February 2023 – Page 11 – TheCyberThrone

Atlassian fixes Auth related Critical Vulnerability in its Product

A critical vulnerability has been identified in Atlassian Jira Service management server and data center product and necessary fixes has been released to resolve it The vulnerability is tracked as…

PravinKarthik February 5, 2023

CISA Known Exploited Catalog Update February 2023

The US CISA adds Oracle and SugarCRM flaws, respectively tracked as CVE-2022-21587 and CVE-2023-22952, to its Known Exploited Vulnerabilities Catalog. The CVE-2022-21587 flaw with CVSS score 9.8 affects the Oracle…

PravinKarthik February 5, 2023

CERT France alerts on attacks targeting VMware ESXi

CERT-FR warns that threat actors are targeting VMware ESXi servers to deploy ransomware by actively exploiting a bug tracked as CVE-2021-21974 The vulnerability is an OpenSLP heap-overflow flaw in VMware ESXi that can…

PravinKarthik February 4, 2023

Zeroday Exploit in Fortra GoAnywhere MFT

A zero-day vulnerability in Fortra's GoAnywhere MFT managed file transfer application is being actively exploited in the wild. Brian Krebs detailed out first about the flaw . But no public…

PravinKarthik February 4, 2023

MITRE Releases Cyber Resiliency Engineering Framework Navigator

MITRE has released the Cyber Resiliency Engineering Framework (CREF) Navigator, a free visualization tool for engineers designing cyber-resilient systems. Since the cyberattacks are on a constant rise and enterprise looks to…

PravinKarthik February 4, 2023

HeadCrab Malware affects Redis servers

Researchers have spotted a threat actors quietly mining Monero cryptocurrency on open source Redis servers, using a custom-made malware variant called "HeadCrab" that is virtually undetectable by agentless and conventional…

PravinKarthik February 4, 2023

VMware fixes High Severity Vulnerability in Workstation

VMware has fixed a high-severity privilege escalation flaw, tracked as CVE-2023-20854 with a CVSS score of 7.8, that impacts Workstation. An attacker can exploit the vulnerability to delete arbitrary files…

PravinKarthik February 3, 2023