A critical RCE flaw (CVE-2024-50050) in Meta's Llama LLM framework is vulnerable to remote code execution. 👉thehackernews.com
Over 100 vulnerabilities have been found in LTE and 5G network implementations. 👉thehackernews.com
A five-year-old jQuery XSS flaw (CVE-2020-11023) has been added to CISA's Known Exploited Vulnerabilities list due to active exploitation. 👉thehackernews.com
A ransomware gang is using SSH tunnels for stealthy VMware ESXi access. 👉bleepingcomputer.com
SonicWall has warned about an SMA1000 RCE flaw exploited in zero-day attacks. 👉bleepingcomputer.com
Unsecured tunneling protocols expose 4.2 million hosts, including VPNs and routers. 👉thehackernews.com
A security flaw in Subaru's Starlink service allowed hackers to hijack cars. 👉bleepingcomputer.com
Hackers used Windows RID hijacking to create hidden admin accounts. 👉bleepingcomputer.com
A hacker infected 18,000 "script kiddies" with a fake malware builder. 👉bleepingcomputer.com
Outdated Exchange servers fail to auto-mitigate security bugs. 👉bleepingcomputer.com
QNAP fixed six Rsync vulnerabilities in its NAS backup/recovery app. 👉bleepingcomputer.com
The FBI warned about North Korean IT workers stealing source code to extort employers. 👉bleepingcomputer.com
The DoJ indicted five individuals for an $866K North Korean IT worker scheme. 👉thehackernews.com
A new "sneaky 2FA" phishing kit targets Microsoft 365 accounts. 👉thehackernews.com