CyberPulse Cybersecurity News, with Source Links
FA
CERT-Bund

[NEU] [mittel] MongoDB (EF Core Provider, Atlas SQL, C Treiber, Rust Treiber, Database Tools und Node.js Treiber): Mehrere Schwachstellen

Ein Angreifer kann mehrere Schwachstellen in MongoDB (EF Core Provider, Atlas SQL, C Treiber, Rust Treiber, Database Tools und Node.js Treiber) ausnutzen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren und um Sicherheitsvorkehrungen zu umgehen.

Botnet & DDoS Programming & Languages Databases
Read the full article at CERT-Bund Removal request

This page shows only the headline and the short summary. The full text is published by the original source.

Related news

Full archive →
The Hacker News

APT29-Linked Hackers Hijack Web Analytics Script to Deliver iOS and Android Exploits

The Russia-linked threat actor known as APT29 is said to be behind a large-scale watering hole campaign targeting iOS and Android users through compromised websites, fake domains, and a supply chain attack involving a Ukrainian web analytics service called Plerdy SEO Tracker. "The injected JavaScript code collects browser and device attributes," Sekoia researchers Amaury-Jacques Garçon and

Supply Chain Security Threat Intelligence Programming & Languages
Source
Rapid7 Blog

The Race Against the 3-Day Clock: How Rapid7 Helps Meet BOD 26-04 Compliance

Introduction to BOD 26-04On June 10, 2026, CISA issued Binding Operational Directive 26-04, "Prioritizing Security Updates Based on Risk." Strip away the regulatory language and it reads like a single operational fact: for a vulnerability that is actively exploited, publicly reachable, and grants an attacker full control, you now have three calendar days to remediate it — and you must run a forensic investigation in…

Vulnerabilities & Zero-Day Data Breach Botnet & DDoS
Source