Sign in Subscribe

Exploited in the wild

ServiceNow Knowledge Bases Exposing Sensitive Data Across Enterprise Instances

ServiceNow Knowledge Bases Exposing Sensitive Data Across Enterprise Instances

On September 17, 2024, AppOmni released a report exposing data vulnerabilities in ServiceNow’s Knowledge Bases (KBs). The report highlights significant risks related to misconfigured access controls that continue to jeopardize enterprise data security.

Critical Zero-Click macOS Vulnerability Chain Exposes iCloud Photos

Critical Zero-Click macOS Vulnerability Chain Exposes iCloud Photos

On August 8, 2022, security researcher Mikko Kenttälä uncovered a zero-click vulnerability in macOS Calendar, which allowed attackers to manipulate calendar invites to perform arbitrary file write and delete operations within the system. This vulnerability

CISA Adds Three Critical Vulnerabilities to Exploited Vulnerabilities Catalog

CISA Adds Three Critical Vulnerabilities to Exploited Vulnerabilities Catalog

On September 13 and 16, 2024, the Cybersecurity and Infrastructure Security Agency (CISA) added three new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog.

CISA Adds Four New Exploited Vulnerabilities to Known Exploited Vulnerabilities Catalog

CISA Adds Four New Exploited Vulnerabilities to Known Exploited Vulnerabilities Catalog

The inclusion of these vulnerabilities follows verified reports of active exploitation by malicious actors. The vulnerabilities affect various Microsoft systems and could have severe implications for federal agencies and organizations globally.

CISA Adds Three Known Exploited Vulnerabilities to Catalog

CISA Adds Three Known Exploited Vulnerabilities to Catalog

(CISA) has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, citing active exploitation. These vulnerabilities include critical issues in ImageMagick, the Linux Kernel, and SonicWall SonicOS, each posing significant risks to affected systems.

Browser Extension Exploits: Detection and Mitigation Strategies

Browser Extension Exploits: Detection and Mitigation Strategies

TrustedSec researchers published a detailed analysis on detecting browser extension exploitation in enterprise environments. Web browsers continue to be a primary target for cyber threats, as tools like Redline Malware or SharpChrome steal sensitive data such as cookies and login credentials.

CISA Releases Four New ICS Advisories Addressing Critical Vulnerabilities

CISA Releases Four New ICS Advisories Addressing Critical Vulnerabilities

On September 5, 2024, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued four new advisories highlighting vulnerabilities in Industrial Control Systems (ICS) used across multiple sectors.