Oracle has fixed an unauthenticated file disclosure flaw in Oracle Agile Product Lifecycle Management (PLM) tracked as CVE-2024-21287, which was actively exploited as a zero-day to download files. […]
Vulnerable Jupyter Servers Targeted for Sports Piracy
Misconfigured instances of JupyterLab and Jupyter Notebook have been targeted by threat actors for sports stream ripping.
The post Vulnerable Jupyter Servers Targeted for Sports Piracy appeared first on SecurityWeek.
D-Link urges users to retire VPN routers impacted by unfixed RCE flaw
D-Link is warning customers to replace end-of-life VPN router models after a critical unauthenticated, remote code execution vulnerability was discovered that will not be fixed on these devices. […]
Employee Data Compromised in Hacker Attack on Space Technology Firm Maxar
Satellite maker Maxar Space Systems has disclosed a data breach impacting the personal information of its employees.
The post Employee Data Compromised in Hacker Attack on Space Technology Firm Maxar appeared first on SecurityWeek.
Microsoft now testing hotpatch on Windows 11 24H2 and Windows 365
Microsoft announced today that hotpatching is now also available in preview on Windows 365 and Windows 11 Enterprise 24H2 client devices. […]
CISA Director Jen Easterly to Step Down
A CISA told SecurityWeek that all appointees of the Biden-Harris administration will leave by noon on inauguration day.
The post CISA Director Jen Easterly to Step Down appeared first on SecurityWeek.
Helldown ransomware exploits Zyxel VPN flaw to breach networks
The new ‘Helldown’ ransomware operation is believed to target vulnerabilities in Zyxel firewalls to breach corporate networks, allowing them to steal data and encrypt devices. […]
Botnet fueling residential proxies disrupted in cybercrime crackdown
The Ngioweb botnet, which supplies most of the 35,000 bots in the cybercriminal NSOCKS proxy service, is being disrupted as security companies block traffic to and from the two networks. […]
Russian Phobos Ransomware Operator Extradited to US
Evgenii Ptitsyn was extradited from South Korea to the US to face charges for his alleged involvement in administering the Phobos ransomware.
The post Russian Phobos Ransomware Operator Extradited to US appeared first on SecurityWeek.
New Windows 11 recovery tool to let admins remotely fix unbootable devices
Microsoft is working on a new Windows “Quick Machine Recovery” feature that will allow IT administrators to use Windows Update “targeted fixes” to remotely fix systems rendered unbootable. […]