2439 matches found
DoS (Denial of Service) org.apache.tomcat:tomcat-coyote Dependency in Confluence Data Center and Server
This High severity org.apache.tomcat:tomcat-coyote Dependency vulnerability was introduced in versions 1.0 of Confluence Data Center and Server. This org.apache.tomcat:tomcat-coyote Dependency vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:...
WazirX Cryptocurrency Exchange Loses $230 Million in Major Security Breach
Indian cryptocurrency exchange WazirX has confirmed that it was the target of a security breach that led to the theft of $230 million in cryptocurrency assets. "A cyber attack occurred in one of our multi-signature wallets involving a loss of funds exceeding $230 million," the company said in a...
Third-Party Dependency in Confluence Data Center and Server
This High severity Third-Party Dependency vulnerability was introduced in versions 7.0.1 of Confluence Data Center and Server. This Third-Party Dependency vulnerability, with a CVSS Score of 7.4, allows an unauthenticated attacker to expose assets in your environment susceptible to exploitation...
How do cryptocurrency drainer phishing scams work?
By Teoderick Contreras and Jose Hernandez of Splunk, with contributions from the Splunk Threat Research Team. Cryptodrainer scams have emerged as a significant threat in the cryptocurrency ecosystem, targeting unsuspecting individuals with the promise of easy profits while covertly siphoning thei...
Why You Need Network Detection & Response Now
Cybersecurity teams are well-equipped to handle threats to technology assets that they manage. But with unmanaged devices providing ideal spots for attackers to lurk unseen, network detection and response capabilities have become vitally important...
Blueprint for Success: Implementing a CTEM Operation
The attack surface isn't what it once was and it's becoming a nightmare to protect. A constantly expanding and evolving attack surface means risk to the business has skyrocketed and current security measures are struggling to keep it protected. If you've clicked on this article, there's a good...
Malicious code in font-assets (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-6913 Malicious code in font-assets (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in assets-pipeline (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in assets-live_compile (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in assets-offline (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-6705 Malicious code in assets-live_compile (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-3828 Malicious code in vis-assets (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in vis-assets (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in starter-assets-sass (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ba07492e2a8db9d81d2c52ee32e66ed5f4432091392b4e957b6974329bce90d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-3054 Malicious code in starter-assets-sass (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ba07492e2a8db9d81d2c52ee32e66ed5f4432091392b4e957b6974329bce90d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in sq-assets (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-3041 Malicious code in sq-assets (npm)
--- -= Per source details. Do not edit below this line.=-...