patch management
DarkGate Malware Campaign Exploits Patched Microsoft Flaw
The Zero Day Initiative (ZDI) by Trend Micro uncovered a phishing campaign that exploited a patched Microsoft flaw to infect devices with DarkGate malware. CVE-2024-21412 was the Microsoft patch that was exploited ...
Cisco VPN Hijacking Flaw In Secure Client Software Patched
In light of recent events, Cisco has released patches for two high-severity network vulnerabilities in its Secure Client. As per recent reports, vulnerabilities leading to the Cisco VPN hijacking flaw are being ...
CISA Adds JetBrains TeamCity Vulnerability To KEV Catalog
The US Cybersecurity and Infrastructure Security Agency (CISA) has flagged a critical JetBrains TeamCity vulnerability, emphasizing the urgent need for users to take preventive measures. The recently discovered flaw has been added ...
5M WordPress Websites At Risk Amid LiteSpeed Plugin Flaw
A highly sensitive flaw has been identified in the LiteSpeed plugin of WordPress, which has put as many as 5 million websites at risk. Uncovered by the cybersecurity experts at Patchstack, the ...
Lazarus Hacker Group Actively Exploiting Windows Kernel Flaw
The cybersecurity world is abuzz with the revelation of Lazarus Group’s exploitation of a critical vulnerability in Windows Kernel. The Windows Kernel flaw, targeting CVE-2024-21338, has raised concerns due to its potential ...
Action1 Extends Automated Patching Capability to Groups of Endpoints
Action1 updated its patch management platform to make it possible to dynamically group endpoints and provide an audit trail capability ...
New Feature: Grouping Vulnerabilities To Streamline Patch Management
As someone who’s been neck-deep in the world of cybersecurity for years, I’ve seen my fair share of “innovative” features come and go. Most don’t fundamentally shift how we do... The post ...
Poor Patch Management in Cybersecurity
This article is part of a series where we look at a recent NSA/CISA Joint Cybersecurity Advisory on the top cybersecurity issues identified during red/blue team exercises operated by these organizations. In ...
Sierra Flaws Cyber Attack: Router Vulnerabilities Unveiled
In a recent scrutiny of Sierra wireless routers, Forescout’s Vedere Labs uncovered 21 novel vulnerabilities that, though relatively straightforward to exploit, pose historical challenges for enterprises to rectify. Forescout’s Vedere Labs outlined ...
Chrome Exploits Patched To Secure Your Browsing
In a bid to fortify the security of its Chrome browser, Google has swiftly addressed seven vulnerabilities, with one particularly menacing zero-day exploit. This critical flaw, identified as CVE-2023-6345, centers around an ...
