Threat actor APT28 targets Cisco routers with an old vulnerability
The U.S., Europe and Ukraine are reportedly targets in this malware threat. Learn how to protect affected Cisco routers. Image: ...
Read moreTag: vulnerability
Google Proposes More Transparent Vulnerability Management Practices
Google today published a white paper calling on vendors to provide more transparency into their vulnerability management practices. A longtime ...
Read moreVulnerability in Toyota Management Platform Provided Access to Customer Data
A severe vulnerability in the Toyota Customer 360 customer relationship management (CRM) platform allowed a security researcher to access the ...
Read moreFortinet Shares Clarifications on Exploitation of FortiNAC Vulnerability
Fortinet has shared some important clarifications following what the company described as ‘sensationalized reports’ regarding recent exploitation attempts targeting a ...
Read moreNewly Disclosed Vulnerability Exposes EOL Arris Routers to Attacks
Malwarebytes warns of a remote code execution vulnerability impacting several Arris routers, for which proof-of-concept (PoC) exploit code has been ...
Read more
In-the-Wild Exploitation of Recent ManageEngine Vulnerability Commences
Cloud risk management and threat detection firm Rapid7 warns that it has seen organizations being compromised in attacks exploiting a ...
Read moreChinese Hackers Exploited Fortinet VPN Vulnerability as Zero-Day
A China-linked threat actor was observed exploiting a recently disclosed Fortinet FortiOS SSL-VPN vulnerability when it was still a zero-day, ...
Read moreVendors Actively Bypass Security Patch for Year-Old Magento Vulnerability
Vendors and agencies are actively bypassing the security patch that Adobe released in February 2022 to address CVE-2022-24086, a critical ...
Read moreFortinet Says Recently Patched Vulnerability Exploited to Hack Governments
Fortinet reported this week that a recently patched vulnerability tracked as CVE-2022-42475 has been exploited in highly targeted attacks aimed ...
Read moreExploitation of Control Web Panel Vulnerability Starts After PoC Publication
Security researchers are observing exploitation attempts targeting a critical Control Web Panel (CWP) vulnerability, following the publication of proof-of-concept (PoC) ...
Read more