VulnerabilityManagement

Ransomware attackers Exploit VMware ESXi arbitrary-write vulnerability

VMware ESXi VMware vulnerabilities

Microsoft 0-Day Vulnerability Targeted by APT28 Hacking Group Infiltrating Sensitive Networks

APT28 attack executes when victims open malicious documents in Microsoft Office:

Critical Ivanti EPMM Attacks Exploited RCE; Security Updates Released

Ivanti has disclosed two critical code injection vulnerabilities in its Endpoint Manager Mobile (EPMM) product that enable unauthenticated remote code execution and have been exploited in zero-day attacks.

Critical vm2 Node.js Vulnerability Allow Sandbox Escape & Arbitrary Code Execution

Critical vm2 Node.js Library Sandbox Escape Vulnerability

Critical Fortinet Vulnerability in FortiCloud SSO Authentication Bypass

FortiCloud Single Sign-On (SSO)

Microsoft Released Emergency Security Updates; Patches Microsoft Office 0-Day Vulnerability

Microsoft Released Emergency Security Updates

Trend Micro Releases New Critical Patch for Trend Micro Apex Central

Trend Micro releases Critical patches for ‘Build 7190’ , Patches Multiple Vulnerabilities Including RCE & DoS

Vulnerabilities in Cloud Exposure; File Sharing Sites Being Hacked

Cloud exposure led to breach by hackers

SonicWall Releases Patches in Actively Exploited Privilege Escalation Vulnerability

SonicWall has released a security update to fix a privilege escalation vulnerability in the SonicWall SMA1000 Appliance Management Console (AMC) that was tricked in zero-day attacks to escalate privileges.

Apple iOS & iPadOS Patch 0-Days Vulnerabilities, Exploited in Targeted Attacks

Apple iOS & iPadOS Patch Zero-Days Vulnerabilities, Exploited in Targeted Attacks