Security Affairs

NOVEMBER 17, 2024

A Really Simple Security plugin flaw affects 4M+ sites, allowing attackers full admin access. Wordfence researchers warn of a vulnerability, tracked as CVE-2024-10924 (CVSS Score of 9.8), in the Really Simple Security plugin that affects 4M+ sites. It’s one of the most critical WordPress vulnerabilities ever. and up to 9.1.1.1

Security 183

Security Authentication Access IT 183

Security Affairs

MAY 22, 2024

A critical security vulnerability in Veeam Backup Enterprise Manager could allow threat actors to bypass authentication. A critical vulnerability, tracked as CVE-2024-29849 (CVSS score: 9.8), in Veeam Backup Enterprise Manager could allow attackers to bypass authentication.

Authentication 323

Authentication IT Security Information Security 323

Security Affairs

NOVEMBER 7, 2024

Cybersecurity and Infrastructure Security Agency (CISA) adds Palo Alto Expedition, Android, CyberPanel and Nostromo nhttpd bugs to its Known Exploited Vulnerabilities catalog. CVE-2024-43093 CVE-2024-43047″ reads the security bulletin published by Google. The researcher Brian Hysell reported the flaw to the security vendor.

IT 311

IT Authentication Cybersecurity Risk 311

Security Affairs

JANUARY 19, 2025

The vulnerability allows authenticated attackers with Subscriber access to exploit a missing capability check, leading to information disclosure. ” Despite the availability of the security patch, hundreds of thousands of websites have yet to upgrade to the latest version, 2.8.2. .

Metadata 311

Metadata Authentication Consumer Services Cloud 311

Security Affairs

JULY 1, 2024

Juniper Networks released out-of-band security updates to address a critical authentication bypass vulnerability impacting some of its routers. The company discovered the vulnerability during internal product security testing or research. is a Missing Authentication for Critical Function vulnerability. before 6.1.9-lts,

Authentication 317

Authentication IT Cloud Security 317

Security Affairs

OCTOBER 19, 2024

Cybersecurity and Infrastructure Security Agency (CISA) adds Veeam Backup and Replication vulnerability to its Known Exploited Vulnerabilities catalog. Cybersecurity and Infrastructure Security Agency (CISA) added the Veeam Backup and Replication flaw CVE-2024-40711 (CVSS score of 9.8) impacting Veeam Backup & Replication (VBR).

IT 323

IT Ransomware Authentication Cybersecurity 323

Security Affairs

MARCH 8, 2024

The three flaws fixed are: CVE-2024-21899 : an improper authentication vulnerability could allow users to compromise the security of the system via a network. CVE-2024-21900 : an injection vulnerability could allow authenticated users to execute commands via a network.

Authentication 335

Authentication IT Access Security 335

Security Affairs

NOVEMBER 8, 2024

.” Palo Alto Networks recommends reviewing best practices for securing management access to its devices. Cybersecurity and Infrastructure Security Agency (CISA) added a Palo Alto Expedition Missing Authentication Vulnerability, tracked as CVE-2024-5910 , to its Known Exploited Vulnerabilities (KEV) catalog.

Authentication 289

Authentication Cybersecurity Access Communications 289

Security Affairs

JULY 4, 2024

Twilio states that threat actors have identified the phone numbers of users of its two-factor authentication app, Authy, TechCrunch reported. This week the messaging firm told TechCrunch that “threat actors” identified data of Authy users, a two-factor authentication app owned by Twilio, including their phone numbers.

Authentication 327

Authentication Phishing Communications Access 327

Security Affairs

JUNE 16, 2024

Taiwanese manufacturer giant ASUS addressed a critical remote authentication bypass vulnerability impacting several router models. ASUS addresses a critical remote authentication bypass vulnerability, tracked as CVE-2024-3080 (CVSS v3.1 score: 9.8), impacting seven router models. impacting multiple devices.

Authentication 323

Authentication Manufacturing Access IT 323

Security Affairs

MAY 29, 2024

The advisory published by the company states that the attacks targeted the endpoints supporting the cross-origin authentication feature, the attacks hit several customers. Such cross-domain requests would otherwise be forbidden by web browsers as indicated by the same origin security policy (opens new window). ” reads advisory.

