Cisco ASA and FTD Flaw Exploited in the Wild Can Trigger Remote DoS

Cisco ASA and FTD Flaw Exploited in the Wild Can Trigger Remote DoS Source: The Hacker News Cisco has warned that a new vulnerability impacting Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD) Software has been exploited in the wild. The high-severity flaw, tracked as CVE-2026-20349 (CVSS score: 8.6), is a case of insufficient error check Read original

Cisco ASA and FTD Flaw Exploited in the Wild Can Trigger Remote DoS

Cisco ASA and FTD Flaw Exploited in the Wild Can Trigger Remote DoS Source: The Hacker News Cisco has warned that a new vulnerability impacting Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD) Software has been exploited in the wild. The high-severity flaw, tracked as CVE-2026-20349 (CVSS score: 8.6), is a case of insufficient error check Read original

Cisco ASA and FTD Flaw Exploited in the Wild Can Trigger Remote DoS

Cisco ASA and FTD Flaw Exploited in the Wild Can Trigger Remote DoS Source: The Hacker News Cisco has warned that a new vulnerability impacting Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD) Software has been exploited in the wild. The high-severity flaw, tracked as CVE-2026-20349 (CVSS score: 8.6), is a case of insufficient error check Read original

Microsoft Patches 398 Flaws Including a Windows Driver Zero-Day Under Active Attack

Microsoft Patches 398 Flaws Including a Windows Driver Zero-Day Under Active Attack Source: The Hacker News Microsoft released its monthly security updates on Tuesday, and one of the flaws it closed is already being used in attacks. The bug sits in a core Windows kernel driver that handles network socket operations. An attacker with code already running on a machine can use it to escalate to SYSTEM. That Read original

Microsoft Patches 398 Flaws Including a Windows Driver Zero-Day Under Active Attack

Microsoft Patches 398 Flaws Including a Windows Driver Zero-Day Under Active Attack Source: The Hacker News Microsoft released its monthly security updates on Tuesday, and one of the flaws it closed is already being used in attacks. The bug sits in a core Windows kernel driver that handles network socket operations. An attacker with code already running on a machine can use it to escalate to SYSTEM. That Read original

CISA: SonicWall SMA1000 flaws now exploited by ransomware gangs

CISA: SonicWall SMA1000 flaws now exploited by ransomware gangs Source: BleepingComputer CISA has confirmed that ransomware gangs have begun exploiting two recently patched SonicWall SMA1000 vulnerabilities, including a maximum-severity server-side request forgery (SSRF) flaw. […] Read original

TrueConf Server Flaws Exploited to Replace Client Installers with PhantomCore

TrueConf Server Flaws Exploited to Replace Client Installers with PhantomCore Source: The Hacker News The threat actor known as Head Mare has been observed weaponizing security flaws in unpatched TrueConf servers once again in attacks targeting Russian companies spanning instrumentation, electronics, transport, energy, IT, and software development sectors. Russian cybersecurity vendor Kaspersky sai Read original

TrueConf Server Flaws Exploited to Replace Client Installers with PhantomCore

TrueConf Server Flaws Exploited to Replace Client Installers with PhantomCore Source: The Hacker News The threat actor known as Head Mare has been observed weaponizing security flaws in unpatched TrueConf servers once again in attacks targeting Russian companies spanning instrumentation, electronics, transport, energy, IT, and software development sectors. Russian cybersecurity vendor Kaspersky sai Read original

TrueConf Server Flaws Exploited to Replace Client Installers with PhantomCore

TrueConf Server Flaws Exploited to Replace Client Installers with PhantomCore Source: The Hacker News The threat actor known as Head Mare has been observed weaponizing security flaws in unpatched TrueConf servers once again in attacks targeting Russian companies spanning instrumentation, electronics, transport, energy, IT, and software development sectors. Russian cybersecurity vendor Kaspersky sai Read original

TrueConf Server Flaws Exploited to Replace Client Installers with PhantomCore

TrueConf Server Flaws Exploited to Replace Client Installers with PhantomCore Source: The Hacker News The threat actor known as Head Mare has been observed weaponizing security flaws in unpatched TrueConf servers once again in attacks targeting Russian companies spanning instrumentation, electronics, transport, energy, IT, and software development sectors. Russian cybersecurity vendor Kaspersky sai Read original