Cyber Newsroom Feed
The "Cyber Newsroom Feed" module is a live feed of the latest cyber news enriched with CVE and vulnerability data. The feed is updated every 5 minutes and includes the latest news from the cyber security industry. The feed is designed to provide users with a comprehensive overview of the latest cyber security news and trends.

-
Cybersecurity News
CVE-2024-38206: SSRF Vulnerability in Microsoft Copilot Studio Exposes Internal Infrastructure
Tenable Research has discovered a critical server-side request forgery (SSRF) vulnerability in Microsoft’s Copilot Studio, potentially allowing attackers to gain access to sensitive internal resources ... Read more

-
Cybersecurity News
Escalating Cyber Threats: Q2 2024 Vulnerability Report
The cybersecurity landscape in Q2 2024 was marked by a notable increase in new vulnerabilities and exploitation techniques targeting both applications and operating systems. According to Kaspersky Lab ... Read more

-
The Register
SolarWinds left critical hardcoded credentials in its Web Help Desk product
SolarWinds left hardcoded credentials in its Web Help Desk product that can be used by remote, unauthenticated attackers to log into vulnerable instances, access internal functionality, and modify sen ... Read more

-
BleepingComputer
Hackers are exploiting critical bug in LiteSpeed Cache plugin
Hackers have already started to exploit the critical severity vulnerability that affects LiteSpeed Cache, a WordPress plugin used for accelerating response times, a day after technical details become ... Read more

-
seclists.org
OXAS-ADV-2024-0003: OX App Suite Security Advisory
Full Disclosure mailing list archives OXAS-ADV-2024-0003: OX App Suite Security Advisory From: Martin Heiland via Fulldisclosure <fulldisclosure () seclists org> Date: Mon, 19 Aug 2024 09:35:10 +0200 ... Read more

-
seclists.org
OXAS-ADV-2024-0004: OX App Suite Security Advisory
Full Disclosure mailing list archives OXAS-ADV-2024-0004: OX App Suite Security Advisory From: Martin Heiland via Fulldisclosure <fulldisclosure () seclists org> Date: Mon, 19 Aug 2024 09:34:00 +0200 ... Read more

-
seclists.org
[SYSS-2024-042] DiCal-RED - Exposure of Sensitive Information to an Unauthorized Actor
Full Disclosure mailing list archives From: Sebastian Hamann via Fulldisclosure <fulldisclosure () seclists org> Date: Tue, 20 Aug 2024 14:11:23 +0200 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 A ... Read more

-
seclists.org
[SYSS-2024-041] DiCal-RED - Use of Unmaintained Third Party Components
Full Disclosure mailing list archives From: Sebastian Hamann via Fulldisclosure <fulldisclosure () seclists org> Date: Tue, 20 Aug 2024 14:11:21 +0200 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 A ... Read more

-
seclists.org
[SYSS-2024-040] DiCal-RED - Improper Authentication
Full Disclosure mailing list archives From: Sebastian Hamann via Fulldisclosure <fulldisclosure () seclists org> Date: Tue, 20 Aug 2024 14:11:18 +0200 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 A ... Read more

-
seclists.org
[SYSS-2024-039] DiCal-RED - Path Traversal
Full Disclosure mailing list archives From: Sebastian Hamann via Fulldisclosure <fulldisclosure () seclists org> Date: Tue, 20 Aug 2024 14:11:15 +0200 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 A ... Read more