Tag: RCE
‘MagicDot’ Windows Weakness Allows Unprivileged Rootkit Activity
BLACK HAT ASIA – Singapore – A known issue associated with the DOS-to-NT path conversion process in Windows opens up significant risk for businesses...
Breaking News
GPT-4 can exploit real vulnerabilities by reading advisories
AI agents, which combine large language models with automation software, can successfully exploit real world security vulnerabilities by reading security advisories, academics have claimed.
In...
How Do We Integrate LLMs Security Into Application Development?
Question: What do we really know about large language model (LLM) security? And are we willingly opening the front door to chaos by using...
Apple Security Bug Opens iPhone, iPad to RCE
Apple finally has released more details on the mysterious updates the company silently pushed last week for iOS and iPadOS 17.4.1.As it turns out,...
Patch Now: Critical Fortinet RCE Bug Under Active Attack
As expected, cyberattackers have pounced on a critical remote code execution (RCE) vulnerability in the Fortinet Enterprise Management Server (EMS) that was patched last...
Ivanti Keeps Security Teams Scrambling With 2 More Vulns
Ivanti, whose products have been a big target for attackers recently, has disclosed two more critical vulnerabilities in its technologies — raising more questions...
Session Takeover Bug in AWS Apache Airflow Reveals Larger Cloud Risk
A vulnerability in Amazon Web Services' (AWS) Managed Workflows for Apache Airflow (MWAA) could have allowed hackers to access users' sessions, perform remote code...
Fortra Releases Update on Critical Severity RCE Flaw
Fortra this week released an update for a critical vulnerability that was initially discovered in August 2023.Tracked as CVE-2024-25153 with a critical severity CVSS...
Stealth Bomber: Atlassian Confluence Exploits Drop Web Shells In-Memory
Fresh proof-of-concept (PoC) exploits are circulating in the wild for a widely targeted Atlassian Confluence Data Center and Confluence Server flaw. The new attack...
JetBrains TeamCity Mass Exploitation Underway, Rogue Accounts Thrive
Attacks targeting two security vulnerabilities in the TeamCity CI/CD platform have begun in earnest just days after its developer, JetBrains, disclosed the flaws on...
Joomla XSS Bugs Open Millions of Websites to RCE
The Joomla open source content management system (CMS) is vulnerable to multiple cross-site scripting (XSS) security vulnerabilities that could allow remote code execution (RCE).Sonar's...
Attackers Exploit Microsoft Security-Bypass Zero-Day Bugs
Microsoft's scheduled Patch Tuesday security update for February includes fixes for two zero-day security vulnerabilities under active attack, plus 71 other flaws across a...
Latest Intelligence
