CVEFeed Newsroom – Latest Cybersecurity Updates
The "Cyber Newsroom Feed" module is a live feed of the latest cyber news enriched with CVE and vulnerability data. The feed is updated every 5 minutes and includes the latest news from the cyber security industry. The feed is designed to provide users with a comprehensive overview of the latest cyber security news and trends.
- 
                                                            
                                                                
seclists.org
 
[SYSS-2024-038] DiCal-RED - Use of Password Hash Instead of Password for Authentication
Full Disclosure mailing list archives From: Sebastian Hamann via Fulldisclosure <fulldisclosure () seclists org> Date: Tue, 20 Aug 2024 14:11:13 +0200 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 A ... Read more
- 
                                                            
                                                                
seclists.org
 
[SYSS-2024-037] DiCal-RED - Use of Password Hash With Insufficient Computational Effort
Full Disclosure mailing list archives From: Sebastian Hamann via Fulldisclosure <fulldisclosure () seclists org> Date: Tue, 20 Aug 2024 14:11:11 +0200 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 A ... Read more
- 
                                                            
                                                                
seclists.org
 
[SYSS-2024-035] DiCal-RED - Missing Authentication for Critical Function
Full Disclosure mailing list archives From: Sebastian Hamann via Fulldisclosure <fulldisclosure () seclists org> Date: Tue, 20 Aug 2024 14:11:06 +0200 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 A ... Read more
- 
                                                            
                                                                
seclists.org
 
[SYSS-2024-036] DiCal-RED - Missing Authentication for Critical Function
Full Disclosure mailing list archives From: Sebastian Hamann via Fulldisclosure <fulldisclosure () seclists org> Date: Tue, 20 Aug 2024 14:11:09 +0200 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 A ... Read more
- 
                                                            
                                                                
seclists.org
 
Re: Improper Authentication (CWE-287) CVE-2024-33897
Full Disclosure mailing list archives From: Jeffrey Walton <noloader () gmail com> Date: Sun, 18 Aug 2024 03:10:41 -0400 On Sun, Aug 18, 2024 at 2:39 AM Moritz Abrell via Fulldisclosure <fulldisclosur ... Read more
- 
                                                            
                                                                
Dark Reading
 
Google Chrome Update Fixes Flaw Exploited in the Wild
Source: imageBROKER.com GmbH & Co. KG via Alamy Stock PhotoNew security fixes are being rolled out to address a high-severity vulnerability found in Google's Chrome browser.The flaw, tracked as CVE-20 ... Read more
- 
                                                            
                                                                
The Hacker News
 
Hardcoded Credential Vulnerability Found in SolarWinds Web Help Desk
Vulnerability / Network Security SolarWinds has issued patches to address a new security flaw in its Web Help Desk (WHD) software that could allow remote unauthenticated users to gain unauthorized acc ... Read more
- 
                                                            
                                                                
BleepingComputer
 
Microsoft confirms August updates break Linux boot in dual-boot systems
Microsoft has confirmed the August 2024 Windows security updates are causing Linux booting issues on dual-boot systems with Secure Boot enabled. The issue is caused by a Secure Boot Advanced Targeting ... Read more
- 
                                                            
                                                                
The Hacker News
 
Chinese Hackers Exploit Zero-Day Cisco Switch Flaw to Gain System Control
Network Security / Zero-Day Details have emerged about a China-nexus threat group's exploitation of a recently disclosed, now-patched security flaw in Cisco switches as a zero-day to seize control of ... Read more
- 
                                                            
                                                                
Darktrace
 
Race Against Time: Detecting JetBrains’ TeamCity Exploitation Activity with Darktrace
Darktrace observed the rapid exploitation of a critical vulnerability in JetBrains TeamCity (CVE-2024-27198) shortly following its public disclosure. Learn how the need for speedy detection serves to ... Read more