Common Vulnerabilities and Exposures (CVE) stories - Page 4

November Patch Tuesday reveals 90 vulnerabilities
Wed, 13th Nov 2024
#
cve
Microsoft is rolling out patches for 90 vulnerabilities this November, including critical remote code execution flaws and several in-the-wild exploits.

Androxgh0st botnet expands with Mozi IoT capabilities
Wed, 13th Nov 2024
#
cve
CloudSEK warns that the Androxgh0st botnet has significantly expanded its reach, now targeting critical vulnerabilities in various systems and IoT devices.

Critical vulnerabilities found in Unisoc systems-on-chip
Thu, 31st Oct 2024
#
cve
Kaspersky's ICS CERT has revealed critical vulnerabilities in Unisoc SoCs, heightening risks of remote hijacking in devices.

Lazarus APT group targets crypto investors with AI tactics
Wed, 30th Oct 2024
#
cve
Kaspersky has uncovered a sophisticated campaign by the Lazarus group targeting cryptocurrency investors, employing social engineering and zero-day exploits.

Tenable reveals vulnerability in Open Policy Agent for Windows
Tue, 29th Oct 2024
#
cve
Tenable has revealed a medium-severity vulnerability in Open Policy Agent for Windows that exposes user credentials, urging updates to version 0.68.0.

Memory safety vulnerabilities continue to plague ICS: Here’s what to do about it
Thu, 24th Oct 2024
#
cve
Memory safety vulnerabilities are surging in industrial control systems, with over 3,000 reported in 2022, prompting urgent calls for enhanced security measures.

Cybersecurity warning issued over Iranian infrastructure threats
Thu, 24th Oct 2024
#
cve
A coalition of global agencies warns of Iranian cyber threats targeting critical infrastructure, highlighting emerging tactics and unresolved vulnerabilities.

How to implement exposure management in complex cyber-physical systems
Wed, 23rd Oct 2024
#
cve
As digital transformation heightens cyber-physical connectivity, organisations must adopt effective exposure management strategies to safeguard critical systems.

watchTowr secures $19 million in funding for expansion
Tue, 15th Oct 2024
#
cve
watchTowr has successfully secured $19 million in a Series A funding round to boost its expansion in the cybersecurity sector.

October Patch Tuesday has revealed 118 Vulnerabilities
Wed, 9th Oct 2024
#
cve
Microsoft has addressed 118 vulnerabilities in its October 2024 Patch Tuesday, including five with evidence of exploitation, amid ongoing security concerns.

Tenable report reveals widespread cloud security risks
Wed, 9th Oct 2024
#
cve
Tenable's 2024 Cloud Risk Report reveals 74% of global organisations have publicly exposed storage assets, heightening their ransomware risk.

Microsoft, Adobe issue critical patches to fix Zero-day flaws
Fri, 13th Sep 2024
#
cve
Microsoft and Adobe have rolled out urgent security updates, tackling critical Zero-day vulnerabilities in Windows and key applications this month.

September Patch Tuesday has revealed 79 vulnerabilities
Wed, 11th Sep 2024
#
cve
Microsoft's September Patch Tuesday addresses 79 vulnerabilities, including four critical RCEs and bugs with in-the-wild exploitation. Surprisingly, no browser patches yet.

Forescout's 2024 H1 Threat Review reveals surge in cyber threats
Fri, 6th Sep 2024
#
cve
Report reveals a 43% surge in vulnerabilities and a 6% rise in ransomware attacks in H1 2024, with VPNs and network infrastructure under significant threat.

GoWit launches self-service retail media setup in 15 minutes
Thu, 29th Aug 2024
#
cve
GoWit unveils a self-service solution, enabling retailers to set up retail media advertising in just 15 minutes at no cost, after securing USD $1.3 million.

It's more than culture: Addressing the root cause of common security frustrations
Thu, 22nd Aug 2024
#
cve
GitLab's annual survey exposes deep-rooted security frustrations, from prioritisation issues to excessive false positives. Here’s how to tackle the core problems.

Fastly report shows 91% of cyberattacks target multiple firms
Thu, 22nd Aug 2024
#
cve
Fastly’s latest report reveals a staggering 91% of cyberattacks targeted multiple customers this quarter, up from 69% in 2023, indicating a rise in mass scanning techniques.

FBI's Qakbot takedown reshapes 2024 malware loader landscape
Fri, 16th Aug 2024
#
cve
The dismantling of Qakbot malware by the FBI has reshaped the malware loader landscape, with SocGholish now leading and security tactics evolving rapidly.

Microsoft tackles 88 vulnerabilities in latest Patch Tuesday update
Thu, 15th Aug 2024
#
cve
Microsoft patched 88 security flaws in October's Patch Tuesday, including seven critical and ten zero-day vulnerabilities.

August Patch Tuesday revealed 88 vulnerabilities
Thu, 15th Aug 2024
#
cve
Microsoft's August Patch Tuesday fixes 88 vulnerabilities, with evidence of in-the-wild exploitation and public disclosure for 10 of them.