Critical vulnerability (CVE-2024-12356) discovered in BeyondTrust's Privileged Remote Access and Remote Support products allows unauthorized command execution. With a CVSS score of 9.8, the flaw affects versions 24.3.1 and earlier, requiring immediate patching for on-premises deployments w...
Russia designates US threat intelligence firm Recorded Future as "undesirable," banning its operations over alleged Western propaganda support, CIA collaboration, and assistance to Ukraine. The company's CEO views the unprecedented designation as a compliment, while Russia continues its cr...
CISA adds two actively exploited vulnerabilities to KEV catalog: Adobe ColdFusion file access flaw and Microsoft Windows Kernel-Mode Driver issue. FBI warns of HiatusRAT targeting IoT devices, while a major DrayTek router ransomware campaign affects 20,000+ devices. Federal agencies given ...
Over 25,000 SonicWall SSLVPN devices are exposed to critical security vulnerabilities, with 20,000 running outdated firmware. Research shows 430,363 publicly exposed firewalls, facing risks like vulnerability exploitation and password attacks. Recent ransomware incidents highlight urgent n...
CISA warns of two actively exploited vulnerabilities affecting Windows Kernel and Adobe ColdFusion. The Windows flaw (CVE-2024-35250) enables local privilege escalation, while the Adobe vulnerability (CVE-2024-20767) allows unauthorized remote access. Federal agencies must patch by January...
