Page 14 - Remote Code Execution News Today

Orca Security researchers say the vulnerability could have let an attacker have full permissions on a Cosmos DB Jupyter notebook, while Microsoft disputes the impact of the bug, claims its hard to exploit and affects a tiny fraction of Cosmos DB users.

Analysts at Orca Security have found a critical vulnerability affecting Azure Cosmos DB that allowed unauthenticated read and write access to containers.

Were you prepared?

🔥 This article widely discussed at Hackernews and Reddit In the information security field, we have developed lots of thoughts that can’t be discussed (or rarely discussed): Never roll your own crypto Always use TLS Security by obscurity is bad And goes like this. Most of them are very generally correct. However, I started to think that people are telling those because everyone is telling them. And, most of the people are actually not thinking about exceptional...

A remote code execution flaw in the open-source Apache Commons Text library has some people worried that it could turn into the next Log4Shell. However, most cybersecurity researchers say it is nowhere near as concerning.

Five Wi-Fi vulnerabilities in the Linux kernel have been patched and a new stable kernel, 5.10.148, released by stable kernel maintainer Greg Kroah-Ha...

There is a new exploit, ProxyNotShell, being exploited in the wild to take advantage of the recent Microsoft exchange vulnerabilities.

Microsoft updated the mitigation measures security teams should undertake for recently disclosed Exchange vulnerabilities that can lead to remote code execution after it was reported that previous measure can easily be bypassed.

Microsoft has updated the mitigation for the latest Exchange zero-day vulnerabilities tracked as CVE-2022-41040 and CVE-2022-41082, also referred to ProxyNotShell.

Microsoft has shared mitigations for two new Microsoft Exchange zero-day vulnerabilities tracked as CVE-2022-41040 and CVE-2022-41082, but researchers warn that the mitigation for on-premise servers is far from enough.