Format String Vulnerability in F5 BIG-IP
F5 has published a security advisory warning of a high-severity flaw in iControl SOAP. The format string vulnerability could be exploited to crash the iControl SOAP CGI process or execute…
F5 has published a security advisory warning of a high-severity flaw in iControl SOAP. The format string vulnerability could be exploited to crash the iControl SOAP CGI process or execute…
Cisco has released updates to address a command injection vulnerability in its IOx application hosting environment. The high-severity flaw exists “due to incomplete sanitization of parameters that are passed in…
Maryland’s Atlantic General Hospital is experiencing disruptions to some services following a ransomware attack. Healthcare professionals are operating on EHR downtime procedures. Most patients can still be seen; the attack…
Financial software firm ION Group was the victim of a ransomware attack on January 31. The attack affected ION’s Cleared Derivatives division. In a press release, ION wrote, “The incident…
An exploit known as SH1MMER (Shady Hacking 1nstrument Makes Machine Enrollment Retreat) has the capacity to unenroll enterprise- and school-managed ChromeBooks from administrative policies as set in the Google Admin…
A vulnerability exists in Trend Micro Maximum Security 2022 (17.7) wherein a low-privileged user can write a known malicious executable to a specific location and in the process of removal…
A privilege escalation vulnerability was identified in Nessus versions 8.10.1 through 8.15.8 and 10.0.0 through 10.4.1. An authenticated attacker could potentially execute a specially crafted file to obtain root or…
A vulnerability in Cisco CX Cloud Agent of could allow an authenticated, local attacker to elevate their privileges. This vulnerability is due to insecure file permissions. An attacker could exploit…
Microsoft says that network configuration issues were responsible for an outage on Wednesday, January 25, that affected multiple Microsoft 365 services, including Microsoft Teams, Exchange Online, Outlook, SharePoint Online, OneDrive…
The US National Institute of Standards and technology (NIXTY) has released the first version of its risk management framework for artificial intelligence (AI). The guidance will be voluntary. Artificial Intelligence…