Categoria: Vulnerabilities

Hardware Security Firm Axiado Banks $25M Investment

Axiado Corp, a hardware security firm based in San Jose, Calif., has banked $25 million in what is being described as an “oversubscribed” Series B funding round.

Marine Services Provider Swire Pacific Offshore Discloses Data Breach

Singapore-based marine services provider Swire Pacific Offshore (SPO) disclosed a cybersecurity incident that resulted in the loss of commercial and personal data.

In an announcement published over the U.S. Thanksgiving holiday weekend, the company revealed that a third-party was able to access some of its systems without authorization.

Recently Patched Apache HTTP Server Vulnerability Exploited in Attacks

German Cybersecurity Agency and Cisco Warn of Attacks Targeting Apache HTTP Server Flaw

Organizations are being advised to ensure that their Apache HTTP servers are up to date, after it came to light that a recently patched vulnerability has been exploited in attacks.

VMware Patches File Read, SSRF Vulnerabilities in vCenter Server

VMware on Tuesday informed customers about the availability of patches for arbitrary file read and server-side request forgery (SSRF) vulnerabilities affecting its vCenter Server product.

Researcher Awarded $10,000 for Google Cloud Platform Vulnerability

Security researcher David Schütz says he received over $10,000 in bug bounty payouts from Google after reporting a Google Cloud project vulnerability and subsequent bypasses to rolled-out fixes.

Apple Slaps Lawsuit on NSO Group Over Pegasus iOS Exploitation

The troubles for Israeli surveillance software maker NSO Group continue to pile up with news that Apple has filed suit to ban the company from using its software, services or devices.

PoC Exploit Published for Latest Microsoft Exchange Zero-Day

A security researcher has released proof-of-concept (PoC) exploit code for a recently patched code execution vulnerability affecting on-prem Microsoft Exchange Server installations.

Serious Vulnerability Found in Imunify360 Web Server Security Product

A vulnerability discovered in CloudLinux’s Imunify360 security product could have been exploited for remote code execution using specially crafted files.

Severe Code Execution Vulnerabilities Affect OpenVPN-Based Applications

Security researchers at Claroty have raised the alarm for a series of severe code execution vulnerabilities affecting virtual private network (VPN) solutions relying on OpenVPN.