Researchers discovered that two vulnerabilities in the Apache OpenWhisk serverless cloud platform could have allowed malicious actors to overwrite and execute arbitrary code. read more http://feedproxy.google.com/~r/Securityweek/~3/m3_lVwdZw10/apache-openwhisk-flaws-allowed-attackers-overwrite-code..
Tag : Vulnerabilities
UK-based industrial software company AVEVA has patched two critical remote code execution vulnerabilities discovered by researchers in its InTouch and InduSoft development tools. read more http://feedproxy.google.com/~r/Securityweek/~3/KAgU41_Ck7o/aveva-patches-critical-flaws-hmiscada-tools-following-schnei..
At least two threat groups have started exploiting a critical Oracle WebLogic vulnerability patched earlier this month. The attacks began shortly after several proof-of-concept (PoC) exploits were made public. read more http://feedproxy.google.com/~r/Securityweek/~3/1Q9EVP-koTs/recently-patched-oracle-weblogic-flaw-expl..
A high severity vulnerability affecting some Bluetooth implementations can allow an attacker in physical proximity of two targeted devices to monitor and manipulate the traffic they exchange. Some of the impacted vendors have already released patches. read more http://feedproxy.google.com/~r/Securityweek/~3/dyeD1VYVpZw/bluetooth-vulnerability-allows-traffic-monitoring-ma..
The Apache Software Foundation informed users over the weekend that updates for the Tomcat application server address several vulnerabilities, including issues that can lead to information disclosure and a denial-of-service (DoS) condition. read more http://feedproxy.google.com/~r/Securityweek/~3/vXDz35sCXDU/information-disclosure-dos-flaws-patched-apa..
Two serious, remotely exploitable vulnerabilities in Sony IPELA E Series Network Camera products could allow attackers to execute commands or arbitrary code on affected devices. read more http://feedproxy.google.com/~r/Securityweek/~3/1iP4PWE9Ow8/sony-patches-remotely-exploitable-vulnerabilities-netwo..
Security researchers are warning of a new wave of attacks associated with two infamous Internet of Things (IoT) botnets: Mirai and Gafgyt. read more http://feedproxy.google.com/~r/Securityweek/~3/hvskgGDCbgs/mirai-gafgyt-iot-botnet-attacks..
A researcher has earned a significant bug bounty from Google after finding a serious server-side request forgery (SSRF) vulnerability that exposed information from the tech giant’s internal network. read more http://feedproxy.google.com/~r/Securityweek/~3/e1d3SxKZyAw/ssrf-flaw-exposed-information-googles-intern..
Nearly half a billion devices used by enterprises are exposed to cyberattacks by DNS rebinding, according to a study conducted by IoT security firm Armis. read more http://feedproxy.google.com/~r/Securityweek/~3/6M7k_2IBIyU/half-billion-enterprise-devices-exposed-dns..
A serious vulnerability in the Microsoft Translator Hub could be exploited to delete any or all of the 13000+ projects hosted by the service, a security researcher has discovered. read more http://feedproxy.google.com/~r/Securityweek/~3/yFifgKBOJI0/microsoft-addresses-serious-vulnerability-tran..
