2024-03-14 Post a Comment

Fortinet warns of critical RCE bug in endpoint management software

By Sergiu Gatlan: Fortinet patched a critical vulnerability in its FortiClient Enterprise Management Server (EMS) software that can allow attackers to gain remote code execution (RCE) on vulnerable servers. FortiClient EMS enables admins to manage endpoints connected to an enterprise network, allowing them to deploy FortiClient software and assign security profiles on Windows devices. The security flaw (CVE-2023-48788) is an SQL injection in the DB2 Administration Server (DAS) component, which […]

alt=Fortinet's security platform safeguards business data.

Cyber security

2024-03-13 Post a Comment

Vulnerability in 150K+ Fortinet Devices Let Hackers Execute Arbitary Code Remotely

By Guru Baran A critical security flaw identified as CVE-2024-21762 has been discovered in Fortinetâ€™s FortiOS and FortiProxy secure web gateway systems, potentially impacting around 150,000 devices worldwide. The vulnerability allows for unauthenticated remote code execution (RCE) by sending specially crafted HTTP requests to the affected machines. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has confirmed that attackers actively exploit the flaw, adding it to its Known Exploited Vulnerabilities […]

alt=Android TV screen showing Roku TV app icon.

Cyber security

2024-03-13 Post a Comment

Over 15,000 hacked Roku accounts sold for 50Â¢ each to buy hardware

By Bill Toulas: Roku has disclosed a data breach impacting over 15,000 customers after hacked accounts were used to make fraudulent purchases of hardware and streaming subscriptions. However, BleepingComputer has learned there is more to this attack, with threat actors selling the stolen accounts for as little as $0.50 per account, allowing purchasers to use stored credit cards to make illegal purchases. On Friday, Roku first disclosed the data breach, […]

Cyber security

2024-03-13 Post a Comment

Hackers exploit WordPress plugin flaw to infect 3,300 sites with malware

By Bill Toulas: Hackers are breaching WordPress sites by exploiting a vulnerability in outdated versions of the Popup Builder plugin, infecting over 3,300 websites with malicious code. The flaw leveraged in the attacks is tracked as CVE-2023-6000, a cross-site scripting (XSS) vulnerability impacting Popup Builder versions 4.2.3 and older, which was initially disclosed in November 2023. A Balada Injector campaign uncovered at the start of the year exploited the particular […]

alt= A visual guide showcasing best practices for cloud environments, including security measures and cost optimization strategies.

Cyber security

2024-03-13 Post a Comment

NSA Releases Top Ten Best Practices For Cloud Environments

ByTushar Subhra Dutta: Threat actors aim at Cloud environmentsÂ because of their wide acceptance and one-stop storage of important information. Exploiting shortcomings in cloud security may enable unauthorized access to sensitive data, interruptions in infrastructure, or earning money. The fact that the systems are highly scalable and interconnected makes them good targets for cyber-attacks. Cybersecurity analysts at the NSA recently released the top ten best security practices for cloud environments. […]