Security news aggregator

Latest cybersecurity reporting from selected sources.

Yasna brings together recent headlines from selected sources and makes them easier to sort with tags, filters, and search.

2 headlines in this view

Refine the feed

Search across headline titles and summaries.

Showing 2 most recent headlines Filtered view
Bank Info Security 2 years, 4 months ago

Ivanti Patches Critical Endpoint Security Vulnerability

SQL Injection Flaw Affects All Supported Versions of Ivanti Endpoint ManagerIvanti issued an urgent alert to users of its endpoint security product to patch a critical vulnerability that exposes systems to potential exploitation by unauthorized attackers. The SQL injection vulnerability tracked as CVE-2023-39336 is in all supported versions of Ivanti Endpoint Manager.

More from Bank Info Security 7 Jan 2024, 8:00 p.m. CVE-2023-39336 CVE Critical Flaw Patch SQL Vulnerability

Security researchers are detecting hundreds of IP addresses on a daily basis that scan or attempt to exploit Apache RocketMQ services vulnerable to a remote command execution flaw identified as CVE-2023-33246 and CVE-2023-37582. [...]

More from Bleeping Computer 6 Jan 2024, 6:32 a.m. Actively exploited CVE-2023-33246 CVE-2023-37582 Apache CVE Exploit Flaw Remote Code Execution Research Vulnerability