Page 16 - Remote Code Execution News Today

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two more flaws to its catalog of Known Exploited Vulnerabilities, based on evidence of active exploitation.

The 121 vulnerabilities include an actively exploited MSDT code execution bug and 16 other critical-rated flaws.

Today is Microsofts August 2022 Patch Tuesday, and with it comes fixes for the actively exploited DogWalk zero-day vulnerability and a total of 121 flaws.

July's security update included fixes for one actively exploited flaw, more than 30 bugs in Azure Site Recovery, and four privilege escalation bugs in Windows Print Spooler.

The Indian Computer Emergency Response Team (CERT-In), which comes under the IT Ministry, has warned users of multiple vulnerabilities in Google Chrome which could allow a remote attacker to execute arbitrary code and denial-of-service (DoS) ...

Boards care about risk – while boards are getting more IT-savvy members to cope with the challenges and changes that are taking place around their businesses, they really care about risk. Boards and executives are now approaching cybersecurity as a business risk rather than what it has historically been - a technology problem.

Hackers used a zero-day exploit on Linux-based Mitel MiVoice VOIP appliances for initial access in what is believed to be the beginning of a ransomware attack.

QNAP has issued a patch of a security vulnerability that could affect certain configurations of its NAS Drives. The flaw resides in PHP that deals with FPM. It can allow remote code execution.

The message includes a Microsoft Excel document that, upon opening, enables malicious macros that then run an executable from a remote server on the victim computer.

This is the last entry in Team82’s series examining the security of network management systems for the Extended Internet of Things (XIoT). Read our pr...