Page 22 - Remote Code Execution News Today

The vulnerability (CVE-2022-20649) can be exploited remotely, without authentication, to execute code with root-level privileges.

Microsoft released a large list of fixes for its first "Patch Tuesday" for the year 2022, which includes vulnerabilities that are in its software programs. Several of these vulnerabilities are branded "Critical," while some of them became Zero-Days that might be exploited by threat actors.

A few days ago, the website of the Department of Education (DepEd) was hacked by someone or a group with the monikers of “0x1998” and “B44T.” DepEd website hacked The defacement was verified and mirrored to Zone-H, an archive of defaced websites. As of this time it is unclear how the hackers we

All H2 users should upgrade to the newest version 2.0.206 which is patched for the flaw

Microsoft today released updates to plug nearly 120 security holes in Windows and supported software. Six of the vulnerabilities were publicly detailed already, potentially giving attackers a head start in figuring out how to exploit them in unpatched systems. More…

The U.K.’s National Health Service warns that an unknown threat actor is successfully hitting vulnerable VMWare Horizon servers with Log4j exploits.

All NH businesses should be aware of the threat and take necessary action

Apache releases patch for Checkmarx-discovered LCE vulnerability.

The world witnessed several high-profile ransomware attacks in 2021, which had devastating economic ramifications for those targeted

An example of how Log4J vulnerability actually works. Well cover Log4J library usage and see how basic inputs can cause potentially disastrous outcomes.