Sav-Rx suffers a data breach
Sav-Rx, a prescription service provider, has disclosed a data breach that took place in 2023, impacting 2.8M individuals in the United States. In a notification to Maine Attorney General’s office,…
PoC Exploit Released for CVE-2024-27842
A security researcher Wang Tielei published a PoC exploit codes for a privilege escalation vulnerability CVE-2024-27842 in macOS. The vulnerability has been patched by Apple. The vulnerability is a critical…
Bugcrowd Acquires Informer
Bugcrowd has acquired an external attack surface management vendor Informer to give customers more visibility into their digital assets. Informer will fuel the adoption of Bugcrowd's penetration testing technology and…
Progress WhatsUp fixes several vulnerabilities
The Progress WhatsUp Gold team has fixed multiple vulnerabilities affecting all versions of the software released before 2024.0.0 that possess risks to organizations using outdated versions of the network monitoring…
Gitlab fixes XSS Bug -CVE-2024-4835
GitLab releases patches for several security vulnerabilities through the latest versions of its Community Edition and Enterprise Edition software. The most severe bug from the list is a cross-site scripting…
Google Patched Eighth Zeroday in Chrome – CVE-2024-5274
Google has released a security patch to address a new Zeroday vulnerability in Chrome browser, marking the fixed Zeroday count to eight in this year alone. The vulnerability tracked as…
CISA adds Flink Vulnerability to its KEV -CVE-2020-17519
The U.S. CISA added a security flaw impacting Apache Flink, an open-source, unified stream-processing and batch-processing framework, to the Known Exploited Vulnerabilities catalog, citing evidence of active exploitation. The vulnerability…
Veeam patches Critical Vulnerability -CVE-2024-29849
Veeam has patched a critical vulnerability that could allow an unauthenticated attacker access to the Veeam Backup Enterprise Manager (VBEM) web console. The vulnerability tracked as CVE-2024-29849 with a CVSS…