vulnerability - Security Ticks

GitHub Copilot Chat Flaw Leaked Data From Private Repositories

AI, Artificial Intelligence, Data leak, GitHub, GitHub Copilot, vulnerability / SecurityTicks

GitHub Copilot Chat Flaw Leaked Data From Private Repositories 2025-10-09 at 14:04 By Ionut Arghire Hidden comments allowed full control over Copilot responses and leaked sensitive information and source code. The post GitHub Copilot Chat Flaw Leaked Data From Private Repositories appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source […]

React to this headline:

GitHub Copilot Chat Flaw Leaked Data From Private Repositories Read More »

Redis patches critical “RediShell” RCE vulnerability, update ASAP! (CVE-2025-49844)

BSI, Don't miss, Hot stuff, News, Redis, vulnerability, Wiz / SecurityTicks

Redis patches critical “RediShell” RCE vulnerability, update ASAP! (CVE-2025-49844) 2025-10-07 at 16:36 By Zeljka Zorz Redis, the company behind the widely used in-memory data structure store of the same name, has released patches for a critical vulnerability (CVE-2025-49844) that may allow attackers full access to the underlying host system. “This flaw allows a post auth

React to this headline:

Redis patches critical “RediShell” RCE vulnerability, update ASAP! (CVE-2025-49844) Read More »

Fortra GoAnywhere MFT Zero-Day Exploited in Ransomware Attacks

exploited, Fortra, GoAnywhere, Ransomware, Vulnerabilities, vulnerability, Zero-Day / SecurityTicks

Fortra GoAnywhere MFT Zero-Day Exploited in Ransomware Attacks 2025-10-07 at 12:40 By Ionut Arghire The Medusa ransomware operators exploited the GoAnywhere MFT vulnerability one week before patches were released. The post Fortra GoAnywhere MFT Zero-Day Exploited in Ransomware Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source React to

React to this headline:

Fortra GoAnywhere MFT Zero-Day Exploited in Ransomware Attacks Read More »

Microsoft and Steam Take Action as Unity Vulnerability Puts Games at Risk

Microsoft, Steam, Unity, Valve, Vulnerabilities, vulnerability / SecurityTicks

Microsoft and Steam Take Action as Unity Vulnerability Puts Games at Risk 2025-10-06 at 17:12 By Ionut Arghire The flaw could lead to local code execution, allowing attackers to access confidential information on devices running Unity-built applications. The post Microsoft and Steam Take Action as Unity Vulnerability Puts Games at Risk appeared first on SecurityWeek.

React to this headline:

Microsoft and Steam Take Action as Unity Vulnerability Puts Games at Risk Read More »

Organizations Warned of Exploited Meteobridge Vulnerability

CISA KEV, exploited, Meteobridge, Vulnerabilities, vulnerability / SecurityTicks

Organizations Warned of Exploited Meteobridge Vulnerability 2025-10-03 at 13:49 By Ionut Arghire Patched in mid-May, the security defect allows remote unauthenticated attackers to execute arbitrary commands with root privileges. The post Organizations Warned of Exploited Meteobridge Vulnerability appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source React to this headline:

React to this headline:

Organizations Warned of Exploited Meteobridge Vulnerability Read More »

OpenSSL Vulnerabilities Allow Private Key Recovery, Code Execution, DoS Attacks

OpenSSL, private key recovery, Vulnerabilities, vulnerability / SecurityTicks

OpenSSL Vulnerabilities Allow Private Key Recovery, Code Execution, DoS Attacks 2025-10-01 at 17:08 By Eduard Kovacs Three vulnerabilities have been patched with the release of OpenSSL updates. The post OpenSSL Vulnerabilities Allow Private Key Recovery, Code Execution, DoS Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source React to

React to this headline:

OpenSSL Vulnerabilities Allow Private Key Recovery, Code Execution, DoS Attacks Read More »

High-Severity Vulnerabilities Patched in VMware Aria Operations, NSX, vCenter

VMWare, Vulnerabilities, vulnerability / SecurityTicks

High-Severity Vulnerabilities Patched in VMware Aria Operations, NSX, vCenter 2025-09-30 at 14:33 By Ionut Arghire The flaws could allow attackers to escalate privileges, manipulate notifications, and enumerate usernames. The post High-Severity Vulnerabilities Patched in VMware Aria Operations, NSX, vCenter appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source React to

