company · 3 records
Apache

Apache Syncope vulnerability enables arbitrary SQL command execution
Rapid7 released a public proof-of-concept script for a critical authentication bypass vulnerability in Check Point SmartConsole that allows unauthenticated attackers to gain administrative privileges.
1 outlet Cyber read

Zoom releases security updates to address critical Windows vulnerability
Zoom has released security updates to address a critical vulnerability in its Windows clients that could allow unauthenticated attackers to take over user accounts, along with three other high-severity flaws.
1 outlet Markets read Cyber read

Hacker uses unattended Hermes AI agent at Thai Ministry of Finance
A hacker used an unattended Hermes AI agent to conduct post-exploitation activities at Thailand's Ministry of Finance, detecting logs on a web server that revealed internal network scans and default configuration exploits.
3 outlets Cyber read