SecurityWeek (21 minutes ago)
The malicious activity started shortly after a researcher dropped over 30 zero-days. N-able patched the unauthenticated ones.
Read the full story on SecurityWeek.
Multiple threat actors are abusing GSocket, a legitimate open-source remote access tool, to maintain access to Linux servers even after patching the vulnerabilities exploited to gain initial access.
A critical flaw in MongoDB Server allows an unauthenticated attacker to send two requests that trigger a crash on the database server. The crash occurs only if that server is later chosen to take over as the main server while it still lacks some recent changes.
Attackers could exploit a critical Red Hat Quay flaw to steal private container images, overwrite repositories and maintain persistent access.
The WhiteArmor ransomware group claims it stole 100GB of data from the shipping giant’s systems.
A flaw fixed in Node.js this week lets unauthenticated clients crash servers that use the runtime’s built-in HTTP/2 support on the 24.x and 26.x release lines. A second HTTP/2 flaw can cause a server to send a client pieces of its memory, including responses intended for other connections.
Starting Tuesday, an attacker used stolen credentials for 4,837 GitHub accounts to plant a secret stealer in repositories those accounts could write to, according to Aikido Security, a security software company.
The authentication bypass allows attackers to execute arbitrary code as admin and take over XCP-ng nodes.
Attackers could exploit them for command execution, memory overwrites, and privilege escalation.
Attackers could exploit the bugs to tamper with certificate entries, achieve remote code execution, and compromise hosts.
The Series C round will fund international expansion and more autonomous features for the firm’s device security platform.
65 active sources
20 Turkish · 45 English
All sources
