Cybersecurity News, Insights and Analysis | SecurityWeek
SecurityWeek provides cybersecurity news and information to global enterprises, with expert insights & analysis for IT security professionals
Organizations Warned of Exploited Fortinet FortiOS Vulnerability
Oct 10, 2024 · The US cybersecurity agency CISA on Wednesday warned that a Fortinet FortiOS flaw patched in February is being exploited in the wild and has added it to its Known Exploited Vulnerabilities (KEV) list along with two Ivanti Cloud Services Appliance (CSA) bugs.
Firefox 131 Update Patches Exploited Zero-Day Vulnerability
Oct 10, 2024 · CVE-2024-9680 is the first documented Firefox zero-day of 2024 to be exploited in the wild. In March, however, Mozilla patched two browser zero-days that were demonstrated at Pwn2Own Vancouver 2024. Tracked as CVE-2024-29943 and CVE-2024-29944, they were discovered by security researcher Manfred Paul, who chained them for sandbox escape and code execution on the system.
Google Patches Sixth Exploited Chrome Zero-Day of 2024
Aug 22, 2024 · The internet giant says it handed out $95,000 in bug bounty rewards to the reporting researchers, with the highest payout – of $36,000 – going to an anonymous researcher who found the use-after-free bug in Passwords (CVE-2024-7964).
Microsoft Warns of Six Windows Zero-Days Being Actively Exploited
CVE-2024-38213 — Microsoft describes this as a Windows Mark of the Web security feature bypass being exploited in active attacks. “An attacker who successfully exploited this vulnerability could bypass the SmartScreen user experience.” CVE-2024-38193 – An elevation of privilege security defect in the Windows Ancillary Function Driver for WinSock is being exploited in the wild.
Latest News - SecurityWeek
4 days ago · Sublime said the new capital was provided by IVP, Citi Ventures, Index Ventures, Decibel Partners, and Slow Ventures and brings the total raised to $93.8 million.
Malware & Threats Archives - SecurityWeek
News and information on emerging malware and threats for enterprise cybersecurity teams
Millions of Kia Cars Were Vulnerable to Remote Hacking
Sep 27, 2024 · “From the victim’s side, there was no notification that their vehicle had been accessed nor their access permissions modified. An attacker could resolve someone’s license plate, enter their VIN through the API, then track them passively and send active commands like unlock, start, or honk,” Curry explains.
Palo Alto Patches Critical Firewall Takeover Vulnerabilities
Oct 9, 2024 · Palo Alto Networks on Wednesday pushed out patches for several serious flaws in its Expedition customer migration tool and warned that attackers can launch trivial exploits to take over firewall administrator accounts.
CISA Warns of Exploited Linux Kernel Vulnerability
May 31, 2024 · On Thursday, two months after the exploit was made public, CISA added CVE-2024-1086 to its Known Exploited Vulnerabilities (KEV) catalog, warning that threat actors are targeting it in the wild.. The agency made no mention of …
Skip to content