Protect AI warns of a dozen critical vulnerabilities in open source AI/ML tools reported via its bug bounty program.
The post Easily Exploitable Critical Vulnerabilities Found in Open Source AI/ML Tools appeared first on SecurityWeek.
Prevalence and Impact of Password Exposure Vulnerabilities in ICS/OT
Analysis and insights on the prevalence and impact of password exposure vulnerabilities in ICS and other OT products.
The post Prevalence and Impact of Password Exposure Vulnerabilities in ICS/OT appeared first on SecurityWeek.
Chrome 126, Firefox 127 Patch High-Severity Vulnerabilities
Google and Mozilla have released patches for 21 and 15 vulnerabilities in Chrome and Firefox, respectively.
The post Chrome 126, Firefox 127 Patch High-Severity Vulnerabilities appeared first on SecurityWeek.
Critical PyTorch Vulnerability Can Lead to Sensitive AI Data Theft
A critical vulnerability in the PyTorch distributed RPC framework could be exploited for remote code execution.
The post Critical PyTorch Vulnerability Can Lead to Sensitive AI Data Theft appeared first on SecurityWeek.
Details of Atlassian Confluence RCE Vulnerability Disclosed
SonicWall has shared technical details on a recently addressed high-severity remote code execution flaw in Confluence.
The post Details of Atlassian Confluence RCE Vulnerability Disclosed appeared first on SecurityWeek.
Progress Patches Critical Vulnerability in Telerik Report Server
A critical vulnerability in the Progress Telerik Report Server could allow unauthenticated attackers to access restricted functionality.
The post Progress Patches Critical Vulnerability in Telerik Report Server appeared first on SecurityWeek.
Vulnerabilities Exposed Millions of Cox Modems to Remote Hacking
Cox recently patched a series of vulnerabilities that could have allowed hackers to remotely take control of millions of modems.
The post Vulnerabilities Exposed Millions of Cox Modems to Remote Hacking appeared first on SecurityWeek.
Check Point VPN Attacks Involve Zero-Day Exploited Since April
The recently disclosed Check Point VPN attacks involve the zero-day vulnerability CVE-2024-24919, which allows hackers to obtain passwords.
The post Check Point VPN Attacks Involve Zero-Day Exploited Since April appeared first on SecurityWeek.
Vulnerabilities in Eclipse ThreadX Could Lead to Code Execution
Vulnerabilities in the real-time IoT operating system Eclipse ThreadX before version 6.4 could lead to denial-of-service and code execution.
The post Vulnerabilities in Eclipse ThreadX Could Lead to Code Execution appeared first on SecurityWeek.
Google Patches Fourth Chrome Zero-Day in Two Weeks
Exploited in the wild, Chrome vulnerability CVE-2024-5274 is a high-severity flaw described as a type confusion in the V8 JavaScript and WebAssembly engine.
The post Google Patches Fourth Chrome Zero-Day in Two Weeks appeared first on SecurityWeek.
