Cyber Newsroom Feed
The "Cyber Newsroom Feed" module is a live feed of the latest cyber news enriched with CVE and vulnerability data. The feed is updated every 5 minutes and includes the latest news from the cyber security industry. The feed is designed to provide users with a comprehensive overview of the latest cyber security news and trends.
-
cert.pl
Vulnerability in Ant Media Server software
CVE ID CVE-2024-3462 Publication date 13 May 2024 Vendor Ant Media Product Ant Media Server Community Edition Vulnerable versions all through 2.9.0 Vulnerability type (CWE) Incorrect Authorization (CW ... Read more
-
Darktrace
Confluence CVE-2022-26134 Zero-Day: Detection & Guidance
What is WarmCookie malware?WarmCookie, also known as BadSpace [2], is a two-stage backdoor tool that provides functionality for threat actors to retrieve victim information and launch additional paylo ... Read more
-
New Jetpack Site
Vulnerabilità risolte in GOlang
05/10/2024 PROTO: N240509 CERT-Yoroi informa che sono state rese note due vulnerabilità, di cui una con gravità critica, sul linguaggio di programmazione GO, noto linguaggio di programmazione ampiamen ... Read more
-
Zero Day Initiative
CVE-2024-21115: An Oracle VirtualBox LPE Used to Win Pwn2Own
None ... Read more
-
cert.pl
Vulnerabilities in CemiPark software
CVE ID CVE-2024-4423 Publication date 09 May 2024 Vendor CEMI Tomasz Pawełek Product CemiPark Vulnerable versions 4.5, 4.7, 5.03 and potentially others Vulnerability type (CWE) Improper Neutralization ... Read more
-
cert.pl
Vulnerabilities in Kioware for Windows
CVE ID CVE-2024-3459 Publication date 09 May 2024 Vendor Kioware Product Kioware for Windows Vulnerable versions all through 8.34 Vulnerability type (CWE) Improper Protection of Alternate Path (CWE-42 ... Read more
-
New Jetpack Site
CVE Advisory - Oracle BI Publisher - Unauthenticated Remote Code Execution
05/05/2024 Introduction In the course of a penetration test, performed under contract and conducted on a PaaS OAC instance of one of our customers, the researcher Davide Virruso, from the Offensive Se ... Read more
-
DoublePulsar
Breaking down Microsoft’s pivot to placing cybersecurity as a top priority
Recently, Microsoft had quite frankly a kicking from the US Department of Homeland Security over their security practices in a Cyber Safety Review Board report. I’ve tried to keep as quiet as possible ... Read more
-
Zero Day Initiative
CVE-2024-2887: A Pwn2Own Winning Bug in Google Chrome
None ... Read more
-
cert.pl
Vulnerability in CraftBeerPi 4 software
CVE ID CVE-2024-3955 Publication date 02 May 2024 Vendor PiBrewing, CraftBeerPi - Brewing Controller Product CraftBeerPi 4 Vulnerable versions from 4.0.0.58 (commit 563fae9) to 4.4.1.a1 (commit 57572c ... Read more