React to this headline:

High-Severity Vulnerabilities Patched in VMware Aria Operations, NSX, vCenter Read More »

Western Digital My Cloud NAS devices vulnerable to unauthenticated RCE (CVE-2025-30247)

backup, consumer, data security, Don't miss, Hot stuff, NAS, News, SMBs, vulnerability, Western Digital / SecurityTicks

Western Digital My Cloud NAS devices vulnerable to unauthenticated RCE (CVE-2025-30247) 2025-09-30 at 14:11 By Zeljka Zorz Western Digital has fixed a critical remote code execution vulnerability (CVE-2025-30247) in the firmware powering its My Cloud network-attached storage (NAS) devices, and has urged users to upgrade as soon as possible. About CVE-2025-30247 Western Digital’s My Cloud

React to this headline:

Western Digital My Cloud NAS devices vulnerable to unauthenticated RCE (CVE-2025-30247) Read More »

Akira ransomware: From SonicWall VPN login to encryption in under four hours

Arctic Wolf Networks, credentials, Don't miss, enterprise, Hot stuff, MFA, News, Ransomware, SMBs, SonicWall, vulnerability / SecurityTicks

Akira ransomware: From SonicWall VPN login to encryption in under four hours 2025-09-29 at 18:47 By Zeljka Zorz Four hours or less: that’s how long it takes for Akira affiliates to break into organizations and deploy the ransomware on their systems, Arctic Wolf researchers have warned. Armed with SonicWall SSL VPN credentials stolen in earlier

React to this headline:

Akira ransomware: From SonicWall VPN login to encryption in under four hours Read More »

No Patches for Vulnerabilities Allowing Cognex Industrial Camera Hacking

Cognex, ICS, ICS/OT, vulnerability / SecurityTicks

No Patches for Vulnerabilities Allowing Cognex Industrial Camera Hacking 2025-09-26 at 14:18 By Eduard Kovacs Cognex is advising customers to transition to newer versions of its machine vision products. The post No Patches for Vulnerabilities Allowing Cognex Industrial Camera Hacking appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source React

React to this headline:

No Patches for Vulnerabilities Allowing Cognex Industrial Camera Hacking Read More »

SolarWinds fixes critical Web Help Desk RCE vulnerability (CVE-2025-26399)

Don't miss, Hot stuff, News, patch, SolarWinds, vulnerability / SecurityTicks

SolarWinds fixes critical Web Help Desk RCE vulnerability (CVE-2025-26399) 2025-09-24 at 19:44 By Zeljka Zorz SolarWinds has fixed yet another unauthenticated remote code execution vulnerability (CVE-2025-26399) in Web Help Desk (WHD), its popular web-based IT ticketing and asset management solution. While the vulnerability is currently not being leveraged by attackers, they might soon reverse-engineer the

React to this headline:

SolarWinds fixes critical Web Help Desk RCE vulnerability (CVE-2025-26399) Read More »

Libraesva Email Security Gateway Vulnerability Exploited by Nation-State Hackers

email security, ESG, exploited, Libraesva, Vulnerabilities, vulnerability / SecurityTicks

Libraesva Email Security Gateway Vulnerability Exploited by Nation-State Hackers 2025-09-24 at 12:10 By Ionut Arghire Tracked as CVE-2025-59689, the command injection bug could be triggered via malicious emails containing crafted compressed attachments. The post Libraesva Email Security Gateway Vulnerability Exploited by Nation-State Hackers appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View

React to this headline:

Libraesva Email Security Gateway Vulnerability Exploited by Nation-State Hackers Read More »

APIs and hardware are under attack, and the numbers don’t look good

access control, API security, Bugcrowd, cybersecurity, Don't miss, hardware, News, report, vulnerability / SecurityTicks

APIs and hardware are under attack, and the numbers don’t look good 2025-09-24 at 08:35 By Sinisa Markovic Attackers have a new favorite playground, and it’s not where many security teams are looking. According to fresh data from Bugcrowd, vulnerabilities in hardware and APIs are climbing fast, even as website flaws hold steady. The shift

React to this headline:

APIs and hardware are under attack, and the numbers don’t look good Read More »

