Cyber Newsroom Feed
The "Cyber Newsroom Feed" module is a live feed of the latest cyber news enriched with CVE and vulnerability data. The feed is updated every 5 minutes and includes the latest news from the cyber security industry. The feed is designed to provide users with a comprehensive overview of the latest cyber security news and trends.

-
huntress.com
MOVEit Transfer Critical Vulnerability CVE-2023-34362 Rapid Response | Huntress
UPDATED: 1 June 2023 @ 1733 ET - Added shareable Huntress YARA rule for assistance in detection effortUPDATED: 1 June 2023 @ 2023 ET - Added Kostas community Sigma rule to assist in detection effortsU ... Read more

-
New Jetpack Site
Gravi vulnerabilità in MOVEit
N240626 CERT-Yoroi informa che sono state rese note due gravi vulnerabilità sui prodotti Progress MOVEit Transfer e MOVEit Gateway che consentono ad utenti malintenzionati di eseguire bypass authentic ... Read more

-
seclists.org
CyberDanube Security Research 20240703-0 | Authenticated Command Injection in Helmholz Industrial Router REX100
Full Disclosure mailing list archives CyberDanube Security Research 20240703-0 | Authenticated Command Injection in Helmholz Industrial Router REX100 From: Thomas Weber via Fulldisclosure <fulldisclos ... Read more

-
seclists.org
17 vulnerabilities in Sharp Multi-Function Printers
Full Disclosure mailing list archives From: Pierre Kim <pierre.kim.sec () gmail com> Date: Thu, 27 Jun 2024 16:09:17 -0400 Hello, Please find a text-only version below sent to security mailing lists. ... Read more

-
AttackIQ
Emulating the Sabotage-Focused Russian Adversary Sandworm– Part 2
Sandworm is a highly sophisticated Russian adversary, active since at least 2009, that has been attributed to Russia’s Main Intelligence Directorate (GRU) for Special Technologies (GTsST) military Uni ... Read more

-
cert.pl
Vulnerability in Edito CMS software
CVE ID CVE-2024-4836 Publication date 02 July 2024 Vendor Edito Product Edito CMS Vulnerable versions From 3.5 through 3.25 Vulnerability type (CWE) Files or Directories Accessible to External Parties ... Read more

-
New Jetpack Site
Vulnerabilità regreSSHion in OpenSSH server
07/02/2024 N010724 CERT-Yoroi informa che è stata resa nota una vulnerabilità critica in OpenSSH server (sshd) nei sistemi Linux basati su glibc che consente ad utenti malintenzionati di eseguire del ... Read more

-
Zero Day Initiative
Getting Unauthenticated Remote Code Execution on the Logsign Unified SecOps Platform
None ... Read more

-
cert.pl
Vulnerability in SOWA OPAC software
CVE ID CVE-2024-6050 Publication date 01 July 2024 Vendor SOKRATES-software Product SOWA OPAC Vulnerable versions From 4.0 before 4.9.10, from 5.0 before 6.2.12 Vulnerability type (CWE) Improper Neutr ... Read more

-
cert.pl
Vulnerabilities in Concept Intermedia S@M CMS software
CVE ID CVE-2024-3800 Publication date 28 June 2024 Vendor Concept Intermedia Product S@M CMS Vulnerable versions All through 3.3 Vulnerability type (CWE) Improper Neutralization of Input During Web Pa ... Read more