CISA has added the Roundcube flaw tracked as CVE-2023-43770 to its known exploited vulnerabilities catalog.
The post CISA Warns of Roundcube Webmail Vulnerability Exploitation appeared first on SecurityWeek.
ExpressVPN User Data Exposed Due to Bug
ExpressVPN disables split tunneling on Windows after learning that DNS requests were not properly directed.
The post ExpressVPN User Data Exposed Due to Bug appeared first on SecurityWeek.
Exploitation of Another Ivanti VPN Vulnerability Observed
Organizations urged to hunt for potential compromise as exploitation of a recent Ivanti enterprise VPN vulnerability begins.
The post Exploitation of Another Ivanti VPN Vulnerability Observed appeared first on SecurityWeek.
Ivanti Patches High-Severity Vulnerability in VPN Appliances
An XXE flaw in Ivanti Connect Secure, Ivanti Policy Secure, and ZTA gateways could lead to unauthenticated access to resources.
The post Ivanti Patches High-Severity Vulnerability in VPN Appliances appeared first on SecurityWeek.
Fortinet Warns of New FortiOS Zero-Day
Fortinet patches CVE-2024-21762, a critical remote code execution vulnerability that may have been exploited in the wild.
The post Fortinet Warns of New FortiOS Zero-Day appeared first on SecurityWeek.
Cisco Patches Critical Vulnerabilities in Enterprise Communication Devices
Two critical vulnerabilities in Cisco Expressway series devices can be exploited in CSRF attacks without authentication.
The post Cisco Patches Critical Vulnerabilities in Enterprise Communication Devices appeared first on SecurityWeek.
How to Predict Your Patching Priorities
Implementing a smart and timely approach to patching remains one of the primary ways for organizations to protect their networks from attackers.
The post How to Predict Your Patching Priorities appeared first on SecurityWeek.
Most Linux Systems Exposed to Complete Compromise via Shim Vulnerability
A critical remote code execution vulnerability in Shim could allow attackers to take over vulnerable Linux systems.
The post Most Linux Systems Exposed to Complete Compromise via Shim Vulnerability appeared first on SecurityWeek.
JetBrains Patches Critical Authentication Bypass in TeamCity
JetBrains releases patches for a critical-severity TeamCity authentication bypass leading to remote code execution.
The post JetBrains Patches Critical Authentication Bypass in TeamCity appeared first on SecurityWeek.
Fortinet Patches Critical Vulnerabilities in FortiSIEM
Two critical OS command injection flaws in FortiSIEM could allow remote attackers to execute arbitrary code.
The post Fortinet Patches Critical Vulnerabilities in FortiSIEM appeared first on SecurityWeek.
