security update

Update your OpenWrt router! Security issue made supply chain attack possible

December 9, 2024

A security issue that could have allowed attackers to serve malicious firmware images to users has been fixed by OpenWrt Project, the organization that helms the development …

Wireshark 4.4.2: Security updates, bug fixes, updated protocol support

November 25, 2024

Wireshark, the popular network protocol analyzer, has reached version 4.4.2. It is used for troubleshooting, analysis, development and education. The following vulnerabilities …

Microsoft fixes actively exploited zero-days (CVE-2024-43451, CVE-2024-49039)

November 12, 2024

November 2024 Patch Tuesday is here, and Microsoft has dropped fixes for 89 new security issues in its various products, two of which – CVE-2024-43451 and CVE-2024-49039 …

Google patches actively exploited Android vulnerability (CVE-2024-43093)

November 5, 2024

Google has delivered fixes for two vulnerabilities endangering Android users that “may be under limited, targeted exploitation”: CVE-2024-43047, a flaw affecting …

Millions of Synology NAS devices vulnerable to zero-click attacks (CVE-2024-10443)

November 4, 2024

Synology has released fixes for an unauthenticated “zero-click” remote code execution flaw (CVE-2024-10443, aka RISK:STATION) affecting its popular DiskStation and …

Ransomware hits web hosting servers via vulnerable CyberPanel instances

October 30, 2024

A threat actor – or possibly several – has hit approximately 22,000 vulnerable instances of CyberPanel and encrypted files on the servers running it with the PSAUX …

Fortinet FortiManager flaw exploited in zero-day attacks (CVE-2024-47575)

October 24, 2024

Fortinet has finally made public information about CVE-2024-47575, a critical FortiManager vulnerability that attackers have exploited as a zero-day. About CVE-2024-47575 …

VMware fixes critical vCenter Server RCE bug – again! (CVE-2024-38812)

October 22, 2024

Broadcom has released new patches for previously fixed vulnerabilities (CVE-2024-38812, CVE-2024-38813) in vCenter Server, one of which hasn’t been fully addressed the …

Fortinet releases patches for publicly undisclosed critical FortiManager vulnerability

October 21, 2024

In the last couple of days, Fortinet has released critical security updates for FortiManager, to fix a critical vulnerability that is reportedly being exploited by Chinese …

Actively exploited Firefox zero-day fixed, update ASAP! (CVE-2024-9680)

October 10, 2024

Mozilla has pushed out an emergency update for its Firefox and Firefox ESR browsers to fix a vulnerability (CVE-2024-9680) that is being exploited in the wild. About …

Exploit code for critical GitLab auth bypass flaw released (CVE-2024-45409)

October 9, 2024

If you run a self-managed GitLab installation with configured SAML-based authentication and you haven’t upgraded it since mid-September, do it now, because security …

Microsoft patches two zero-days exploited in the wild (CVE-2024-43573, CVE-2024-43572)

October 8, 2024

For October 2024 Patch Tuesday, Microsoft has released fixes for 117 security vulnerabilities, including two under active exploitation: CVE-2024-43573, a spoofing bug …