Security Affairs

SEPTEMBER 16, 2024

SolarWinds addressed a critical remote code execution vulnerability, tracked as CVE-2024-28991, in Access Rights Manager. “SolarWinds Access Rights Manager (ARM) was found to be susceptible to a remote code execution vulnerability.” SolarWinds addressed the issues with the release of Access Rights Manager (ARM) 2024.3.1.

Access 333

Access Authentication Security Information Security 333

Security Affairs

NOVEMBER 8, 2024

Palo Alto Networks warns customers to restrict access to their next-generation firewalls because of a potential RCE flaw in the PAN-OS management interface. Palo Alto Networks warns customers to limit access to their next-gen firewall management interface due to a potential remote code execution vulnerability in PAN-OS.

Authentication 287

Authentication Cybersecurity Access Communications 287

Security Affairs

NOVEMBER 16, 2024

Last week, Palo Alto Networks warned customers to limit access to their next-gen firewall management interface due to a potential remote code execution vulnerability (CVSSv4.0 In particular, we recommend that you ensure that access to the management interface is possible only from trusted internal IPs and not from the Internet.

Cybersecurity 312

Cybersecurity Access Communications Security 312

Security Affairs

NOVEMBER 17, 2024

A Really Simple Security plugin flaw affects 4M+ sites, allowing attackers full admin access. Wordfence researchers warn of a vulnerability, tracked as CVE-2024-10924 (CVSS Score of 9.8), in the Really Simple Security plugin that affects 4M+ sites. It’s one of the most critical WordPress vulnerabilities ever.

Security 182

Security Authentication Access IT 182

Security Affairs

OCTOBER 21, 2024

” Immediately, the company launched an investigation, which is still ongoing, into the alleged security incident. “Cisco is investigating reports that an unauthorized actor is alleging to have gained access to certain Cisco data and data of our customers.”

Data breaches 324

Data breaches Access Cloud Security 324

Security Affairs

AUGUST 18, 2024

A large-scale extortion campaign compromised multiple organizations by exploiting publicly accessible environment variable files (.env). This extortion campaign involved several security failures, including exposing environment variables, using long-lived credentials, and the lack of a least privilege architecture. env files).

Access 351

Access Cloud Phishing Encryption 351

Security Affairs

MARCH 8, 2025

On February 5th, the security team detected suspicious activity in its ‘Order Information Distribution System,’ and immediately restricted access to device A. Further investigation revealed unauthorized access on February 15th, leading to the blocking of another device. reads the data breach notification.

Data breaches 285

Data breaches Communications Access IT 285

Security Affairs

MARCH 26, 2025

Broadcom released security updates to address a high-severity authentication bypass vulnerability, tracked as CVE-2025-22230 (CVSS score 9.8), impacting VMware Tools for Windows. The vulnerability is due to improper access control. ” reads the advisory. The vulnerability impacts VMware Tools versions 12.x.x, VMware Tools 12.5.1

Authentication 253

Authentication Cloud Access Security 253

Security Affairs

JANUARY 16, 2025

Over the years, multiple security experts have identified several vulnerabilities in MikroTik routers, such as a remote code execution vulnerability detailed by VulnCheck researchers here. The botnet’s SOCKS proxy setup enables access for hundreds of thousands of compromised machines. ” concludes the report.

File names 347

File names Authentication Access Archiving 347

Security Affairs

DECEMBER 3, 2024

Securities and Exchange Commission (SEC), the company discovered the attack on November 25. The threat actors had access to the company’s information technology systems and encrypted some of its data files. ” ù At this time, the company is not able to provide the timing of the restoration of full access to its IT systems. .

Ransomware 293

Ransomware Encryption Cybersecurity Access 293

Security Affairs

NOVEMBER 25, 2024

Threat actors exploit an outdated Avast Anti-Rootkit driver to evade detection, disable security tools, and compromise the target systems. With the driver installed and running, the malware gains kernel-level access to the system, providing it with the ability to terminate critical security processes and take control of the system.”

Access 267

Access Security IT Information Security 267

Security Affairs

JANUARY 19, 2025

A WordPress W3 Total Cache plugin vulnerability could allow attackers to access information from internal services, including metadata on cloud-based apps. The vulnerability allows authenticated attackers with Subscriber access to exploit a missing capability check, leading to information disclosure.

Metadata 309

Metadata Authentication Consumer Services Cloud 309

Security Affairs

FEBRUARY 27, 2025

Belgian authorities are investigating Chinese hackers for breaching its State Security Service (VSSE), stealing 10% of emails from 2021 to May 2023. The Belgian federal prosecutor’s office is probing a possible security breach on its State Security Service (VSSE) by China-linked threat actors. ” reported Reuters.

Security 174

Security Access Government Cybersecurity 174

Security Affairs

OCTOBER 12, 2024

Since April 2021, Russian state-sponsored hackers have exploited vulnerabilities, including Zimbra’s CVE-2022-27924 for injecting commands to access credentials and emails, and JetBrains TeamCity’s CVE-2023-42793 for arbitrary code execution through an authentication bypass. cyber agencies warned.

Data collection 337

Data collection Authentication Access Cybersecurity 337

Security Affairs

SEPTEMBER 1, 2024

A vulnerability in an air transport security system allowed unauthorized individuals to bypass airport security screenings. These systems verify an employee’s active employment status with their airline, and depending on their status authorize to skip security screening or access the cockpit. ” added Carroll.

