Critical Patch Out for Month-Old Pulse Secure VPN 0-Day Under Attack

ByPR 24
Critical Patch Out for Month-Old Pulse Secure VPN 0-Day Under Attack | IT Security News

Ivanti, the company behind Pulse Secure VPN appliances, has released a security patch to remediate a critical security vulnerability that was found being actively exploited in the wild by at least two different threat actors.
Tracked as CVE-2021-22893 (CVSS score 10), the flaw concerns “multiple use after free” issues in Pulse Connect Secure that could allow a remote unauthenticated attacker to[…]
Content was cut in order to protect the source.Please visit the source for the rest of the article.

By continuing to use the site, you agree to the use of cookies. more information

The cookie settings on this website are set to “allow cookies” to give you the best browsing experience possible. If you continue to use this website without changing your cookie settings or you click “Accept” below then you are consenting to this.

Close


Similar Posts

NSA Alerted Microsoft to New Exchange Server …

NSA Alerted Microsoft to New Exchange Server …

ByPR 24

Microsoft today patched 114 CVEs to address the Exchange Server flaws, more than 50 remote code execution vulnerabilities, and one zero-day. Microsoft today issued fixes for 114 vulnerabilities as part of its monthly security update release, which this month addressed 19 critical flaws, four critical Microsoft Exchange Server bugs found by the National Security Agency (NSA),…

Microsoft says Israeli group sold tools to hack Windows

Microsoft says Israeli group sold tools to hack Windows

ByPR 24

An Israeli group sold a tool to hack into Microsoft Windows, Microsoft and technology human rights group Citizen Lab said on Thursday, shedding light on the growing business of finding and selling tools to hack widely used software. The hacking tool vendor, named Candiru, created and sold a software exploit that can penetrate Windows, one…

Colonial Pipeline CEO to Testify at Congressional Hearing

Colonial Pipeline CEO to Testify at Congressional Hearing

ByPR 24

Business Continuity Management / Disaster Recovery , Critical Infrastructure Security , Fraud Management & Cybercrime House Committee to Probe Ransomware Attack That Led to Pipeline Shutdown Scott Ferguson (Ferguson_Writes) • May 21, 2021     Reps. Bennie Thompson (left) and John Katko of the House Homeland Security Committee called for the hearing. After revealing Colonial…

Android Apps with 5.8 million Installs Caught Stealing Users’ Facebook Passwords

Android Apps with 5.8 million Installs Caught Stealing Users’ Facebook Passwords

ByPR 24

Google intervened to remove nine Android apps downloaded more than 5.8 million times from the company’s Play Store after the apps were caught furtively stealing users’ Facebook login credentials. “The applications were fully functional, which was supposed to weaken the vigilance of potential victims. With that, to access all of the apps’ functions and, allegedly,…

Moxa Devices Prone to Vulnerabilities Affecting Railways

Moxa Devices Prone to Vulnerabilities Affecting Railways

ByPR 24

Critical Infrastructure Security , Endpoint Security , Governance & Risk Management Flaws Fixed, Mitigations Issued for Discontinued Devices Mihir Bagwe • September 4, 2021     Moxa has confirmed patching 60 vulnerabilities in its latest firmware update. (Source: Moxa) SEC Consult, a cybersecurity consultancy firm that is part of Atos, has reportedly found multiple vulnerabilities…

Neo-Nazi groups use Instagram to recruit young people, warns Hope Not Hate – Security news

Neo-Nazi groups use Instagram to recruit young people, warns Hope Not Hate – Security news

ByPR 24

Campaigners call platform ‘a fertile recruitment ground’ and say it must take urgent action to protect childrenInstagram has become a hub for young neo-Nazis to recruit young people to far-right groups, a report from an anti-racism group has warned.The recommendations-driven platform and focus on visual media make it ideal for spreading propaganda, Hope Not Hate…