Infrastructure

CISA Adds Six Exploited Flaws to KEV, Including NetScaler, Linux, and SQL Server Bugs Source: The Hacker News The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added six flaws to its Known Exploited Vulnerabilities (KEV) catalog, including a high-severity security vulnerability impacting Citrix NetScaler ADC and NetScaler Gateway, citing evidence of active exploitation. The vuln Read original

CISA Adds Six Exploited Flaws to KEV, Including NetScaler, Linux, and SQL Server Bugs Source: The Hacker News The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added six flaws to its Known Exploited Vulnerabilities (KEV) catalog, including a high-severity security vulnerability impacting Citrix NetScaler ADC and NetScaler Gateway, citing evidence of active exploitation. The vuln Read original

CISA Adds Six Exploited Flaws to KEV, Including NetScaler, Linux, and SQL Server Bugs Source: The Hacker News The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added six flaws to its Known Exploited Vulnerabilities (KEV) catalog, including a high-severity security vulnerability impacting Citrix NetScaler ADC and NetScaler Gateway, citing evidence of active exploitation. The vuln Read original

Actively Exploited Oracle WebLogic Flaw Lets Unauthenticated Attackers Access Critical Data Source: The Hacker News The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a maximum-severity security flaw impacting Oracle HTTP Server and Oracle WebLogic Server to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The vulnerability, tracked as CVE-2 Read original

Actively Exploited Oracle WebLogic Flaw Lets Unauthenticated Attackers Access Critical Data Source: The Hacker News The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a maximum-severity security flaw impacting Oracle HTTP Server and Oracle WebLogic Server to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The vulnerability, tracked as CVE-2 Read original

Actively Exploited Oracle WebLogic Flaw Lets Unauthenticated Attackers Access Critical Data Source: The Hacker News The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a maximum-severity security flaw impacting Oracle HTTP Server and Oracle WebLogic Server to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The vulnerability, tracked as CVE-2 Read original

Actively Exploited Oracle WebLogic Flaw Lets Unauthenticated Attackers Access Critical Data Source: The Hacker News The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a maximum-severity security flaw impacting Oracle HTTP Server and Oracle WebLogic Server to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The vulnerability, tracked as CVE-2 Read original

Actively Exploited Oracle WebLogic Flaw Lets Unauthenticated Attackers Access Critical Data Source: The Hacker News The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a maximum-severity security flaw impacting Oracle HTTP Server and Oracle WebLogic Server to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The vulnerability, tracked as CVE-2 Read original

Actively Exploited Oracle WebLogic Flaw Lets Unauthenticated Attackers Access Critical Data Source: The Hacker News The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a maximum-severity security flaw impacting Oracle HTTP Server and Oracle WebLogic Server to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The vulnerability, tracked as CVE-2 Read original

WordlistLoader Delivers Amatera via ClickFix, SynkLoader Phishes Windows Passwords Source: The Hacker News Cybersecurity researchers have flagged two new malware families called WordlistLoader and SynkLoader that’s used to deliver next-stage payloads and likely sell access to ransomware groups. According to findings from Gen Digital, WordlistLoader is being used to deliver Amatera Stealer (aka ACR Stea Read original