Rilevata vulnerabilità nel toolkit REXML, libreria per la manipolazione di file XML per il linguaggio di programmazione Ruby. Tale vulnerabilità potrebbe comportare la compromissione della disponibilità del servizio sulle istanze target. Source link Author: csirt@pec.acn.gov.it Article used for cyber security disclosure.
Read how Fortinet participates in a CISA-led, AI focused tabletop exercise to help businesses manage organizational risk. Source link Author: Fortinet Article used for cyber security disclosure.
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-20481 Cisco ASA and FTD Denial-of-Service Vulnerability CVE-2024-37383 RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks…
The World Economic Forum’s Cybercrime Atlas project offers vital insights on effective public-private collaboration for disrupting cybercrime. Learn more. Source link Author: Fortinet Article used for cyber security disclosure.
Today, CISA—along with U.S. and international partners—released joint guidance, Safe Software Deployment: How Software Manufacturers Can Ensure Reliability for Customers. This guide aids software manufacturers in establishing secure software deployment processes to help ensure software is reliable and safe for customers. Additionally, it offers guidance on…
Aggiornamenti di sicurezza sanano 51 nuove vulnerabilità, di cui 3 con gravità “critica” e 10 con gravità “alta”, in alcuni prodotti Cisco. Source link Author: csirt@pec.acn.gov.it Article used for cyber security disclosure.
If you missed the recent Unified SASE Summit 2024, get a recap of some of the key can’t-miss sessions. Source link Author: Fortinet Article used for cyber security disclosure.
Rilevato lo sfruttamento attivo in rete della vulnerabilità CVE-2024-47575 – già sanata dal vendor – che interessa i prodotti FortiManager e FortiAnalyzer. Tale vulnerabilità può consentire a un utente malintenzionato remoto non autenticato l’esecuzione di codice arbitrario. Source link Author: csirt@pec.acn.gov.it Article used for cyber…
