One Email Could Open a Mail Server. The Attackers Went After Its Master Keys
A crafted email could trigger commands on certain Zimbra servers without a click. Microsoft traced how attackers then pursued authentication keys and persistence.
Tag vulnerabilities
Apple’s Big iOS 27 Update Fixes Flaws Across Its Entire Stack
Apple’s iOS 27 and macOS Golden Gate 27 releases address roughly 200 flaws across kernels, shared components and higher-level software.
Microsoft Issues Record 974 CVEs in September Patch Tuesday
Microsoft's recent Patch Tuesday has set a new record with 974 CVEs addressed, including two actively exploited vulnerabilities. Adobe also contributed with critical updates.
Cisco Addresses Multiple Critical Vulnerabilities in IOS XR
Cisco has identified several critical vulnerabilities in its IOS XR operating system, prompting an update release to address these issues. The flaws could allow unauthorized access and execution of code on affected devices.
Critical Vulnerabilities Discovered in Popular WordPress Plugins and Themes
Multiple severe security flaws have been identified in several WordPress plugins and themes, potentially allowing unauthorized access and remote code execution.
ZBT Routers Found with Two Vulnerabilities Allowing Root Access
Recent findings reveal that routers manufactured by Shenzhen Zhibotong Electronics (ZBT) contain two serious vulnerabilities, enabling unauthenticated remote attackers to gain root access.
Critical ServiceNow Vulnerabilities Allow Unauthenticated Code Execution
ServiceNow has issued patches for four vulnerabilities in its AI Platform, three of which are rated 10.0 on the CVSS scale, potentially allowing unauthenticated attackers to execute arbitrary code.
CISA Highlights Longstanding Vulnerabilities Still Being Exploited
The Cybersecurity and Infrastructure Security Agency (CISA) has released findings indicating that many of the most exploited vulnerabilities in software have persisted for decades, urging a shift towards Secure by Design practices.
AI Agents: A New Frontier in Cybersecurity Threats and Defense
The rise of AI agents in cybersecurity is reshaping the landscape of both attacks and defenses, creating new vulnerabilities and necessitating innovative strategies for protection.
Cisco’s Secure Workload Software Faces Multiple Critical Vulnerabilities
Cisco has identified several significant vulnerabilities in its Secure Workload Software, impacting both SaaS and on-premises users. Immediate updates are required to mitigate these risks.
< class="ct-module-title">
Trending now
