March 2024 – TheCyberThrone

Red Hat Warning on Fedora Linux – CVE-2024-3094

Red Hat's Information Risk and Security and Product Security teams have identified a critical vulnerability in the latest versions of the 'xz' compression tools and libraries. The affected versions, 5.6.0…

PravinKarthik March 30, 2024

Imperva SecureSphere Vulnerability -CVE-2023-50969

A newly discovered vulnerability in Imperva SecureSphere, a widely used on-premises Web Application Firewall (WAF), has the potential to expose organizations to devastating security breaches. The vulnerability tracked as CVE-2023-50969…

PravinKarthik March 29, 2024

Gitlab addresses XSS and DoS vulnerabilities

GitLab has released critical security updates for versions 16.10.1, 16.9.3, and 16.8.5 of its popular Git management software. These patches address vulnerabilities that could expose users to attacks ranging from…

PravinKarthik March 28, 2024

Google addressed Zeroday Vulnerabilities identified in Pwn2Own

Google addressed several vulnerabilities in Chrome, including two zero-day vulnerabilities, tracked as CVE-2024-2886 and CVE-2024-2887, which were demonstrated during the Pwn2Own Vancouver 2024 hacking competition. The high-severity vulnerability CVE-2024-2886 is…

PravinKarthik March 28, 2024

TeamViewer Vulnerability Affecting macOS -CVE-2024-1933

A security vulnerability in TeamViewer has been uncovered, putting macOS users of older versions at significant risk. This symlink flaw could allow attackers to elevate their privileges on a target…

PravinKarthik March 27, 2024

GoFetch vulnerability in Apple M-series Chips

Apple M-series chips are vulnerable to a side-channel attack called GoFetch, which exploits data memory-dependent prefetchers (DMPs) to extract secret encryption keys. DMP is a feature of some modern processors…

PravinKarthik March 27, 2024

CISA KEV UPDATE March 2024 – Part 2

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the following vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog. CVE-2023-48788 Fortinet FortiClient EMS SQL Injection Vulnerability with a CVSS score 9.3 is a critical…

PravinKarthik March 26, 2024