critical flaw Archives - Cyber Security Minute

Progress warns customers of a new critical flaw in MOVEit Transfer software

Issued by: Security Affairs

Progress is informing customers of a new critical SQL injection vulnerability, tracked as CVE-2023-36934, in its MOVEit Transfer software. MOVEit Transfer software recently made the headlines due to the massive Clop ransomware hacking campaign exploiting a vulnerability in the product. The flaw CVE-2023-36934 impacts software versions released before 2020.1.11 (12.1.11), 2021.0.9 (13.0.9), 2021.1.7 (13.1.7), 2022.0.7…

Vulnerabilities

Critical flaw in VMware Aria Operations for Networks sees mass exploitation

Issued by: CSO Online

Researchers warn that a vulnerability patched this month in VMware Aria Operations for Networks, formerly known as vRealize Network Insight, is now seeing exploitation en masse. The flaw allows for remote code execution through command injection and is rated with critical severity. “New data from Akamai shows the scale of active scanning for sites vulnerable…

Vulnerabilities

Google Researcher Finds Critical Flaw in Keeper Password Manager

Issued by: Security Week

Google Project Zero researcher Tavis Ormandy recently discovered that the Keeper password manager had been affected by a critical flaw similar to one he identified just over one year ago in the same application. Ormandy found the security hole after noticing that Keeper is now installed by default in Windows 10. He remembered a vulnerability…