Critical Security Debt in Applications
The report highlights a concerning trend in software security, revealing that 46% of organizations grapple with persistent, high-severity flaws.
The report highlights a concerning trend in software security, revealing that 46% of organizations grapple with persistent, high-severity flaws.
ConnectWise has recently resolved two vulnerabilities in ScreenConnect, addressing potential risks of remote code execution and compromising confidential data.
Hackers are exploiting a critical flaw, CVE-2024-21410, in Microsoft Exchange servers, potentially putting up to 97,000 systems at risk.
Hackers have targeted the Bricks Builder Theme, exploiting a severe remote code execution (RCE) flaw that impacts over 25,000 active installations.
SolarWinds has taken measures to address five critical remote code execution (RCE) vulnerabilities discovered in its Access Rights Manager (ARM) solution.
Protect AI, an AI cybersecurity startup, has disclosed eight vulnerabilities in the open-source supply chain utilized for developing in-house AI and ML models.
Despite the urgency communicated by security experts, a significant number of Ivanti endpoints continue to operate without the necessary patches or mitigations.
Zoom's desktop and VDI clients, along with the Meeting SDK for Windows, are at risk due to a critical flaw discovered by Zoom's offensive security team.
Researchers have uncovered a vulnerability in Ubuntu's 'command-not-found' utility, which enables threat actors to suggest rogue packages via snap repositories.
Researchers have unveiled a critical DNS-related vulnerability named KeyTrap, tracked as CVE-2023-50387, which poses a significant threat to internet stability.
© 2024 | CyberMaterial | All rights reserved