October 2024 – Page 2 – TheCyberThrone

Spring Security fixes Critical Vulnerability CVE-2024-38821

Spring Security fixes Critical Vulnerability CVE-2024-38821

Spring Security has disclosed a critical vulnerability impacting WebFlux applications, enables an authorization bypass under specific conditions. If exploited, this vulnerability could potentially allow unauthorized access to static resources, undermining…

PravinKarthik October 29, 2024

Black Basta ransomware uses Microsoft Teams in its campaigns

Black Basta ransomware uses Microsoft Teams in its campaigns

Security researchers from ReliaQuest has uncovered an attack campaign in which the Black Basta ransomware group have been performing social engineering attacks to gain access to victims' computers by spamming…

PravinKarthik October 29, 2024

Progress fixes Critical vulnerability in Whatsup Gold

Progress fixes Critical vulnerability in Whatsup Gold

Progress Software has disclosed a critical vulnerability in its popular network monitoring solution, WhatsUp Gold, that exposes organizations to potential cyberattacks by allowing unauthorized access to user credentials. The vulnerability…

PravinKarthik October 28, 2024

The CyberThrone most exploited vulnerabilities review – October 26, 2024

Security NewsLetter

The CyberThrone most exploited vulnerabilities review – October 26, 2024

Welcome to TheCyberThrone most exploited vulnerabilities review. This review is for the weeks ending Saturday, October 26, 2024. Fortinet FortiManager CVE-2024-47575: With a CVSS score of 9.8, it deemed to be a critical…

PravinKarthik October 28, 2024

Siemens fixes Critical Vulnerability CVE-2024-47901

Siemens fixes Critical Vulnerability CVE-2024-47901

Siemens has released patches for multiple vulnerabilities in its InterMesh wireless alarm reporting system that could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges on affected…

PravinKarthik October 27, 2024

Windows Downdate attack lets downgrade OS to Vulnerable version

Windows Downdate attack lets downgrade OS to Vulnerable version

A researcher from SafeBreach Labs uncovered a new attack technique that could compromise the security of fully patched Windows 11 systems. The attack was reported in August 2024 at Black…

PravinKarthik October 26, 2024

RISC-V has vulnerability reporting capability introduced in Linux 6.12

RISC-V has vulnerability reporting capability introduced in Linux 6.12

With CPU being the heart of the computer ecosystem, it's too prone to security mishaps. To thwart this scenario, Linux 6.12 comes with a new vulnerability reporting feature/ processors known…

PravinKarthik October 26, 2024