Security news aggregator

Latest cybersecurity reporting from selected sources.

Yasna brings together recent headlines from selected sources and makes them easier to sort with tags, filters, and search.

9 headlines in this view

Refine the feed

Search across headline titles and summaries.

Volume over time

Weekly headline count for the current query.

Showing 9 most recent headlines Filtered view
Bank Info Security 3 months, 1 week ago

Attackers Target Zero-Day Flaw in Fortinet Security Software

Vendor Issues Hotfix for Critical Flaw in FortiClient Endpoint Management ServerFortinet's endpoint management security server software is under fire from attackers, who are actively targeting two critical flaws, including a fresh zero-day that facilitates unauthenticated remote code or command execution. The vendor has issued a hotfix and promised a full patch.

More from Bank Info Security 7 Apr 2026, 5:00 a.m. 0-Day Critical Vulnerability Endpoint Security Flaw Fortinet Patch Unauthenticated Vendor

PLUS: Crypto mixer founders plead guilty; Another French telco hacked; Meta fights WhatsApp scams; And more! Infosec In Brief A critical vulnerability in the on-prem version of Trend Micro's Apex One endpoint security platform is under active exploitation, the company admitted last week, and there's no patch available.…

More from The Register 11 Aug 2025, 10:39 a.m. Admission Antivirus Critical Vulnerability Cryptocurrency Endpoint Security Facebook France Patch Scam Telco Trend Micro Vulnerability

PoC exploit code shows why this is a patch priority Security engineers have released a proof-of-concept exploit for four critical Ivanti Endpoint Manager bugs, giving those who haven't already installed patches released in January extra incentive to revisit their to-do lists.…

More from The Register 21 Feb 2025, 7:51 p.m. Critical Vulnerability Endpoint Security Exploit Flaw Patch PoC
Bank Info Security 2 years, 1 month ago

Security Researchers Expose Critical Flaw in Ivanti Software

Ivanti Faces Another SQL Injection Flaw in Popular Endpoint Manager ProductSecurity researchers have discovered another major vulnerability in Ivanti’s widely-used endpoint management system that can allow hackers to gain remote access for multiple devices at the same time, just months after the company patched a separate SQL injection flaw in the same product.

More from Bank Info Security 15 Jun 2024, 6:30 a.m. Critical Vulnerability Endpoint Security Flaw Patch Research SQL Vulnerability

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a now-patched critical flaw impacting Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core to its Known Exploited Vulnerabilities (KEV) catalog, stating it's being actively exploited in the wild

More from The Hacker News 19 Jan 2024, 5:55 p.m. America Authentication Bypass CISA Critical Vulnerability CVE Endpoint Security Flaw Mobile Patch Vulnerability Warning
Bank Info Security 2 years, 6 months ago

Ivanti Patches Critical Endpoint Security Vulnerability

SQL Injection Flaw Affects All Supported Versions of Ivanti Endpoint ManagerIvanti issued an urgent alert to users of its endpoint security product to patch a critical vulnerability that exposes systems to potential exploitation by unauthorized attackers. The SQL injection vulnerability tracked as CVE-2023-39336 is in all supported versions of Ivanti Endpoint Manager.

More from Bank Info Security 7 Jan 2024, 8:00 p.m. CVE-2023-39336 Critical Vulnerability CVE Endpoint Security Flaw Patch SQL Vulnerability