Categoria: exploited

SysAid Zero-Day Vulnerability Exploited by Ransomware Group

sysaid-zero-day-vulnerability-exploited-by-ransomware-group

CVE-2023-47246 zero-day vulnerability in SysAid IT service management software has been exploited by Cl0p ransomware affiliates.

The post SysAid Zero-Day Vulnerability Exploited by Ransomware Group appeared first on SecurityWeek.

‘Looney Tunables’ Glibc Vulnerability Exploited in Cloud Attacks

‘looney-tunables’-glibc-vulnerability-exploited-in-cloud-attacks

Glibc vulnerability affecting major Linux distributions and tracked as Looney Tunables exploited in cloud attacks by Kinsing group.

The post ‘Looney Tunables’ Glibc Vulnerability Exploited in Cloud Attacks appeared first on SecurityWeek.

Exploitation of Critical Confluence Vulnerability Begins

exploitation-of-critical-confluence-vulnerability-begins

Threat actors have started exploiting a recent critical vulnerability in Confluence Data Center and Confluence Server.

The post Exploitation of Critical Confluence Vulnerability Begins appeared first on SecurityWeek.

Apache ActiveMQ Vulnerability Exploited as Zero-Day

apache-activemq-vulnerability-exploited-as-zero-day

The recently patched Apache ActiveMQ vulnerability tracked as CVE-2023-46604 has been exploited as a zero-day since at least October 10.

The post Apache ActiveMQ Vulnerability Exploited as Zero-Day appeared first on SecurityWeek.

Mass Exploitation of ‘Citrix Bleed’ Vulnerability Underway

mass-exploitation-of-‘citrix-bleed’-vulnerability-underway

Multiple threat actors are exploiting CVE-2023-4966, aka Citrix Bleed, a critical vulnerability in NetScaler ADC and Gateway.

The post Mass Exploitation of ‘Citrix Bleed’ Vulnerability Underway appeared first on SecurityWeek.

Russian Hackers Caught Exploiting Roundcube Webmail Zero-Day

russian-hackers-caught-exploiting-roundcube-webmail-zero-day

Russian APT Winter Vivern exploits a zero-day in the Roundcube webmail server in attacks targeting European governments.

The post Russian Hackers Caught Exploiting Roundcube Webmail Zero-Day appeared first on SecurityWeek.

Number of Cisco Devices Hacked via Unpatched Vulnerability Increases to 40,000

number-of-cisco-devices-hacked-via-unpatched-vulnerability-increases-to-40,000

The number of Cisco devices hacked via the CVE-2023-20198 zero-day has reached 40,000, including many in the US.

The post Number of Cisco Devices Hacked via Unpatched Vulnerability Increases to 40,000 appeared first on SecurityWeek.

Recent NetScaler Vulnerability Exploited as Zero-Day Since August

recent-netscaler-vulnerability-exploited-as-zero-day-since-august

Mandiant says the recently patched Citrix NetScaler vulnerability CVE-2023-4966 had been exploited as zero-day since August.

The post Recent NetScaler Vulnerability Exploited as Zero-Day Since August appeared first on SecurityWeek.

US Gov Expects Widespread Exploitation of Atlassian Confluence Vulnerability

us-gov-expects-widespread-exploitation-of-atlassian-confluence-vulnerability

CISA, FBI, and MS-ISAC warn of potential widespread exploitation of CVE-2023-22515, a critical vulnerability in Atlassian Confluence.

The post US Gov Expects Widespread Exploitation of Atlassian Confluence Vulnerability appeared first on SecurityWeek.

Cisco Devices Hacked via IOS XE Zero-Day Vulnerability

cisco-devices-hacked-via-ios-xe-zero-day-vulnerability

Cisco is warning customers that a new IOS XE zero-day vulnerability tracked as CVE-2023-20198 is being exploited to hack devices.

The post Cisco Devices Hacked via IOS XE Zero-Day Vulnerability appeared first on SecurityWeek.