Sign in Subscribe

Vulnerability

CISA and FBI Release Secure by Design Alert on Eliminating XSS Vulnerabilities

CISA and FBI Release Secure by Design Alert on Eliminating XSS Vulnerabilities

On September 17, 2024, CISA and the FBI released a Secure by Design Alert focused on eliminating cross-site scripting (XSS) vulnerabilities. This initiative aims to address the ongoing prevalence of such vulnerabilities in software.

ServiceNow Knowledge Bases Exposing Sensitive Data Across Enterprise Instances

ServiceNow Knowledge Bases Exposing Sensitive Data Across Enterprise Instances

On September 17, 2024, AppOmni released a report exposing data vulnerabilities in ServiceNow’s Knowledge Bases (KBs). The report highlights significant risks related to misconfigured access controls that continue to jeopardize enterprise data security.

Critical Zero-Click macOS Vulnerability Chain Exposes iCloud Photos

Critical Zero-Click macOS Vulnerability Chain Exposes iCloud Photos

On August 8, 2022, security researcher Mikko Kenttälä uncovered a zero-click vulnerability in macOS Calendar, which allowed attackers to manipulate calendar invites to perform arbitrary file write and delete operations within the system. This vulnerability

CISA Adds Three Critical Vulnerabilities to Exploited Vulnerabilities Catalog

CISA Adds Three Critical Vulnerabilities to Exploited Vulnerabilities Catalog

On September 13 and 16, 2024, the Cybersecurity and Infrastructure Security Agency (CISA) added three new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog.

CISA Issues 25 New Industrial Control Systems Advisories Amid Growing Cyber Risks

CISA Issues 25 New Industrial Control Systems Advisories Amid Growing Cyber Risks

On September 12, 2024, the Cybersecurity and Infrastructure Security Agency (CISA) released a comprehensive set of 25 advisories targeting vulnerabilities in industrial control systems (ICS).

CISA Adds Four New Exploited Vulnerabilities to Known Exploited Vulnerabilities Catalog

CISA Adds Four New Exploited Vulnerabilities to Known Exploited Vulnerabilities Catalog

The inclusion of these vulnerabilities follows verified reports of active exploitation by malicious actors. The vulnerabilities affect various Microsoft systems and could have severe implications for federal agencies and organizations globally.

CISA Adds Three Known Exploited Vulnerabilities to Catalog

CISA Adds Three Known Exploited Vulnerabilities to Catalog

(CISA) has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, citing active exploitation. These vulnerabilities include critical issues in ImageMagick, the Linux Kernel, and SonicWall SonicOS, each posing significant risks to affected systems.