vulnerability

Hackers Exploiting Plex Vulnerabilities in the Wild to Deploy Cryptominer Malware

Hackers are exploiting flaws in Plex Media Server to install cryptocurrency mining malware, with a researcher recording successful attacks against…

3 weeks ago

37-Year-Old Kernel Flaw Exploited to Gain Root Access on OpenBSD — PoC Released

A proof-of-concept exploit that gains root access on OpenBSD by chaining two kernel flaws. The main bug dates back about…

3 weeks ago

BeyondTrust 0-Day Vulnerability Exploited Since August to Gain Full Admin Access in Minutes

A critical zero-day vulnerability in BeyondTrust Remote Support was exploited in late August, weeks before the company disclosed the flaw…

3 weeks ago

Critical Linux Kernel Flaw Lets Attackers Escape Virtual Machines and Take Control of Hosts

A critical flaw in the Linux kernel may allow an attacker-controlled virtual machine (VM) to breach its isolation boundary and…

3 weeks ago

Critical ChatGPT GitHub Connector Flaw Could Allow Attackers to Steal Private Repository Secrets

A critical flaw in ChatGPT’s GitHub integration has the potential to turn a routine repository review into a secret-theft attack.…

3 weeks ago

Critical Next.js Vulnerabilities Allow Hackers to Execute Malicious Code Remotely

Next.js has released security updates for two critical vulnerabilities that could let remote attackers run malicious code without logging in.…

3 weeks ago

Multiple Active Directory Vulnerabilities Let Attackers Bypass Security Feature Remotely

Microsoft has disclosed three Active Directory vulnerabilities that could let a remote attacker bypass a key security feature in Windows…

3 weeks ago

Hackers Exploit Palo Alto PAN-OS 0-day Flaw to Gain Root Code Execution on Firewalls

Hackers are exploiting a high-severity flaw in Palo Alto Networks PAN-OS that allows authenticated attackers to run code with root…

3 weeks ago

Cisco Secure Email Gateway 0-Day Vulnerability Actively Exploited in Attacks

Cisco has warned that attackers are actively exploiting a critical zero-day vulnerability in Cisco Secure Email Gateway that can give…

3 weeks ago

Multiple NGINX Flaws Let Remote Attackers Crash Servers and Execute Malicious Code

F5 has disclosed three serious security flaws in NGINX Plus and NGINX Open Source that can let remote, unauthenticated attackers…

3 weeks ago