Researchers discovered that two vulnerabilities in the Apache OpenWhisk serverless cloud platform could have allowed malicious actors to overwrite and execute arbitrary code.
http://feedproxy.google.com/~r/Securityweek/~3/m3_lVwdZw10/apache-openwhisk-flaws-allowed-attackers-overwrite-code-ibm-cloud
UK-based industrial software company AVEVA has patched two critical remote code execution vulnerabilities discovered by researchers in its InTouch and InduSoft development tools.
http://feedproxy.google.com/~r/Securityweek/~3/KAgU41_Ck7o/aveva-patches-critical-flaws-hmiscada-tools-following-schneider-merger
At least two threat groups have started exploiting a critical Oracle WebLogic vulnerability patched earlier this month. The attacks began shortly after several proof-of-concept (PoC) exploits were made public.
http://feedproxy.google.com/~r/Securityweek/~3/1Q9EVP-koTs/recently-patched-oracle-weblogic-flaw-exploited-wild
A high severity vulnerability affecting some Bluetooth implementations can allow an attacker in physical proximity of two targeted devices to monitor and manipulate the traffic they exchange. Some of the impacted vendors have already released patches.
http://feedproxy.google.com/~r/Securityweek/~3/dyeD1VYVpZw/bluetooth-vulnerability-allows-traffic-monitoring-manipulation
The Apache Software Foundation informed users over the weekend that updates for the Tomcat application server address several vulnerabilities, including issues that can lead to information disclosure and a denial-of-service (DoS) condition.
http://feedproxy.google.com/~r/Securityweek/~3/vXDz35sCXDU/information-disclosure-dos-flaws-patched-apache-tomcat
Two serious, remotely exploitable vulnerabilities in Sony IPELA E Series Network Camera products could allow attackers to execute commands or arbitrary code on affected devices.
http://feedproxy.google.com/~r/Securityweek/~3/1iP4PWE9Ow8/sony-patches-remotely-exploitable-vulnerabilities-network-cameras
Security researchers are warning of a new wave of attacks associated with two infamous Internet of Things (IoT) botnets: Mirai and Gafgyt.
http://feedproxy.google.com/~r/Securityweek/~3/hvskgGDCbgs/mirai-gafgyt-iot-botnet-attacks-intensify
A researcher has earned a significant bug bounty from Google after finding a serious server-side request forgery (SSRF) vulnerability that exposed information from the tech giant’s internal network.
http://feedproxy.google.com/~r/Securityweek/~3/e1d3SxKZyAw/ssrf-flaw-exposed-information-googles-internal-network
Nearly half a billion devices used by enterprises are exposed to cyberattacks by DNS rebinding, according to a study conducted by IoT security firm Armis.
http://feedproxy.google.com/~r/Securityweek/~3/6M7k_2IBIyU/half-billion-enterprise-devices-exposed-dns-rebinding
A serious vulnerability in the Microsoft Translator Hub could be exploited to delete any or all of the 13000+ projects hosted by the service, a security researcher has discovered.
http://feedproxy.google.com/~r/Securityweek/~3/yFifgKBOJI0/microsoft-addresses-serious-vulnerability-translator-hub