Exploited

Google has released a new security update for its Chrome 136 browser, one day later than expected. Several vulnerabilities have been fixed in Chrome…

Flaws in third-party components Ivanti notes that the vulnerabilities are located in two open-source libraries used in the product. Because the flaws have not…

Initial access occurred through Cisco firewall Symantec found evidence that the attackers gained access to the victim’s network through a Cisco ASA firewall and…

“Looking at the vector again, the privileges required is set to Low, which means a basic account authentication would be required,” he noted.  An attacker…

“The vulnerability is a buffer overflow with a limited character space, and therefore it was initially believed to be a low-risk denial-of-service vulnerability,” incident…

The in-the-wild exploitation, as tagged by CISA, follows watchTower’s public disclosure of the vulnerability, along with a proof of concept (PoC) exploit, in February…