Infrastructure

Critical Keycloak Password Reset Flaw Could Let Unauthenticated Attackers Take Over Any Account Source: The Hacker News Red Hat and the Keycloak project have released patches to address a critical security flaw in the open-source identity and access management server that could allow an unauthenticated remote attacker to take over any user account by forcing a password reset. The vulnerability, assigned the CVE iden Read original

Critical Keycloak Password Reset Flaw Could Let Unauthenticated Attackers Take Over Any Account Source: The Hacker News Red Hat and the Keycloak project have released patches to address a critical security flaw in the open-source identity and access management server that could allow an unauthenticated remote attacker to take over any user account by forcing a password reset. The vulnerability, assigned the CVE iden Read original

Critical Keycloak Password Reset Flaw Could Let Unauthenticated Attackers Take Over Any Account Source: The Hacker News Red Hat and the Keycloak project have released patches to address a critical security flaw in the open-source identity and access management server that could allow an unauthenticated remote attacker to take over any user account by forcing a password reset. The vulnerability, assigned the CVE iden Read original

Critical Keycloak Password Reset Flaw Could Let Unauthenticated Attackers Take Over Any Account Source: The Hacker News Red Hat and the Keycloak project have released patches to address a critical security flaw in the open-source identity and access management server that could allow an unauthenticated remote attacker to take over any user account by forcing a password reset. The vulnerability, assigned the CVE iden Read original

CISA orders feds to patch actively exploited TrueConf Server flaws Source: BleepingComputer The U.S. Cybersecurity and Infrastructure Security Agency (CISA) ordered U.S. federal agencies to prioritize patching two actively exploited vulnerabilities in the TrueConf Server self-hosted communications platform. […] Read original

CISA orders feds to patch actively exploited TrueConf Server flaws Source: BleepingComputer The U.S. Cybersecurity and Infrastructure Security Agency (CISA) ordered U.S. federal agencies to prioritize patching two actively exploited vulnerabilities in the TrueConf Server self-hosted communications platform. […] Read original

CISA orders feds to patch actively exploited TrueConf Server flaws Source: BleepingComputer The U.S. Cybersecurity and Infrastructure Security Agency (CISA) ordered U.S. federal agencies to prioritize patching two actively exploited vulnerabilities in the TrueConf Server self-hosted communications platform. […] Read original

Critical RCE flaw in Windows IKE Extension now actively exploited Source: BleepingComputer The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned that hackers are exploiting a critical-severity remote code execution (RCE) flaw in the Windows Internet Key Exchange (IKE) Service Extensions component. […] Read original

CISA: Windows Task Host flaw now exploited by ransomware gangs Source: BleepingComputer The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has confirmed that ransomware gangs are also exploiting a high-severity Windows Task Host vulnerability that was flagged as actively exploited in April. […] Read original

Evooo1Bot Linux Botnet Exploits Known Flaws to Turn Edge Devices Into SOCKS5 Proxies Source: The Hacker News Cybersecurity researchers have flagged a previously undocumented Linux botnet family dubbed Evooo1Bot that derives its core functionality from the Mirai botnet source code and is equipped to turn internet-facing devices into SOCKS proxies. “While the malware reuses the DDoS engine from the publicly Read original