Veeam has released patches for critical-severity vulnerabilities in Backup & Replication, ONE, and Service Provider Console.
The post Veeam Patches Critical Vulnerabilities in Enterprise Products appeared first on SecurityWeek.
LiteSpeed Cache Plugin Vulnerability Exposes Millions of WordPress Sites to Attacks
A vulnerability in the LiteSpeed Cache WordPress plugin leads to the exposure of sensitive information, including user cookies.
The post LiteSpeed Cache Plugin Vulnerability Exposes Millions of WordPress Sites to Attacks appeared first on SecurityWeek.
CISA Breaks Silence on Controversial ‘Airport Security Bypass’ Vulnerability
Researchers and the TSA have different views on the impact of vulnerabilities in an airport security application that could allegedly allow the bypass of certain airport security systems.
The post CISA Breaks Silence on Controversial ‘Airport Security Bypass’ Vulnerability appeared first on SecurityWeek.
Cisco Patches Critical Vulnerabilities in Smart Licensing Utility
Cisco has released patches for multiple vulnerabilities, including two critical-severity flaws in Smart Licensing Utility.
The post Cisco Patches Critical Vulnerabilities in Smart Licensing Utility appeared first on SecurityWeek.
Microsoft Tackling Windows Logfile Flaws With New HMAC-Based Security Mitigation
Microsoft is experimenting with a major new security mitigation to block attacks targeting flaws in the Windows Common Log File System (CLFS).
The post Microsoft Tackling Windows Logfile Flaws With New HMAC-Based Security Mitigation appeared first on SecurityWeek.
Zyxel Patches Critical Vulnerabilities in Networking Devices
Zyxel has released patches for multiple vulnerabilities in its networking devices, including a critical flaw impacting access points and security routers.
The post Zyxel Patches Critical Vulnerabilities in Networking Devices appeared first on SecurityWeek.
D-Link Warns of Code Execution Flaws in Discontinued Router Model
D-Link warns of multiple remote code execution vulnerabilities impacting its discontinued DIR-846 router model.
The post D-Link Warns of Code Execution Flaws in Discontinued Router Model appeared first on SecurityWeek.
VMware Patches High-Severity Code Execution Flaw in Fusion
VMware rolls out patch for a high-severity code execution vulnerability in the Fusion hypervisor.
The post VMware Patches High-Severity Code Execution Flaw in Fusion appeared first on SecurityWeek.
Chrome 128 Updates Patch High-Severity Vulnerabilities
Google has released two Chrome 128 updates to address six high-severity vulnerabilities reported by external researchers.
The post Chrome 128 Updates Patch High-Severity Vulnerabilities appeared first on SecurityWeek.
Microsoft Says North Korean Cryptocurrency Thieves Behind Chrome Zero-Day
Redmond’s threat intel team said exploitation of CVE-2024-7971 can be attributed to a North Korean APT targeting the cryptocurrency sector for financial gain.
The post Microsoft Says North Korean Cryptocurrency Thieves Behind Chrome Zero-Day appeared first on SecurityWeek.