Authentication 311

Authentication IT Passwords Cloud 311

Security Affairs

OCTOBER 28, 2024

A long supply chain adds third-party risks, as each partner’s security affects your own, making identity and access management more challenging. Each company brings its own security (or lack thereof) into the game, so your overall security status is essentially the average of yours, plus anyone else’s to whom you’re connected (i.e.,

B2B 311

B2B Cybersecurity Risk Access 311

Security Affairs

JANUARY 16, 2025

Over the years, multiple security experts have identified several vulnerabilities in MikroTik routers, such as a remote code execution vulnerability detailed by VulnCheck researchers here. ” reads the report published by Infoblox. ” concludes the report.

File names 338

File names Authentication Access Archiving 338

Security Affairs

JANUARY 30, 2025

After responsible disclosure, DeepSeek promptly secured the issue. ” The researchers noted that the leak could have allowed attackers to take full control of the database and potentially escalate privileges within the DeepSeek environment, without any authentication. .” ” reads the report published by Wiz.

Metadata 298

Metadata Authentication Access Passwords 298

Security Affairs

JANUARY 15, 2025

“Threat actor dubbedCodefingeruses compromised AWS keys to encrypt S3 bucket data via SSE-C, leveraging AWSs secure encryption infrastructure in a way that prevents recovery without their generated key.” Instead, only an HMAC (hash-based message authentication code) is logged in AWS CloudTrail. Halcyon continues.

Encryption 290

Encryption Ransomware Authentication Cloud 290

Security Affairs

APRIL 6, 2025

Oracle confirms a cloud data breach, quietly informing customers while downplaying the impact of the security breach. The incident has raised serious concerns about the security of Oracles cloud infrastructure and the potential implications for affected customers. Oracle Classic has the security incident. ” Beaumont wrote.

Data breaches 309

Data breaches Cloud Encryption Communications 309

Security Affairs

OCTOBER 12, 2024

Since April 2021, Russian state-sponsored hackers have exploited vulnerabilities, including Zimbra’s CVE-2022-27924 for injecting commands to access credentials and emails, and JetBrains TeamCity’s CVE-2023-42793 for arbitrary code execution through an authentication bypass. cyber agencies warned.

Data collection 338

Data collection Authentication Access Cybersecurity 338

Security Affairs

FEBRUARY 4, 2025

The two flaws are, respectively, a remote code execution issue and an authentication bypass vulnerability. The unauthenticated RCE security vulnerability PSV-2023-0039 impacts the following product models: XR1000, the issue was fixed in firmware version 1.0.0.74 XR1000v2, the issue was fixed in firmware version 1.1.0.22

Authentication 250

Authentication Security IT Information Security 250

Security Affairs

MAY 9, 2024

Threat actors exploit recently disclosed Ivanti Connect Secure (ICS) vulnerabilities to deploy the Mirai botnet. Researchers from Juniper Threat Labs reported that threat actors are exploiting recently disclosed Ivanti Connect Secure (ICS) vulnerabilities CVE-2023-46805 and CVE-2024-21887 to drop the payload of the Mirai botnet.

Security 334

Security Authentication Ransomware Access 334

Security Affairs

FEBRUARY 16, 2025

” Device code phishing attacks exploit authentication flows to steal tokens, granting attackers access to accounts and data. Upon clicking the meeting invitation embedded in the message, recipients are prompted to authenticate using a threat actor-generated device code. ” continues the report.

Phishing 281

Phishing Authentication Access Government 281

Security Affairs

JANUARY 2, 2025

Clickjacking attacks trick users into unintended clicks, this practice has declined as modern browsers enforce “SameSite: Lax” cookies, blocking cross-site authentication. It can also manipulate users into making unauthorized account changes, such as altering security settings or confirming transactions.

Authentication 285

Authentication IT Security Access 285

Security Affairs

JANUARY 24, 2025

Cybersecurity and Infrastructure Security Agency (CISA) adds SonicWall SMA1000 vulnerability to its Known Exploited Vulnerabilities catalog. This week, SonicWall warned customers of a critical security vulnerability, tracked as CVE-2025-23006 (CVSS score of 9,8) impacting its Secure Mobile Access (SMA) 1000 Series appliances.

IT 225

IT Authentication Cybersecurity Access 225

Security Affairs

MARCH 29, 2024

Cisco warns customers of password-spraying attacks that have been targeting Remote Access VPN (RAVPN) services of Cisco Secure Firewall devices. Cisco is warning customers of password-spraying attacks that have been targeting Remote Access VPN (RAVPN) services configured on Cisco Secure Firewall devices.

