organization · 6 records
Rapid7
Apache Syncope vulnerability enables arbitrary SQL command execution
Rapid7 released a public proof-of-concept script for a critical authentication bypass vulnerability in Check Point SmartConsole that allows unauthenticated attackers to gain administrative privileges.
New Ted backdoor found in trojanized HAProxy binaries targeting South Korean firms
A previously undocumented backdoor named ted has been discovered embedded in trojanized HAProxy binaries used to intercept web traffic in South Korean organizations.
INC Ransomware targets SonicWall Secure Mobile Access vulnerabilities globally
INC Ransomware has emerged as the dominant threat actor exploiting security vulnerabilities in SonicWall Secure Mobile Access 1000 series devices to compromise organizations across multiple countries.
OpenWrt releases security patches to address critical DHCPv6 vulnerabilities
OpenWrt released version 24.10.8 and 25.12.5 to patch a critical DHCPv6 stack overflow flaw allowing arbitrary code execution as root, alongside other network service vulnerabilities.
Qilin ransomware gang exploits critical Palo Alto Networks VPN vulnerability
The Qilin ransomware gang is actively exploiting a critical authentication bypass vulnerability in Palo Alto Networks' GlobalProtect VPN to breach corporate networks.
Zimbra releases security patches addressing nine vulnerabilities in version 10.1.20
Zimbra released patches for version 10.1.20 to address nine security vulnerabilities, including a critical SNMP command injection flaw and four stored XSS issues in the Classic Web Client.