Critical vulnerability (CVE-2024-48887) in FortiSwitch devices allows unauthenticated attackers to change admin passwords through specially crafted requests. With a severe CVSS score of 9.3, the flaw affects multiple FortiSwitch versions from 6.4.0 to 7.6.0. Fortinet urges immediate patchi...
A critical vulnerability in Google Quick Share for Windows (CVE-2024-10668) allows attackers to cause denial-of-service conditions or transfer files without user consent, bypassing previous fixes for the "QuickShell" vulnerabilities. SafeBreach researchers discovered attackers could trigge...
Researchers discovered counterfeit smartphones preloaded with an advanced version of Triada malware, affecting over 2,600 users primarily in Russia. This sophisticated Android malware, embedded in the system framework, grants attackers extensive control to steal accounts, manipulate messag...
VMware Workstation's automatic update system is failing after Broadcom's acquisition, displaying certificate errors when attempting to check for updates. The issue occurs because update requests are being redirected from the update server to Broadcom's general support page. Users must now ...
This weekly cybersecurity roundup highlights critical vulnerabilities, including an actively exploited Chrome zero-day and severe Kubernetes flaws. It covers emerging threats like BlackLock ransomware, solar inverter vulnerabilities, and RedCurl's pivot to ransomware. The report details so...
