IT-Sicherheitsupdates | Stinner IT Solutions

ServiceNow Improper Input Validation Vulnerability (CVE-2024-4879)

von | 29. Juli 2024 | Unkategorisiert

What is the vulnerability?A critical input validation vulnerability (CVE-2024–4879) is identified in ServiceNow’s Now platform hosted in Vancouver and Washington DC, exploiting this vulnerability could lead to potential data breaches and unauthorized system access....

Threat Actors leveraging the recent CrowdStrike update outage

von | 23. Juli 2024 | Unkategorisiert

DescriptionFortiGuard Labs is aware of the campaigns used by threat actors to spread malware, using phishing and scams to take advantage of the recent widespread global IT outage affecting Microsoft Windows hosts. This outage is due to an issue with a recent...

SolarWinds Serv-U Information Disclosure Vulnerability (CVE-2024-28995)

von | 17. Juli 2024 | Unkategorisiert

What is the Vulnerability?A Directory Traversal Vulnerability in SolarWinds Serv-U software is being actively exploited in the wild. Tracked as CVE-2024-28995, the vulnerability is due to improper validation of the user-supplied inputs. An attacker could exploit this...

Windows MSHTML Platform Spoofing Vulnerability (CVE-2024-38112)

von | 16. Juli 2024 | Unkategorisiert

What is the Vulnerability?CVE-2024-38112 is a spoofing vulnerability in Windows MSHTML Platform. The attacker can abuse internet shortcuts and Microsoft protocol handlers to execute malicious code. This vulnerability is known to be used by attackers to deliver...

Progress Telerik Report Server Authentication Bypass Vulnerability

von | 8. Juli 2024 | Unkategorisiert

What is the Vulnerability?Progress Telerik Report Server contains an authorization bypass by spoofing vulnerability, allowing an attacker to bypass authentication and create rogue administrator users. The flaw, tracked as CVE-2024-4358, has been added to CISA’s known...

Brain Cipher Ransomware Attack

von | 28. Juni 2024 | Unkategorisiert

What is the attack?A significant ransomware attack has struck Pusat Data Nasional (PDN), one of Indonesia’s government-owned national data centers. This incident involved threat actors encrypting government data, which disrupted digital services for immigration,...

Polyfill.io Supply Chain Attack

von | 27. Juni 2024 | Unkategorisiert

What is the attack?Over 100,000+ sites have been impacted by a supply chain attack involving the Polyfill.io service. Polyfill is a popular tool used for enhancing browser capabilities by hundreds of thousands of sites to ensure that all website visitors can use the...

CPrime Supply Chain Attack

von | 21. Juni 2024 | Unkategorisiert

What is the attack?FortiGuard Labs’ Recon team is aware of communications on a cybercrime forum known as ‘BreachForums’ with a Threat Actor (TA) known by the alias ‘IntelBroker.’ This threat actor has posted about selling access to...

Oracle WebLogic Server Vulnerabilities (CVE-2023-21839, CVE-2017-3506)

von | 5. Juni 2024 | Unkategorisiert

What is the attack?A threat actor known as “8220 Gang” is seen exploiting two vulnerabilities in the Oracle WebLogic server: CVE-2017-3506, which allows remote OS command execution, and CVE-2023-21839 is an insecure deserialization vulnerability. CISA recently added...

Check Point Quantum Security Gateways Information Disclosure Vulnerability (CVE-2024-24919)

von | 30. Mai 2024 | Unkategorisiert

What is the attack?A zero-day vulnerability affecting Check Point Security Gateways is being exploited by attackers to gain remote access. The vulnerability can allow an attacker to read sensitive information on Check Point Security Gateways enabled with remote Access...