Latest cybersecurity reporting from selected sources.

Eleven forgotten Microsoft-signed UEFI shims can bypass Secure Boot on almost any machine

Check Point says a critical vulnerability in its Remote Access VPN and Mobile Access solutions has been exploited by Qilin

The unpatched vulnerabilities, with a CVSS score of 8.6 to 10.0, can lead to remote code execution via authentication bypass

A critical authentication bypass flaw in CrushFTP is under active exploitation following a mishandled disclosure process

A security researcher has observed threat actors exploiting vulnerabilities in a driver used by CheckPoint’s ZoneAlarm antivirus to bypass Windows security measures

CISA adds critical Ivanti bug to its Known Exploited Vulnerabilities catalog

Two authentication bypass vulnerabilities affect Progress Software’s MOVEit Transfer SFTP service in a default configuration and MOVEit Gateway

A series of vulnerabilities could enable an attacker to bypass the Chinese manufacturer’s biometric access systems

The flaws, identified by KTrust, enable attackers to bypass rate limits and brute force protection mechanisms

ESET said the vulnerability was exploited at least twice via a specific user-mode module