Page 5 - Shadowserver Foundation News Today

Discover what vulnerabilities were exploited in the first week of 2024 — including new and existing ones from Ivanti, Apache, and more.

Nearly 11 million SSH servers accessible via the Internet are still vulnerable to the Terrapin attack that was discovered in December 2023.

A new vulnerability found in the Apache Struts 2 framework has received a critical severity rating from NIST’s national database.

Hackers are using publicly disclosed proof-of-concept code to exploit a recently patched critical vulnerability found in the Apache Struts 2 Framework to achieve

Hackers are using publicly disclosed proof-of-concept code to exploit a recently patched critical vulnerability found in the Apache Struts 2 Framework to achieve

Cyberwarfare: MyBroadband's Jan Vermeulen explains how warnings about the security around certain programmable logic controllers expose SA's vulnerability - we're reportedly tied for ninth place in terms of the number of instances exposed.

As many as 20,000 Microsoft Exchange servers could be at risk

A vulnerability in the file server and collaboration platform that earned a 10 in severity on the CVSS allows access to admin passwords, mail server credentials, and license keys.

Security researchers say attackers are actively attempting to exploit a critical vulnerability in unpatched ownCloud implementations, which they can use to steal

Security researchers say attackers are actively attempting to exploit a critical vulnerability in unpatched ownCloud implementations, which they can use to steal