Vulnerabilities

The latest breaches, scams and hacks in plain English, newest first.

38 stories · Page 3 of 5

Show everything

Malware
Chinese Government-linked Hackers Use Automated and Manual Tools to Steal Data Worldwide
US authorities warn that hackers linked to the Chinese government are using both automated and hands-on methods to steal sensitive data from organisations around the world, including critical infrastructure.
8 Oct 20263 min read
Vulnerabilities
Oracle Health data breach may have exposed nearly 20 million patient records
A cyberattack on Oracle Health’s legacy Cerner systems may have compromised the personal and medical data of almost 20 million people, according to a report citing state filings.
8 Oct 20263 min read
Vulnerabilities
CISA Orders Federal Agencies to Patch ProFTPD Flaw Exploited by Flax Typhoon
CISA has given US federal agencies until 11 October to fix a critical ProFTPD vulnerability after reports of active exploitation by the group Flax Typhoon.
8 Oct 20263 min read
Vulnerabilities
Attackers Hijack Domain Registries to Obtain Certificates for Google and Others
Attackers compromised three country-code domain registries and obtained unauthorised HTTPS certificates for Google and other organisations. Chrome users are protected, but risks remain for others.
7 Oct 20263 min read
Vulnerabilities
TP-Link Faces Lawsuits from Four US States Over Router Security and China Ties
Florida, Iowa, Montana and Nebraska have sued TP-Link, claiming it misled buyers about router security and its links to China. TP-Link denies the allegations and says it will fight them in court.
7 Oct 20264 min read
Vulnerabilities
SonicWall fixes critical SSRF flaw in SMA1000 gateways, patches urged
SonicWall has released urgent fixes for a severe flaw in its SMA1000 gateways. The bug could let attackers access internal systems without logging in, but there is no evidence of attacks so far.
7 Oct 20263 min read
Vulnerabilities
FortiBleed Attack Locks Organisations Out of Fortinet Firewalls Worldwide
Criminals using stolen credentials are locking IT teams out of Fortinet firewalls, with over 86,000 devices affected globally. The FBI and Secret Service urge urgent action to prevent further lockouts and ransomware attacks.
6 Oct 20263 min read
Vulnerabilities
Atlassian flaw lets attackers read files in Jira, Confluence and more without logging in
A critical flaw in Atlassian's self-hosted products lets attackers read certain files without logging in. Exploitation began within hours of public disclosure, affecting Jira, Confluence, Bitbucket and others.
6 Oct 20263 min read
Vulnerabilities
Citrix NetScaler flaw exploited in attacks: urgent patch released for SAML deployments
A serious vulnerability in Citrix NetScaler appliances is being actively exploited, causing outages for organisations using SAML authentication. Citrix and CISA urge immediate patching.
4 Oct 20263 min read

The day's cyber news in 5 minutes.

Cyberend Daily is one short email with the stories that matter, written so anyone can follow.

No spam · 100% free · Unsubscribe anytime