Critical Patch Out for Month-Old Pulse Secure VPN 0-Day Under Attack

ByPR 24
Critical Patch Out for Month-Old Pulse Secure VPN 0-Day Under Attack | IT Security News

Ivanti, the company behind Pulse Secure VPN appliances, has released a security patch to remediate a critical security vulnerability that was found being actively exploited in the wild by at least two different threat actors.
Tracked as CVE-2021-22893 (CVSS score 10), the flaw concerns “multiple use after free” issues in Pulse Connect Secure that could allow a remote unauthenticated attacker to[…]
Content was cut in order to protect the source.Please visit the source for the rest of the article.

By continuing to use the site, you agree to the use of cookies. more information

The cookie settings on this website are set to “allow cookies” to give you the best browsing experience possible. If you continue to use this website without changing your cookie settings or you click “Accept” below then you are consenting to this.

Close


Similar Posts

Colonial Pipeline Attack: ‘All Monsters Are Human’

Colonial Pipeline Attack: ‘All Monsters Are Human’

ByPR 24

Critical Infrastructure Security , Cybercrime as-a-service , Cyberwarfare / Nation-State Attacks Cybereason’s Sam Curry on DarkSide and New Breed of Ransomware Attack Tom Field (SecurityEditor) • May 12, 2021     Sam Curry, CSO, Cybereason In April, Cybereason published a blog describing its research into the DarkSide ransomware strain that infected…

Boston Public Library discloses cyberattack, system-wide technical outage

Boston Public Library discloses cyberattack, system-wide technical outage

ByPR 24

The Boston Public Library (BPL) has disclosed today that its network was hit by a cyberattack on Wednesday, leading to a system-wide technical outage. BPL serves almost 4 million visitors per year through its central library and twenty-five neighborhood branches, as well as millions more online.  It is the third-largest public library in the United States behind the…

T-Mobile Says an Additional 5.3 Million Customer Accounts Were Compromised in Data Breach

T-Mobile Says an Additional 5.3 Million Customer Accounts Were Compromised in Data Breach

ByPR 24

This article has been indexed from MacRumors: Mac News and Rumors – Front Page T-Mobile earlier this week shared details on a data breach where hackers gained access to the personal information of close to 50 million current, former, and prospective customers. At the time, T-Mobile said that data from 7.8 million current customers had…

Newly Patched Peloton API Flaws Exposed Users’ Private Data

Newly Patched Peloton API Flaws Exposed Users’ Private Data

ByPR 24

Application Security , Endpoint Security , Incident & Breach Response Pen Test Partners: Millions Could Have Had Data Exposed Marianne Kolbasuk McGee (HealthInfoSec) • May 6, 2021     Photo: Peloton Security researchers say API flaws could have exposed the private data of millions of Peloton fitness equipment online service users for months before they…

SEC Sanctions 8 Firms for ‘Deficient Cybersecurity Procedures’

SEC Sanctions 8 Firms for ‘Deficient Cybersecurity Procedures’

ByPR 24

Finance & Banking , Industry Specific , Security Operations Regulator Cites Email Takeovers, Inadequate Incident Response Dan Gunderman (dangun127) • September 1, 2021     (Photo: Securities and Exchange Commission via Flickr) The U.S. Securities and Exchange Commission sanctioned eight financial firms for alleged failures related to cybersecurity policies and procedures, each stemming from email…