Varnostno podjetje Volexity je razkrilo, da je napadalec verižil tri prej neznane ranljivosti v VPN napravi Ivanti Connect Secure in tako brez prijave pridobil root dostop. Ivanti je doslej odpravil dve od treh ranljivosti, popravek za tretjo pa še ni na voljo.
14.10.2026, 07:50Varnostno podjetje Volexity je razkrilo, da je napadalec verižil tri prej neznane ranljivosti v VPN napravi Ivanti Connect Secure in tako brez prijave pridobil root dostop. Ivanti je doslej odpravil dve od treh ranljivosti, popravek za tretjo pa še ni na voljo.
Razvijalec Pro-me3us je objavil javno dostopen paket orodij, ki na tretji generaciji naprave Amazon Fire TV Cube omogoča trajen root dostop in odklep bootloaderja. Postopek izkorišča več ranljivosti, med njimi tudi eno, ki je uvrščena v katalog CISA KEV.
Raziskovalci so razkrili štiri ranljivosti v LG webOS, ki jih je mogoče verižiti za pridobitev root dostopa do pametnih televizorjev brez PIN kode ali kakršne koli interakcije lastnika. LG je popravek že izdal.
Palo Alto Networks Releases Critical Security Updates: What You Need to Know Palo Alto Networks has recently issued important security updates addressing five significant flaws in...
OpenSSH Vulnerability: Remote Code Execution Exploit Detailed Introduction The OpenSSH secure networking suite, one of the bedrocks of modern secure communication over networks, has been hit...
ViperSoftX: Malware Masquerading as eBooks on Torrents In a sophisticated reimagining of old tricks, the notorious ViperSoftX malware is now being distributed in the guise of...
HuiOne Guarantee: The Cybercriminal Marketplace Fueling Southeast Asian Scams In a recent revelation by cryptocurrency analysts, a notorious online marketplace named HuiOne Guarantee has come under...
Google Introduces Passkeys for High-Risk Users in Advanced Protection Program Google, in its ongoing endeavor to enhance user security, made an intriguing announcement on Wednesday. The...
The Pressing Need for Advances in Identity Security It’s the age of identity security. The rise in ransomware attacks has highlighted a glaring issue: identity protection...
Microsoft Takes Security Seriously: Patch Tuesday’s 143 Vulnerability Fix Bonanza! Microsoft has applied the digital band-aid to an astonishing 143 security flaws in their latest monthly...
The Problem The “2024 Attack Intelligence Report” from the diligent team at Rapid7 has just surfaced and, let me tell you, it’s a must-read for anyone...
Beware: EstateRansomware Exploits Veeam Backup & Replication Flaw A now-patched security flaw in Veeam Backup & Replication software is being actively leveraged by an emergent ransomware...
Supply Chain Sabotage: Trojanized jQuery on npm, GitHub, and jsDelivr In a chilling wake-up call for developers and security experts alike, unknown threat actors have launched...
Global Cybersecurity Agencies Warn of China-linked APT40 Threat In a collaborative move, cybersecurity agencies from Australia, Canada, Germany, Japan, New Zealand, South Korea, the United Kingdom,...
New Surveillanceware Targets Military Personnel in the Middle East: The Emergence of GuardZoo In a concerning development, military personnel in Middle Eastern countries have found themselves...
