Critical authentication bypass vulnerability in Palo Alto Networks PAN-OS firewalls allows unauthenticated attackers to execute PHP scripts and compromise system security. Active exploitation detected since February 13, affecting over 4,400 exposed devices. Patches available for most versi...
Critical SonicWall firewall vulnerability (CVE-2024-53704) faces active exploitation after PoC code release, allowing attackers to bypass authentication and hijack VPN sessions. With 4,500 exposed servers at risk, SonicWall urges immediate firmware updates and security measures to prevent ...
A malicious free Steam game "PirateFi" was discovered distributing Vidar infostealer malware, potentially affecting up to 1,500 users. The malware, hidden in the game's executable file, could steal credentials, browser data, and cryptocurrency wallet information. Steam has removed the game...
Chinese state-sponsored hacking group Salt Typhoon has breached major U.S. telecom providers including Verizon, AT&T, and T-Mobile using sophisticated malware called JumbledPath. The group targeted over 1,000 Cisco devices, accessing sensitive data including wiretapping requests, throu...
Citrix releases critical security patches for a high-severity vulnerability (CVE-2024-12284) in NetScaler Console and Agent products. The flaw, rated 8.8 CVSS v4, enables privilege escalation through improper privilege management, allowing authenticated users to execute unauthorized comman...