Passwords 326

Passwords Security Authentication Access 326

Security Affairs

JANUARY 31, 2025

Security researchers from Michelin CERT and Abicom, including Maxime Escourbiac, Yassine Bengana, and Quentin Ebel, detected and reported the vulnerabilities. is an authentication bypass vulnerability in VMware Aria Operations for Logs. The above vulnerabilities impact versions 8.x VMware Aria Operations Version 8.18.3

Authentication 259

Authentication Cloud Cybersecurity Access 259

Security Affairs

MARCH 13, 2025

GitLab addressed two critical authentication bypass vulnerabilities in Community Edition (CE) and Enterprise Edition (EE). GitLab released security updates to address critical vulnerabilities in Community Edition (CE) and Enterprise Edition (EE). ” reads the advisory published by the company. ” continues the analysis.

Authentication 168

Authentication Libraries Data breaches Security 168

Security Affairs

SEPTEMBER 1, 2024

A vulnerability in an air transport security system allowed unauthorized individuals to bypass airport security screenings. These systems verify an employee’s active employment status with their airline, and depending on their status authorize to skip security screening or access the cockpit. ” added Carroll.

Security 335

Security Access Authentication IT 335

Security Affairs

MARCH 8, 2024

Cisco addressed two high-severity vulnerabilities in Secure Client that could lead to code execution and unauthorized remote access VPN sessions. Cisco released security patches to address two high-severity vulnerabilities in Secure Client respectively tracked as CVE-2024-20337 and CVE-2024-20338.

Security 332

Security IT Authentication Libraries 332

Security Affairs

NOVEMBER 15, 2024

The malware could harvest a huge trove of data from infected systems, including cookies, autofill, cryptocurrency wallets, 2FA authenticators, password managers, and email client information. Glove Stealer is a.NET-based information stealer that targets browser extensions and locally installed software to steal sensitive data.

Encryption 289

Encryption File names Phishing Passwords 289

Security Affairs

OCTOBER 11, 2024

The Internet Archive disclosed a data breach, the security incident impacted more than 31 million users of its “The Wayback Machine.” Hunt also verified the authenticity of the information included in the stolen archive. Hunt will add the information of the impacted users to HIBP very soon.

Archiving 300

Archiving Data breaches Passwords File names 300

Collaboration 2.0

APRIL 1, 2025

Two-factor authentication is a crucial security measure that requires an extra step for signing in to high-value services. Want to avoid having your online accounts hacked? Here's how to set up 2FA and which accounts to focus on.

Authentication 174

Authentication Security 174

Data Breach Today

JULY 10, 2024

Mandatory Multifactor Authentication Among New Features Given to Administrators In the wake of multiple customers of Snowflake collectively losing terabytes of data to attackers, the cloud-based data warehousing platform has rolled out a swath of cybersecurity improvements, including allowing administrators to make multifactor authentication mandatory (..)

Authentication 303

Authentication Security Cloud Cybersecurity 303

Security Affairs

DECEMBER 27, 2024

“A Denial of Service vulnerability in the DNS Security feature of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to send a malicious packet through the data plane of the firewall that reboots the firewall. when access is limited to authenticated end users via Prisma Access. It is fixed in PAN-OS 10.1.14-h8,

Access 280

Access Authentication Cloud Cybersecurity 280

Security Affairs

DECEMBER 19, 2024

ai security researcher Zach Hanley (@hacks_zach) reported this vulnerability to Fortinet. ” The experts added that FortiWLM’s verbose logs expose session IDs, enabling attackers to exploit log file read vulnerabilities to hijack sessions and access authenticated endpoints. ” reads the advisory published by the vendor.

Authentication 247

Authentication Education Access IT 247

Security Affairs

APRIL 12, 2024

Credential stuffing is a type of attack in which hackers use automation and lists of compromised usernames and passwords to defeat authentication and authorization mechanisms, with the end goal of account takeover (ATO) and/or data exfiltration.” The company has enabled two-factor authentication (2FA) by default for all customer accounts.

Security 330

Security Passwords Authentication Data breaches 330

Security Affairs

JUNE 2, 2024

Every week the best security articles from Security Affairs are free for you in your email box. A new round of the weekly SecurityAffairs newsletter arrived! Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press.

Data breaches 307

Data breaches Security Ransomware Phishing 307

The Last Watchdog

JANUARY 15, 2025

15, 2025, CyberNewswire — Quantum computing is set to revolutionize technology, but it also presents a significant security risk for financial institutions. Theinvestment comes as global concern grows over the vulnerability of traditional security methods. Prague, Czech Republic, Jan.

Authentication 130

Authentication Security Marketing Compliance 130