Cyber Newsroom Feed
The "Cyber Newsroom Feed" module is a live feed of the latest cyber news enriched with CVE and vulnerability data. The feed is updated every 5 minutes and includes the latest news from the cyber security industry. The feed is designed to provide users with a comprehensive overview of the latest cyber security news and trends.
-
0patch.com
Micropatches Released for Windows MSHTML Platform Remote Code Execution Vulnerability (CVE-2023-35628)
December 2023 Windows Updates brought a patch for CVE-2023-35628, a memory corruption vulnerability that could potentially lead to remote code execution when an application on user's computer tried to ... Read more
-
Google Cloud
Poll Vaulting: Cyber Threats to Global Elections
Written by: Kelli Vanderlee, Jamie Collier Executive Summary The election cybersecurity landscape globally is characterized by a diversity of targets, tactics, and threats. Elections attract threat ac ... Read more
-
0patch.com
Micropatches Released for Windows Workstation and Server Service Elevation of Privilege Vulnerability (CVE-2022-38034, CVE-2022-38045, No CVE)
October 2022 Windows Update brought fixes for two interesting vulnerabilities, CVE-2022-38034 and CVE-2022-38045. They allowed a remote attacker to access various "local-only" RPC functions in Windows ... Read more
-
Zero Day Initiative
CVE-2024-20697: Windows Libarchive Remote Code Execution Vulnerability
None ... Read more
-
Zero Day Initiative
The April 2024 Security Updates Review
None ... Read more
-
0patch.com
Micropatches for Windows Local Session Manager Elevation of Privilege (CVE-2023-21771)
In December of 2022, Ben Barnea of Akamai posted an X thread about a bug they had found in Windows Local Service Manager (LSM) that can lead to local privilege escalation from regular user account to ... Read more
-
cert.pl
Vulnerability in Apaczka plugin for PrestaShop
CVE ID CVE-2024-2759 Publication date 04 April 2024 Vendor Alsendo Sp. z o. o. Product Apaczka (PrestaShop plugin) Vulnerable versions through v4 Vulnerability type (CWE) Improper Access Control (CWE- ... Read more
-
0patch.com
Micropatches for Leaking NTLM Credentials Through Windows Themes (CVE-2024-21320)
January 2024 Windows Updates brought a patch for CVE-2024-21320, a privilege escalation vulnerability in Windows. The vulnerability allows a remote attacker to acquire user's NTLM credentials when the ... Read more
-
cert.pl
Vulnerabilities in CDeX software
CVE ID CVE-2024-2463 Publication date 21 March 2024 Vendor CDeX PSA Product CDeX Vulnerable versions through 5.71 Vulnerability type (CWE) Weak Password Recovery Mechanism for Forgotten Password (CWE- ... Read more
-
Trend Micro
TeamCity Vulnerability Exploits Lead to Jasmin Ransomware, Other Malware Types
On March 4, 2024, JetBrains disclosed two critical vulnerabilities — CVE-2024-27198 and CVE-2024-27199 — within the TeamCity On-Premises platform that allow attackers to bypass authentication measures ... Read more