Alerts

Juniper has released security updates to fix multiple vulnerabilities across multiple products. The addressed vulnerabilities could allow the attacker to obtain sensitive information, perform denial of service, execute arbitrary code, and gain access to the affected products. Sample of the addressed vulnerabilities: Juniper Networks Junos OS Denial of Service Vulnerability (CVE-2023-36832): CVSS: 7.5 Attack Vector: […]

Drupal has released a security update to fix a vulnerability in the Drupal Two-factor Authentication module versions before tfa 8.x-1.1. The addressed vulnerability could allow the remote attacker to bypass access restrictions to reset the password by sending a specially crafted request to the affected products. Two-factor Authentication Module for Drupal Security Bypass Vulnerability (SACONTRIB-

Zoom has released security updates to fix vulnerabilities in Zoom Rooms, Zoom Windows Client, and Zoom Client SDK. The addressed vulnerabilities could allow the attacker to escalate privileges, or disclose information on the affected systems. Sample of the addressed vulnerabilities: 1. Zoom Rooms Improper Input Validation (CVE-2023-36538): CVSS: 8.4 Attack Vector: Local Attack Complexity: Low

Apple has released a security update to fix a zero-day vulnerability affecting macOS Ventura, and Safari. The addressed vulnerability could allow the remote attacker to gain access, and execute arbitrary code on the affected system by persuading the victim to visit a specially crafted website. The addressed vulnerability: Apple iOS, iPadOS, and macOS Ventura Code

IBM has released security updates to fix multiple vulnerabilities in IBM Db2 versions (10.5.0.11, 11.1.4.7, 11.5.x), and IBM Db2 JDBC drivers. The addressed vulnerabilities could allow the remote attacker to execute arbitrary code or cause a denial of service attack on the affected product. Sample of the addressed vulnerabilities: 1. IBM Db2 Denial of Service

Aruba has released security updates to fix several vulnerabilities in multiple versions of Aruba Networks ArubaOS. The addressed vulnerabilities could allow the attacker to execute arbitrary commands, directory traversal, obtain sensitive information, cause a cross-site scripting attack, or gain access to the affected software versions. Sample of the addressed vulnerabilities: 1. Aruba Networks ArubaOS Cross-Site

Akira ransomware operation has increased its activity recently and first emerged in April 2023 targeting finance, education, real estate, manufacturing, and consulting sectors organizations around the world. Akira is based on the source code of Conti ransomware. Akira is a ransomware written in C++ that encrypts local files. Encrypted files have the extension “.akira” appended

Cisco has released security updates to fix multiple vulnerabilities across multiple products. The addressed vulnerabilities could allow the attacker to perform a cross-site scripting attack, gain elevated privileges, obtain sensitive information by reading or modifying the traffic transmitted between the sites, or gain access to the affected products. Sample of the addressed vulnerabilities: 1. Cisco

Mozilla has released an updated Firefox version 115, and Firefox ESR version 102.13 to fix multiple vulnerabilities. The addressed vulnerabilities could allow the remote attacker to gain access, conduct a spoofing attack, bypass security restrictions, or execute arbitrary code by sending a specially crafted request to the affected system. Sample of the addressed vulnerabilities: Mozilla

Google has released an updated Chrome version (114.0.5735.198/199) for Windows and (114.0.5735.198) for Linux and Mac to fix multiple vulnerabilities. The addressed vulnerabilities could allow the remote attacker to gain access, cause the application to crash, or execute arbitrary code on the affected system by persuading the victim to visit a specially crafted website. Sample

Security researchers have discovered an unpatched vulnerability in Microsoft Teams that could allow remote attackers to send malware to unsuspecting employees. Microsoft Teams’ default configuration allows users from outside (external tenants) of their organization to reach out to their staff members. The application doesn’t allow external tenants from sending files. However, security researchers discovered an

Apache has released security updates to address a vulnerability in multiple Apache Tomcat versions. The addressed vulnerability could allow the remote attacker to obtain sensitive information by sending a specially crafted HTTP request to the affected versions. Apache Tomcat Information Disclosure (CVE-2023-34981): CVSS: 7.5 Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: