Rilevato lo sfruttamento attivo in rete della vulnerabilità CVE-2024-24919 – già sanata dal vendor – che interessa le soluzioni Checkpoint Security Gateways con le funzionalità Remote Access VPN (IPSec) o Mobile Access blade abilitate. Tale vulnerabilità potrebbe permettere ad un utente malevolo remoto la possibilità…
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2020-17519 Apache Flink Improper Access Control Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise. Binding…
Scarica il riepilogo delle notizie pubblicate dallo CSIRT Italia 20 al 26 maggio 2024. Source link Author: csirt@pec.acn.gov.it Article used for cyber security disclosure.
Cisco released a bundled publication for security advisories that address vulnerabilities in Cisco Adaptive Security Appliance (ASA), Firepower Management Center (FMC), and Firepower Threat Defense (FTD) software. A cyber threat actor could exploit one of these vulnerabilities to take control of an affected system. Users…
CISA released one Industrial Control Systems (ICS) advisory on May 23, 2024. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-144-01 AutomationDirect Productivity PLCs CISA encourages users and administrators to review newly released ICS advisories for technical details and…
Disponibile un Proof of Concept (PoC) per la CVE-2024-21683 – già sanata dal vendor – presente in Atlassian Confluence Data Center and Server. Tale vulnerabilità, qualora sfruttata, potrebbe permettere l’esecuzione di codice da remoto sui dispositivi interessati. Source link Author: csirt@pec.acn.gov.it Article used for cyber…
CISA released one Industrial Control Systems (ICS) advisory on May 21, 2024. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-142-01 LCDS LAquis SCADA CISA encourages users and administrators to review newly released ICS advisories for technical details and…
Zyxel rilascia aggiornamenti di sicurezza per sanare 2 vulnerabilità presenti in molteplici prodotti di rete. Tali vulnerabilità potrebbero permettere la compromissione della disponibilità del servizio sui dispositivi target. Source link Author: csirt@pec.acn.gov.it Article used for cyber security disclosure.
