NIST is receiving support to get the NVD and CVE processing back on track within the next few months.
The post NIST Getting Outside Help for National Vulnerability Database appeared first on SecurityWeek.
Vulnerabilities in Eclipse ThreadX Could Lead to Code Execution
Vulnerabilities in the real-time IoT operating system Eclipse ThreadX before version 6.4 could lead to denial-of-service and code execution.
The post Vulnerabilities in Eclipse ThreadX Could Lead to Code Execution appeared first on SecurityWeek.
Netflix Paid Out Over $1 Million via Bug Bounty Program
Netflix has paid out more than $1 million for vulnerabilities found in its products since the launch of its bug bounty program in 2016.
The post Netflix Paid Out Over $1 Million via Bug Bounty Program appeared first on SecurityWeek.
JAVS Courtroom Audio-Visual Software Installer Serves Backdoor
Backdoored JAVS courtroom recording and management software installer puts thousands at risk of complete takeover.
The post JAVS Courtroom Audio-Visual Software Installer Serves Backdoor appeared first on SecurityWeek.
Google Patches Fourth Chrome Zero-Day in Two Weeks
Exploited in the wild, Chrome vulnerability CVE-2024-5274 is a high-severity flaw described as a type confusion in the V8 JavaScript and WebAssembly engine.
The post Google Patches Fourth Chrome Zero-Day in Two Weeks appeared first on SecurityWeek.
Zero-Day Attacks and Supply Chain Compromises Surge, MFA Remains Underutilized: Rapid7 Report
Attackers are getting more sophisticated, better armed, and faster. Nothing in Rapid7’s 2024 Attack Intelligence Report suggests that this will change.
The post Zero-Day Attacks and Supply Chain Compromises Surge, MFA Remains Underutilized: Rapid7 Report appeared first on SecurityWeek.
Critical Veeam Vulnerability Leads to Authentication Bypass
Veeam Backup Enterprise Manager update resolves multiple vulnerabilities, including a critical authentication bypass.
The post Critical Veeam Vulnerability Leads to Authentication Bypass appeared first on SecurityWeek.
Critical Authentication Bypass Resolved in GitHub Enterprise Server
Critical vulnerability in GitHub Enterprise Server allows unauthenticated attackers to obtain administrative privileges.
The post Critical Authentication Bypass Resolved in GitHub Enterprise Server appeared first on SecurityWeek.
Ivanti Patches Critical Code Execution Vulnerabilities in Endpoint Manager
Ivanti has released product updates to resolve multiple vulnerabilities, including critical code execution flaws in Endpoint Manager.
The post Ivanti Patches Critical Code Execution Vulnerabilities in Endpoint Manager appeared first on SecurityWeek.
Chrome 125 Update Patches High-Severity Vulnerabilities
Google released a Chrome 125 update to resolve four high-severity vulnerabilities reported by external researchers.
The post Chrome 125 Update Patches High-Severity Vulnerabilities appeared first on SecurityWeek.
