Unpatched Calix flaw lets hackers bypass NAT to expose internal devices Source: BleepingComputer An unpatched vulnerability in Calix GS7 XGS (GS5239XG) residential routers used by multiple U.S. broadband providers allows remote, unauthenticated attackers to create port-forwarding rules that can expose local network devices to the public internet. […] Read original
Critical Keycloak Password Reset Flaw Could Let Unauthenticated Attackers Take Over Any Account Source: The Hacker News Red Hat and the Keycloak project have released patches to address a critical security flaw in the open-source identity and access management server that could allow an unauthenticated remote attacker to take over any user account by forcing a password reset. The vulnerability, assigned the CVE iden Read original
Critical Keycloak Password Reset Flaw Could Let Unauthenticated Attackers Take Over Any Account Source: The Hacker News Red Hat and the Keycloak project have released patches to address a critical security flaw in the open-source identity and access management server that could allow an unauthenticated remote attacker to take over any user account by forcing a password reset. The vulnerability, assigned the CVE iden Read original
Critical Keycloak Password Reset Flaw Could Let Unauthenticated Attackers Take Over Any Account Source: The Hacker News Red Hat and the Keycloak project have released patches to address a critical security flaw in the open-source identity and access management server that could allow an unauthenticated remote attacker to take over any user account by forcing a password reset. The vulnerability, assigned the CVE iden Read original
Critical Keycloak Password Reset Flaw Could Let Unauthenticated Attackers Take Over Any Account Source: The Hacker News Red Hat and the Keycloak project have released patches to address a critical security flaw in the open-source identity and access management server that could allow an unauthenticated remote attacker to take over any user account by forcing a password reset. The vulnerability, assigned the CVE iden Read original
CISA orders urgent patching of actively exploited Zimbra flaw Source: BleepingComputer The Cybersecurity and Infrastructure Security Agency (CISA) has ordered U.S. government agencies to patch an actively exploited vulnerability in Zimbra Collaboration Suite (ZCS) within three days. […] Read original
CISA orders feds to patch actively exploited TrueConf Server flaws Source: BleepingComputer The U.S. Cybersecurity and Infrastructure Security Agency (CISA) ordered U.S. federal agencies to prioritize patching two actively exploited vulnerabilities in the TrueConf Server self-hosted communications platform. […] Read original
CISA orders feds to patch actively exploited TrueConf Server flaws Source: BleepingComputer The U.S. Cybersecurity and Infrastructure Security Agency (CISA) ordered U.S. federal agencies to prioritize patching two actively exploited vulnerabilities in the TrueConf Server self-hosted communications platform. […] Read original
CISA orders feds to patch actively exploited TrueConf Server flaws Source: BleepingComputer The U.S. Cybersecurity and Infrastructure Security Agency (CISA) ordered U.S. federal agencies to prioritize patching two actively exploited vulnerabilities in the TrueConf Server self-hosted communications platform. […] Read original
Microsoft patches max severity code execution, privilege escalation flaws Source: BleepingComputer Microsoft has patched a maximum-severity vulnerability in the Entra ID identity and access management (IAM) platform that has been exploited in attacks. […] Read original