Cyber Newsroom Feed
The "Cyber Newsroom Feed" module is a live feed of the latest cyber news enriched with CVE and vulnerability data. The feed is updated every 5 minutes and includes the latest news from the cyber security industry. The feed is designed to provide users with a comprehensive overview of the latest cyber security news and trends.
-
0patch.com
Micropatch Released for Windows Authentication Elevation of Privilege Vulnerability (CVE-2023-36047)
We have just released a micropatch for CVE-2023-36047, a local privilege escalation vulnerability found by Filip Dragović in the way Windows handle files when a user changes their account picture. Fil ... Read more
-
New Jetpack Site
Vulnerabilità su Checkpoint VPN sfruttata in the wild
05/30/2024 PROTO: N240530 CERT-Yoroi di Tinexta Cyber informa che è stata resa nota una vulnerabilità sul prodotto VPN di CheckPoint (comprensivo di IPsec VPN, Remote Access VPN e Mobile Access) ident ... Read more
-
Trend Micro
Decoding Water Sigbin's Latest Obfuscation Tricks
APT & Targeted Attacks Water Sigbin (aka the 8220 Gang) exploited Oracle WebLogic vulnerabilities to deploy a cryptocurrency miner using a PowerShell script. The threat actor also adopted new techniqu ... Read more
-
New Jetpack Site
Vulnerabilità critica in Zabbix
05/23/2024 PROTO: N240523 CERT-Yoroi informa che è stata resa nota una vulnerabilità critica su Zabbix che consente ad utenti malintenzionati di eseguire del codice da remoto arbitrario e privilege es ... Read more
-
Google Cloud
IOC Extinction? China-Nexus Cyber Espionage Actors Use ORB Networks to Raise Cost on Defenders
Written by: Michael Raggi Mandiant Intelligence is tracking a growing trend among China-nexus cyber espionage operations where advanced persistent threat (APT) actors utilize proxy networks known as “ ... Read more
-
cert.pl
Vulnerability in Online Shopping System Advanced software
CVE ID CVE-2024-3579 Publication date 14 May 2024 Vendor Puneeth Reddy Product Online Shopping System Advanced Vulnerable versions All Vulnerability type (CWE) Improper Neutralization of Input During ... Read more
-
cert.pl
Vulnerability in Ant Media Server software
CVE ID CVE-2024-3462 Publication date 13 May 2024 Vendor Ant Media Product Ant Media Server Community Edition Vulnerable versions all through 2.9.0 Vulnerability type (CWE) Incorrect Authorization (CW ... Read more
-
Darktrace
Confluence CVE-2022-26134 Zero-Day: Detection & Guidance
What is WarmCookie malware?WarmCookie, also known as BadSpace [2], is a two-stage backdoor tool that provides functionality for threat actors to retrieve victim information and launch additional paylo ... Read more
-
New Jetpack Site
Vulnerabilità risolte in GOlang
05/10/2024 PROTO: N240509 CERT-Yoroi informa che sono state rese note due vulnerabilità, di cui una con gravità critica, sul linguaggio di programmazione GO, noto linguaggio di programmazione ampiamen ... Read more
-
Zero Day Initiative
CVE-2024-21115: An Oracle VirtualBox LPE Used to Win Pwn2Own
None ... Read more