CyberPulse Cybersecurity News, with Source Links
FA
Tenable Blog

Able2Shell: Frequently asked questions for reported N-able N-central zero-day vulnerabilities

N-able released a hotfix for N-central that fixes seven CVEs after a researcher published proof-of-concept code for 33 alleged zero-day vulnerabilities. The researcher says one attack chain needs no credentials.Key TakeawaysAble2Shell is a set of 33 alleged vulnerabilities in N-able N-central, published with proof-of-concept code. The researcher says one chain lets an unauthenticated attacker run commands on the serv…

Vulnerabilities & Zero-Day Threat Intelligence Programming & Languages App & Web Security Identity & Access Security
Read the full article at Tenable Blog Removal request

This page shows only the headline and the short summary. The full text is published by the original source.

Related news

Full archive →
Ubuntu Security Notices

USN-9040-1: Linux kernel (Low Latency NVIDIA) vulnerabilities

It was discovered that some AMD processors did not properly perform Reverse Map Table (RMP) checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory. (CVE-2023-20585) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to c…

Vulnerabilities & Zero-Day IoT & OT Security Mobile Development
Source
CSO Online

What will it take to make VulnOps a reality?

Just over a year ago, before advanced AI models began discovering software vulnerabilities at a nearly unmanageable scale in the so-called vulnpocalypse, three industry experts pioneered the concept of “VulnOps.” VulnOps, as envisioned by Heather Adkins, Gadi Evron, and Bruce Schneier, is a significant phase in the evolution of AI-assisted cyber defense in which vulnerability research and remediation would become sca…

Vulnerabilities & Zero-Day Cloud Security AI Security
Source
The Hacker News

Microsoft Patches 1,259 Flaws, Including Exploited Outlook Bug That May Expose NTLMv2 Hashes

Microsoft on Tuesday released patches for a total of 1,259 vulnerabilities spanning its software portfolio, the second consecutive month where the patch volume has exceeded 1,000 flaws. These cover 726 flaws in Windows, 174 in Office, 61 in Developer Tools, 59 in SQL Server, 53 in Developer Tools, and 27 in SharePoint Server. The patches also include 165 non-Microsoft-issued CVE identifiers.

Vulnerabilities & Zero-Day Databases Operating Systems
Source