A high-severity vulnerability in HikCentral Professional could lead to unauthorized access to certain URLs.
The post Hikvision Patches High-Severity Vulnerability in Security Management System appeared first on SecurityWeek.
CISA Warns of Windows Streaming Service Vulnerability Exploitation
CISA says a high-severity elevation of privilege vulnerability in Microsoft Streaming Service is actively exploited in the wild.
The post CISA Warns of Windows Streaming Service Vulnerability Exploitation appeared first on SecurityWeek.
Meta Patches Facebook Account Takeover Vulnerability
Meta has patched a critical vulnerability that could have been exploited to take over any Facebook account via a brute-force attack.
The post Meta Patches Facebook Account Takeover Vulnerability appeared first on SecurityWeek.
Cisco Patches High-Severity Vulnerabilities in Data Center OS
Cisco’s semiannual FXOS and NX-OS security advisory bundle resolves two high- and two medium-severity vulnerabilities.
The post Cisco Patches High-Severity Vulnerabilities in Data Center OS appeared first on SecurityWeek.
The Imperative for Modern Security: Risk-Based Vulnerability Management
By prioritizing vulnerabilities based on risk and aligning security efforts with business objectives, organizations can enhance their resilience to cyberattacks, optimize resource allocation, and maintain a proactive security posture.
The post The Imperative for Modern Security: Risk-Based Vulnerability Management appeared first on SecurityWeek.
Windows Zero-Day Exploited by North Korean Hackers in Rootkit Attack
North Korean group Lazarus exploited AppLocker driver zero-day CVE-2024-21338 for privilege escalation in attacks involving FudModule rootkit.
The post Windows Zero-Day Exploited by North Korean Hackers in Rootkit Attack appeared first on SecurityWeek.
Zyxel Patches Remote Code Execution Bug in Firewall Products
Taiwanese networking vendor Zyxel confirms security flaws in firewall and access points put users at risk of remote code execution attacks.
The post Zyxel Patches Remote Code Execution Bug in Firewall Products appeared first on SecurityWeek.
Critical Flaw in Popular ‘Ultimate Member’ WordPress Plugin
The vulnerability carries a CVSS severity score of 9.8/10 and affects web sites running the Ultimate Member WordPress membership plugin.
The post Critical Flaw in Popular ‘Ultimate Member’ WordPress Plugin appeared first on SecurityWeek.
Toward Better Patching — A New Approach with a Dose of AI
Use of AI to cut through the noise and confusion of the current vulnerability prioritization approaches suggests an exciting future for AI-assisted operations to vulnerability triaging.
The post Toward Better Patching — A New Approach with a Dose of AI appeared first on SecurityWeek.
Apple Shortcuts Vulnerability Exposes Sensitive Information
High-severity vulnerability in Apple Shortcuts could lead to sensitive information leak without user’s knowledge.
The post Apple Shortcuts Vulnerability Exposes Sensitive Information appeared first on SecurityWeek.
