|
You are here |
thehackernews.com | ||
| | | | |
snyk.io
|
|
| | | | | On the 29th of March 2024, the high-stakes investment and prolonged campaign to plant a backdoor in the Linux software library liblzma to gain access to multiple operating systems via Linux distributions was carried out by a malicious actor. | |
| | | | |
www.sonatype.com
|
|
| | | | | Sonatype's malware detection identified a malicious PyPI package called crytic-compilers, connected to Russia-linked Lumma Windows stealer. Learn More. | |
| | | | |
www.imperva.com
|
|
| | | | | Recently, a critical vulnerability in the widely used Apache OFBiz framework was disclosed, designated CVE-2024-45195. This vulnerability allows for unauthenticated remote code execution (RCE), making it an especially dangerous flaw for organizations using OFBiz in their business operations. An attacker without valid credentials can exploit missing view authorization checks in the web application, bypassing previous [...] | |
| | | | |
claroty.com
|
|
| | | Claroty researchers have discovered multiple vulnerabilities in popular industrial VPN-based solutions that provide remote access. Learn more. | ||