Secure Bulletin Navigating the cyber sea with knowledge
Home > Tag > vulnerability
#vulnerability

Urgent: update your .NET installer link, new Microsoft issue

30 December 2024  |  securebulletin.com  |  Vulnerability

Microsoft has issued an urgent warning to .NET developers regarding the imminent shutdown of two critical domains used for installing .NET components: dotnetcli.azureedge.net and dotnetbuilds.azureedge.net. This action is...

>> read more

Curl vulnerability exposes user credentials in redirects

16 December 2024  |  securebulletin.com  |  Vulnerability

A recently discovered vulnerability in cURL, identified as CVE-2024-11053, poses a significant risk by potentially exposing user credentials during HTTP redirects. This flaw affects various applications that utilize...

>> read more

Cryptojacking: protecting Docker and Kubernetes environments from new attacks

15 December 2024  |  securebulletin.com  |  Malware

Cryptojacking—the unauthorized use of systems to mine cryptocurrency—has seen a troubling surge, with attackers increasingly exploiting misconfigured Docker and Kubernetes environments. This alarming trend targets high-performance cloud infrastructures,...

>> read more

QNAP NAS vulnerabilities

9 December 2024  |  dark6  |  Vulnerability

QNAP NAS systems, widely used for data storage, have been flagged for several critical vulnerabilities that pose significant risks to users and organizations. Here’s what you need to...

>> read more

Apache Tomcat vulnerability (CVE-2024-38286)

24 September 2024  |  dark6  |  Vulnerability

A severe vulnerability has emerged in Apache Tomcat, a widely used Java application server. Identified as CVE-2024-38286, this flaw poses a serious risk to organizations that rely on...

>> read more

Windows MiniFilter vulnerability: a threat to EDR security

18 September 2024  |  dark6  |  Vulnerability

Endpoint Detection and Response (EDR) solutions are essential for modern cybersecurity defenses. However, research has revealed a vulnerability in Windows MiniFilter drivers that can be exploited to prevent...

>> read more

PRC-Linked cyber actors leveraging massive botnet for malicious activities

18 September 2024  |  dark6  |  Malware

In a joint cybersecurity advisory, the FBI, Cyber National Mission Force (CNMF), and National Security Agency (NSA) have exposed a significant threat to Internet-connected devices. Chinese hackers have...

>> read more

Critical Windows kernel vulnerability disclosed

18 September 2024  |  dark6  |  Vulnerability

Microsoft has issued an urgent warning regarding a critical Windows kernel vulnerability (CVE-2024-37985) that could result in the disclosure of sensitive information. This vulnerability affects ARM-based systems and...

>> read more