remote code execution (RCE)

Eight critical vulnerabilities in ICS devices allow hackers to take control over access to buildings and lock or unlock doors at will

On: June 10, 2022

Tagged: access control, Carrier LenelS2, Common Vulnerability Scoring System (CVSS), critical infrastructure, cybersecurity, Cybersecurity and Infrastructure Security Agency (CISA), Denial of Service (DDoS), Hacking, Industrial Control System (ICS), Information Security, Internet of Things (IoT), operational technology (OT), remote code execution (RCE), security flaws, technology, vulnerability

Experts from Trellix Threat Labs have shared research on multiple vulnerabilities in an industrial control system (ICS) used to grant physical access to protected facilities, and integrated into building automationRead More →

Vulnerabilities discovered in software used in medical devices for clinical diagnostics and patients’ DNA sequencing would alter the way doctors look for genetic conditions

On: June 3, 2022

In: Vulnerabilities

Tagged: Common Vulnerability Scoring System (CVSS), Cyber Crime, Cyberattack, cybercrime, cybersecurity, Cybersecurity and Infrastructure Security Agency (CISA), Hacking, Illumia, incidents, Information Security, man-in-the-middle (MITM), remote code execution (RCE), security flaws, technology, vulnerability

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued a security alert regarding a set of vulnerabilities that would allow malicious hackers to take control of Illumia genetic analysis devices.Read More →

Critical vulnerability in Microsoft Word and Windows Search allows malware to be downloaded to millions of devices

On: June 3, 2022

In: Vulnerabilities

Tagged: cybersecurity, hackers, Hacking, incidents, Information Security, malicious scripts, Microsoft, Microsoft Office, Microsoft Word, phishing, remote code execution (RCE), technology, vulnerability, Windows Search

Threat actors could exploit a critical zero-day vulnerability in Windows Search to run remotely hosted malware just by automatically opening a search window with a Word document. According to theRead More →

Thousands of Zyxel firewalls are vulnerable to remote hacking due to critical vulnerability

On: May 13, 2022

In: Vulnerabilities

Tagged: arbitrary code execution, Common Vulnerability Scoring System (CVSS), Cyberattack, cybercrime, cybersecurity, Firewall, Hacking, Information Security, Rapid7, remote code execution (RCE), security flaws, technology, vulnerability, ZyXEL

Rapid7 cybersecurity specialists report that thousands of Zyxel firewalls could be exposed to remote attacks due to a recently detected vulnerability. While the company has already released the corresponding patches,Read More →

Remote code execution vulnerability in Azure Data Factory and Azure Synapse Pipelines infrastructure

On: May 10, 2022

In: Vulnerabilities

Tagged: Azure Data Factory, Azure Synapse, Common Vulnerability Scoring System (CVSS), cybersecurity, Hacking, Information Security, Integration Runtime (IR), Microsoft, Microsoft Azure, Orca Security, remote code execution (RCE), security flaws, vulnerability

Microsoft announced the release of several security updates to address a severe vulnerability in the Azure Synapse and Azure Data Factory pipelines whose exploitation would allow threat actors to executeRead More →

CVE-2022-22954: Remote code execution vulnerability in VMware Workspace ONE Access is actively exploited by Iranian hackers

On: April 26, 2022

In: Vulnerabilities

Tagged: advanced persistent threat (APT), APT35, cybersecurity, Hacking, Information Security, Proof of Concept (PoC), remote code execution (RCE), Rocket Kitten, security flaws, technology, VMware, VMware Workspace ONE Access, vulnerability

At least one sophisticated hacking group has been exploiting a critical remote code execution (RCE) vulnerability in VMware Workspace ONE Access. Tracked as CVE-2022-22954, the flaw was addressed in aRead More →

If you have not fixed the Spring4Shell vulnerability, Mirai botnet will automatically take control of your network

On: April 8, 2022

In: Cyber Security

Tagged: Common Vulnerability Scoring System (CVSS), Cyberattack, cybersecurity, hackers, Hacking, incidents, Information Security, Mirai botnet, Qihoo 360, remote code execution (RCE), securty flaws, Spring, Spring4Shell, Trend Micro

After multiple rumors, researchers from security firm Trend Micro confirmed that the Spring4Shell vulnerability is being exploited by Mirai botnet hackers. As previously reported, CVE-2022-22965 and CVE-2022-22963 are critical vulnerabilitiesRead More →

Critical remote code execution vulnerability in Ruby library asciidoctor-include-ex. Secure your applications

On: April 8, 2022

In: Vulnerabilities

Tagged: AsciiDoc, Common Vulnerability Scoring System (CVSS), cybercrime, cybersecurity, cyebrattack, Hacking, Information Security, remote code execution (RCE), Ruby, Security breach, security flaws, vulnerability

Developers addressed a command injection vulnerability in asciidoctor-include-ext, a popular Ruby library that allows users to parse and convert AsciiDoc files. According to the report, this vulnerability allows remote codeRead More →

6 critical vulnerabilities in VMware Workspace ONE Access, Identity Manager, and other products

On: April 7, 2022

In: Vulnerabilities

Tagged: Common Vulnerability Scoring System (CVSS), Cyberattack, cybercrime, cybersecurity, hackers, Hacking, Information Security, remote code execution (RCE), security flaws, Server-side request forgery (SSRF), technology, VMware

VMware released a critical security alert to address various vulnerabilities found in Workspace ONE Access, VMware Identity Manager (vIDM), vRealize Lifecycle Manager, vRealize Automation, and VMware Cloud Foundation products. AccordingRead More →