Security 333

Security Access Authentication IT 333

Security Affairs

OCTOBER 31, 2024

Peruvian Interbank confirmed a data breach after threat actors accessed its systems and leaked stolen information online. Faced with this situation, we immediately deployed additional security measures to protect the operations and information of our clients.” ” reads the statement published by the company.

Data breaches 315

Data breaches Financial Services Passwords Security 315

Security Affairs

OCTOBER 19, 2024

Cybersecurity and Infrastructure Security Agency (CISA) adds Veeam Backup and Replication vulnerability to its Known Exploited Vulnerabilities catalog. Cybersecurity and Infrastructure Security Agency (CISA) added the Veeam Backup and Replication flaw CVE-2024-40711 (CVSS score of 9.8) impacting Veeam Backup & Replication (VBR).

IT 321

IT Ransomware Authentication Cybersecurity 321

The Last Watchdog

OCTOBER 23, 2024

22, 2024, CyberNewswire — INE Security offers essential advice to protect digital assets and enhance security. Warn “Small businesses face a unique set of cybersecurity challenges and threats and must be especially proactive with cybersecurity training,” said Dara Warn, CEO of INE Security. “At Cary, NC, Oct.

Security 162

Security Data breaches Passwords Cybersecurity 162

Security Affairs

JANUARY 30, 2025

Wiz Research discovered a publicly accessible ClickHouse database belonging to DeepSeek, exposing chat history, secret keys, and backend details. After responsible disclosure, DeepSeek promptly secured the issue. The experts used ClickHouses HTTP interface and accessed the /play path to execute arbitrary SQL queriesvia the browser.

Metadata 297

Metadata Authentication Access Passwords 297

Security Affairs

NOVEMBER 12, 2024

Apple iOS supports a new feature that reboots locked devices after extended inactivity, aiming to enhance data security for users. Apple ‘quietly’ implemented a new security feature that automatically reboots a locked device if it has not been used for several days. at the end of October. reported 404 Media.

Encryption 315

Encryption Passwords Security Communications 315

Security Affairs

OCTOBER 25, 2024

DLP is key in cybersecurity; a risk assessment identifies data risks, helping turn findings into real-world security improvements. DLP risk assessments involve identifying, evaluating, and mitigating risks associated with data loss or unauthorized access. Protecting sensitive data is what cybersecurity is all about.

Risk 302

Risk Cybersecurity Cloud Compliance 302

Security Affairs

SEPTEMBER 30, 2024

A critical vulnerability in the NVIDIA Container Toolkit could allow a container to escape and gain full access to the underlying host. in the NVIDIA Container Toolkit could allow an attacker to escape the container and gain full access to the underlying host. Attackers gain full read access to the host’s file system.

Access 306

Access Cloud Risk IT 306

Data Breach Today

JULY 23, 2024

Claroty CEO Vardi on Compensating Controls, Segmentation and Secure Remote Access The recent CrowdStrike outage highlights the need to shift from reactive risk management to proactive measures in cyber-physical security.

Security 343

Security Risk Access 343

Security Affairs

NOVEMBER 3, 2024

Quad7 botnet, also known as CovertNetwork-1658 or xlogin, was first spotted in the summer of 2023 by security researcher Gi7w0rm. Microsoft has notified affected customers and shared details on CovertNetwork-1658, Storm-0940 tactics, and recommended mitigations to help secure affected environments. ” continues the report.

Passwords 329

Passwords Access Cloud Government 329

Security Affairs

FEBRUARY 20, 2025

Citrix released security updates to address a high-severity security vulnerability, tracked as CVE-2024-12284 (CVSS score of 8.8) The company pointed out that only authenticated users with existing access to the NetScaler Console can exploit this vulnerability. ” reads the advisory. NetScaler Console 14.1

Authentication 292

Authentication Cloud Access Security 292

WIRED Threat Level

FEBRUARY 19, 2025

DOGE technologists Edward Coristinethe 19-year-old known online as Big Ballsand Kyle Schutt are now listed as staff at the Cybersecurity and Infrastructure Security Agency.

Cybersecurity 361

Cybersecurity Access Security 361

Security Affairs

JULY 5, 2024

The New York Times revealed that OpenAI suffered a security breach in 2023, but the company says source code and customer data were not compromised. OpenAI suffered a security breach in 2023, the New York Times reported. technologies.” ” reported the NYT.

Security 357

Security Artificial Intelligence Risk Access 357

Security Affairs

DECEMBER 6, 2024

Atrium Health launched an investigation into the security breach and discovered that from January 2015 to July 2019, certain online tracking technologies were active on its MyAtriumHealth (formerly MyCarolinas) Patient Portal, accessible via web and mobile. The company notified the US Department of Health and Human Services (HHS).

Data breaches 275

Data breaches Access Phishing Privacy 275

Security Affairs

FEBRUARY 24, 2025

Despite Microsoft phasing it out, it remains an active security risk. The botnet operators used stolen credentials from infostealer logs to target accounts at scale “These attacks are recorded in Non-Interactive Sign-In logs, which are often overlooked by security teams. ” continues the report. ” concludes the report.

Passwords 297

Passwords Authentication Access Cybersecurity 297

Security Affairs

OCTOBER 28, 2024

Italian police arrested four and are investigating dozens, including Leonardo Maria Del Vecchio, for alleged unauthorized access to state databases. Italian authorities have arrested four individuals as part of an investigation into alleged illegal access to state databases. ” reads a statement from a lawyer for Del Vecchio.

Computer and Electronics 335

Computer and Electronics Access Communications Marketing 335