Cortex — Veille numérique

Cybersécurité

SonicWall Patches Critical Vulnerabilities in Discontinued GMS Platform

Multiple vulnerabilities have been discovered in SonicWall Global Management System (GMS), the most severe of which could allow for remote code execution. The SonicWall Global Management System (GMS) is a centralized management interface used to deploy and centrally manage SonicWall firewall, wireless, email security, secure remote access and Dell X-Series solutions from a single console. Successful exploitation of the most severe of these vulnerabilities could allow for remote code execution in the context of the affected service account. Depending on the privileges associated with the service account, an attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Services whose accounts are configured to have less rights on the system could be less impacted than those who operate with administrative user rights.

cisecurity.org13 août

Cybersécurité

White House Mobilizes Security Firms for Operations Against Foreign Cybercrime Gangs

New StormEncryptor ransomware used by former Medusa affiliate

Attackers Exploit VMware vCenter Vulnerability to Gain Persistent Remote Access

Cisco Patches Firewall Zero-Day Exploited for DoS Attacks

SonicWall Patches Critical Vulnerabilities in Discontinued GMS Platform

‘Zoomsday’ hack uncovered using fewer than 20 AI prompts

Hackers leverage new Microsoft SharePoint exploit in attacks

Gunra Ransomware Exploits Fortinet and Schneider Electric Flaws to Breach Networks

Fresh Windows Zero-Day Exploited in North Korean Cyberattacks

Adobe Urges Immediate Patching of Critical ColdFusion, Campaign Classic Flaws

FBI says cybercriminals are hacking into victims’ online accounts to steal their intimate pictures

ShieldBreak Zero-Day PoC Claims Microsoft Defender Patch Bypass With SYSTEM Access

How a Poisoned Security Scanner Became the Key to Backdooring LiteLLM

Cisco warns of ASA and FTD VPN flaw exploited to crash devices

Kimwolf v7: An Evolution of the Kimwolf Botnet

New Jersey, Alabama Join States Targeted in Water Cyberattacks

DDoS attacks over 1 Tbps surged fivefold in the second quarter

DeadLock ransomware: Breaking down a Rust-based encryptor with decentralized recovery infrastructure

Senate Democrats introduce bill to distribute $300 million annually to shore up water system cybe...

Cisco Warns of High-Severity ClamAV Vulnerabilities With Public PoC