Authentication Bypass Vulnerability appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source React

React to this headline:

GitLab Patches Critical Authentication Bypass Vulnerability Read More »