Patch Bypassed for Supermicro Vulnerability Allowing BMC Hack

BMC, Endpoint Security, patch bypass, Supermicro, vulnerability / SecurityTicks

Patch Bypassed for Supermicro Vulnerability Allowing BMC Hack 2025-09-23 at 21:45 By Eduard Kovacs Binarly researchers have found a way to bypass a patch for a previously disclosed vulnerability. The post Patch Bypassed for Supermicro Vulnerability Allowing BMC Hack appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source React to

React to this headline:

Patch Bypassed for Supermicro Vulnerability Allowing BMC Hack Read More »

Unpatched Fortra GoAnywhere instances at risk of full takeover (CVE-2025-10035)

Don't miss, enterprise, Fortra, News, security update, SMBs, VulnCheck, vulnerability / SecurityTicks

Unpatched Fortra GoAnywhere instances at risk of full takeover (CVE-2025-10035) 2025-09-22 at 14:20 By Zeljka Zorz If you’re running Fortra’s GoAnywhere managed file transfer solution and you haven’t updated to the latest available version for a while, do so now or risk getting your instance compromised via CVE-2025-10035. About CVE-2025-10035 CVE-2025-10035 is a critical deserialization

React to this headline:

Unpatched Fortra GoAnywhere instances at risk of full takeover (CVE-2025-10035) Read More »

Fortra Patches Critical GoAnywhere MFT Vulnerability

Fortra, MFT, Vulnerabilities, vulnerability / SecurityTicks

Fortra Patches Critical GoAnywhere MFT Vulnerability 2025-09-22 at 10:54 By Ionut Arghire Tracked as CVE-2025-10035 (CVSS score of 10), the critical deserialization vulnerability could be exploited for command injection. The post Fortra Patches Critical GoAnywhere MFT Vulnerability appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source React to this headline:

React to this headline:

Fortra Patches Critical GoAnywhere MFT Vulnerability Read More »

Many networking devices are still vulnerable to pixie dust attack

attack, consumer, Don't miss, Features, firmware, legacy technology, News, SMBs, TP-LINK, vulnerability, wireless / SecurityTicks

Many networking devices are still vulnerable to pixie dust attack 2025-09-17 at 18:22 By Zeljka Zorz Despite having been discovered and reported in 2014, the vulnerability that allows pixie dust attacks still impacts consumer and SOHO networking equipment around the world, Netrise researchers have confirmed. WPS and the pixie dust attack Wi-Fi Protected Setup (WPS)

React to this headline:

Many networking devices are still vulnerable to pixie dust attack Read More »

Payment System Vendor Took Year+ to Patch Infinite Card Top-Up Hack: Security Firm

Featured, hardware, KioSoft, MiFare, NFC, payment, Vulnerabilities, vulnerability / SecurityTicks

Payment System Vendor Took Year+ to Patch Infinite Card Top-Up Hack: Security Firm 2025-09-12 at 11:47 By Eduard Kovacs KioSoft was notified about a serious NFC card vulnerability in 2023 and only recently claimed to have released a patch. The post Payment System Vendor Took Year+ to Patch Infinite Card Top-Up Hack: Security Firm appeared

React to this headline:

Payment System Vendor Took Year+ to Patch Infinite Card Top-Up Hack: Security Firm Read More »

Akira ransomware affiliates continue breaching organizations via SonicWall firewalls

ACSC, Australia, Don't miss, Hot stuff, News, Ransomware, Rapid7, SonicWall, vulnerability / SecurityTicks

Akira ransomware affiliates continue breaching organizations via SonicWall firewalls 2025-09-11 at 18:25 By Zeljka Zorz Over a year after SonicWall patched CVE-2024-40766, a critical flaw in its next-gen firewalls, ransomware attackers are still gaining a foothold in organizations by exploiting it. Like last September and earlier this year, the attackers are affiliates of the Akira

React to this headline:

Akira ransomware affiliates continue breaching organizations via SonicWall firewalls Read More »

Critical Chrome Vulnerability Earns Researcher $43,000

Chrome, patch, Vulnerabilities, vulnerability / SecurityTicks

Critical Chrome Vulnerability Earns Researcher $43,000 2025-09-11 at 16:35 By Ionut Arghire Google patched a critical use-after-free vulnerability in Chrome that could potentially lead to code execution. The post Critical Chrome Vulnerability Earns Researcher $43,000 appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source React to this headline:

React to this headline:

Critical Chrome Vulnerability Earns Researcher $43,000 Read More »