Palo Alto Networks Warns of Firewall Hijack Flaw
Palo Alto Networks has disclosed multiple critical vulnerabilities in its Expedition tool that could allow attackers to hijack PAN-OS firewalls. Acco…
Vulnerability
Arc Browser Patched Critical No User Interaction Flaw - Update Now!
A significant vulnerability was discovered in the Arc browser, developed by The Browser Company. The flaw, now identified as CVE-2024-45489, potentia…
Security Flaw Exposed in Airport Crew Verification System
A critical vulnerability in an airport security system that verifies airline crew members has been uncovered by cybersecurity researchers. The flaw c…
Telegram for Android Hit by "EvilVideo" Zero-Day Exploit
Security researchers at ESET have uncovered a zero-day exploit targeting the Android version of the popular messaging app Telegram. The vulnerability…
Critical ServiceNow Vulnerabilities Allow Full Database Access to Hackers
Security researchers at Assetnote have uncovered a chain of vulnerabilities in ServiceNow, a widely used platform for business transformation and au…
SnailLoad - New Side-Channel Network Latency Attack
Researchers at Graz University of Technology have unveiled a novel side-channel attack technique named " SnailLoad ." This innovative appr…
regreSSHion - Critical Remote Code Execution Vulnerability Discovered in OpenSSH
Security researchers at Qualys have uncovered a severe vulnerability in OpenSSH , one of the most widely used secure communication protocols on the i…
Critical Auth Bypass Flaw Discovered in Progress MOVEit Transfer Software
Security researchers from Watchtowr have uncovered a severe authentication bypass vulnerability in Progress MOVEit Transfer, a widely-used enterprise…
NVIDIA Fixed Critical Vulnerabilities in Triton AI Server
In a concerning discovery for the artificial intelligence industry, cybersecurity researchers have uncovered two critical vulnerabilities in NVIDIA&#…
VMware Releases Critical Security Updates to Fix Severe Vulnerabilities
VMware has released urgent security updates to address multiple critical vulnerabilities affecting VMware vCenter Server and VMware Cloud Foundation …
SolarWinds Patches Critical Vulnerability in Serv-U File Transfer Solution
SolarWinds has fixed a critical vulnerability in SolarWinds' widely-used Serv-U managed file transfer server that could allow remote attackers to…
![[CVE-2024-3400] Palo Alto Networks Firewall Vulnerability Exploited in the Wild](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhKED7Fvvfj5-FS-tOH8kjTqO5oTDs4Ouujus6C452huObgEcpS8yoVgDK4GcBzR_42KHvBIrLH9jsFs0XBkCwswJRwFa0fuEDRBVVPhs3cqDR-QObldMde6MIP3k_3N5vU6t9trBKXtFkAdnlRHMCPCEVrDwG3j0hg_G0K-7Pn7iaKrwcv-KGoQTaxutM/w600-h300-p-k-no-nu/cve-2024-3400.webp)
[CVE-2024-3400] Palo Alto Networks Firewall Vulnerability Exploited in the Wild
In a startling revelation, cybersecurity firms Volexity and watchTowr have reported that a critical zero-day vulnerability in Palo Alto Networks Glob…
"BatBadBut" Vulnerability Discovered in Rust Standard Library on Windows
A critical security vulnerability, dubbed " BatBadBut ," has been discovered in the Rust standard library, affecting all versions before 1.…
Newly Uncovered "Branch History Injection" Attack Bypass Spectre Mitigations
A team of cybersecurity researchers has unveiled a new variant of the notorious Spectre v2 vulnerability , dubbed " Branch History Injection &qu…
New HTTP/2 Vulnerability Poses Severe Threat to Server Availability
A recently discovered class of vulnerabilities within numerous HTTP/2 protocol implementations, dubbed the "CONTINUATION Flood," has been f…
GoFetch Flaw Exposes Cryptographic Key Leakage Risk in Apple's M-Series Chips
A team of academic researchers has uncovered a concerning vulnerability affecting Apple's M-series chips that could allow attackers to extract en…
Critical Security Flaws Discovered in OpenMetadata Platform
Security researcher Alvaro Muñoz of the GHSL team has uncovered multiple critical vulnerabilities in OpenMetadata, an open-source metadata management…
Ivanti Discloses Critical RCE Flaw in Standalone Sentry, Urges Immediate Patching
Ivanti has disclosed a critical remote code execution vulnerability in its Standalone Sentry software and is strongly urging customers to apply patch…