CVE-2023-6408

CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists that could cause a denial of service and loss of confidentiality, integrity of controllers when conducting a Man in the Middle attack...

U.S. Internet Leaked Years of Internal, Customer Emails

The Minnesota-based Internet provider U.S. Internet Corp. has a business unit called Securence, which specializes in providing filtered, secure email services to businesses, educational institutions and government agencies worldwide. But until it was notified last week, U.S. Internet was publishi...

CVE-2023-46186

CVE-2023-46186 affects IBM Jazz for Service Management 1.1.3.20. The root cause is improper access controls that enable an unauthorized user to obtain sensitive file information via forced browsing. Impact details from sources indicate a high confidentiality risk (NVD CVSS v3.1 base 7.5; IBM CNA ...

Infosys Data Breach Impacts 57,000 Bank of America Customers

By Waqas Bank of America customers participating in deferred compensation plans are the main victims of this data breach. This is a post from HackRead.com Read the original post: Infosys Data Breach Impacts 57,000 Bank of America Customers...

F5 BIG-IP Security Vulnerabilities

F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, and load balancing. A security vulnerability exists in the F5 BIG-IP that stems from a remote command injection vulnerability in the iControl REST endpoint on a...

Remote Monitoring & Management software used in phishing attacks

Remote Monitoring & Management RMM software, including popular tools like AnyDesk, Atera, and Splashtop, are invaluable for IT administrators today, streamlining tasks and ensuring network integrity from afar. However, these same tools have caught the eye of cybercriminals, who exploit them to...

Remote Monitoring & Management software used in phishing attacks

Remote Monitoring & Management RMM software, including popular tools like AnyDesk, Atera, and Splashtop, are invaluable for IT administrators today, streamlining tasks and ensuring network integrity from afar. However, these same tools have caught the eye of cybercriminals, who exploit them to...

CVE-2024-24782

An unauthenticated attacker can send a ping request from one network to another through an error in the origin verification even though the ports are separated by VLAN...

Midnight Blizzard and Cloudflare-Atlassian Cybersecurity Incidents: What to Know

The Midnight Blizzard and Cloudflare-Atlassian cybersecurity incidents raised alarms about the vulnerabilities inherent in major SaaS platforms. These incidents illustrate the stakes involved in SaaS breaches — safeguarding the integrity of SaaS apps and their sensitive data is critical but is no...

Ellucian Security Breach

Ellucian is Ellucian's open and flexible technology ecosystem supporting SaaS. A security vulnerability exists in Ellucian Banner version 9.17 and earlier, which stems from an insecure direct object reference IDOR vulnerability in the endpoint /StudentSelfService/ssb/studentCard/retrieveData...

SAP Fiori Security Breach

SAP Fiori, a user experience UX design system for SAP applications from SAP, Germany, provides designers and developers with a set of tools and guidelines to quickly develop applications for any platform, delivering a consistent, innovative experience for creators and users. A security...

RICOH Multiple Products Threat of Folder User Password Breach (CVE-2022-43969)

Ricoh is aware of the reported 'Threat of folder user password breach' CVE-2022-43969 that affects certain products and services that Ricoh develops, manufactures, and offers. The user password for the folder, that is saved to a device with data transmission functionality, may be breached via a...

Hackers Leak Alleged Partial Facebook Marketplace Database

By Waqas The alleged data breach took place on October 2023. However, the database was only made public earlier today, on Sunday, February 11, 2024. This is a post from HackRead.com Read the original post: Hackers Leak Alleged Partial Facebook Marketplace Database...

PT-2024-11764

Name of the Vulnerable Software and Affected Versions Cpanel::JSON::XS versions prior to 4.33 Description The issue allows attackers to perform out-of-bounds accesses, potentially obtaining sensitive information or causing a denial of service. Recommendations For versions prior to 4.33, update to...

Linksys WRT54GL Security Breach

The Linksys WRT54GL is a wireless router from Linksys, USA. A security vulnerability exists in Linksys WRT54GL version 4.30.18, which originates from an information disclosure vulnerability in file /wlaninfo.htm...

Hugin security breach

Hugin is a cross-platform open source panoramic photography image stitching software by Hugin Open Source. A security vulnerability exists in Hugin version v2022.0.0, which stems from an assertion failure due to improper handling of values...

NoneBot Security Breach

NoneBot is a modern, cross-platform, extensible Python chatbot framework open-sourced by NoneBot. A security vulnerability exists in nonebot2 versions 2.0.0a16 through 2.1.3, which stems from an information disclosure vulnerability in MessageTemplate...

Midnight Blizzard attack on Microsoft corporate environment: a detailed analysis, detections and recommendations

Get a detailed analysis of the entire attack chain of Microsoft's breach by Midnight Blizzard APT29, as well as detection and mitigation recommendations...

Chinese Hackers Infiltrate Dutch Defense Networks with Coathanger RAT

By Deeba Ahmed Chinese state-backed hackers targeted Dutch military networks by exploiting a vulnerability in a FortiGate device. This is a post from HackRead.com Read the original post: Chinese Hackers Infiltrate Dutch Defense Networks with Coathanger RAT...

Setor Informatica S.I.L Security Breach

Setor Informatica S.I.L is an informatization solution consisting of software solutions and technologies and services from Setor Informatica, a Brazilian company. A security vulnerability exists in Setor Informatica S.I.L version 3.0 that stems from an open redirection vulnerability in the...