Page 4 - Shadowserver Foundation News Today

U.S. federal agencies have until midnight Friday to disconnect Ivanti VPN devices and perform a factory reset before reconnecting them to the network. Fifteen

U.S. federal agencies have until midnight Friday to disconnect Ivanti VPN devices and perform a factory reset before reconnecting them to the network. Fifteen

Hackers are scanning the internet looking for vulnerable instances of the Jenkins server used by software developers for continuous integration and continuous

After two vulnerabilities were found in the system.

CVE-2024-0402, CVSS score 9.9, may affect more than 4,800 unpatched GitLab servers.

Welcome to Cyber Security Today. This is the Week in Review edition for the week ending Friday, January 26th 2024. I'm Howard Solomon, contributing reporter on cybersecurity for ITWorldCanada.com and TechNewsday.com in the U.S. In a few minutes Terry Cutler, head of Montreal's Cyology Labs will be here to discuss recent headlines. That includes

A critical zero-click account takeover exploit affects GitLab Community and Enterprise Editions.

IT infrastructure mainstays including Netscaler, Atlassain and VMWare on Tuesday released fixes for vulnerabilities including some allowing malicious takeover of

Security researchers say they have evidence that thousands of companies have been hacked by way of two zero-day flaws in Ivanti VPNs.

BleepingComputer reports that internet-exposed Apache RocketMQ servers vulnerable to the critical remote code execution flaws, tracked as CVE-2023-33246 and CVE-2023-37582 the latter of which stemmed from the incomplete fix of the former were discovered by The ShadowServer Foundation to have been scanned by hundreds of hosts around the world daily for attempted exploitation.