CISA warnt vor sofortiger Behebung von Ivanti-Sicherheitslücke
Teaser aus der Quelle
Die U.S. Cybersecurity and Infrastructure Security Agency (CISA) fordert Sicherheitsteams auf, eine Sicherheitslücke in Ivanti Connect Secure (ICS) umgehend zu beheben, die seit mindestens dem 1. Oktober in Zero-Day-Angriffen ausgenutzt wird.
Dies ist ein Anriss aus dem RSS-Feed. Den vollständigen Artikel lesen Sie beim Original.
Artikel bei BleepingComputer lesenMehr zu immediately
Weitere Advisories
- NiedrigCVE-2026-98394af_unix: Return immediately when manage_oob() returns NULL for 0-length buffer.
- Ohne Bewertungosv:CVE-2026-98394af_unix: Return immediately when manage_oob() returns NULL for 0-length buffer.
- Ohne Bewertungosv:CLEANSTART-2026-UI43314When a HTTP/2 stream was reset (RST frame) by a client, there was a time window were the request's memory resources were not reclaimed immediately
- KritischCVE-2026-34714Vim before 9.2.0272 allows code execution that happens immediately upon opening a crafted file in the default configuration, because %{expr} injection occurs with tabpanel lacking P_MLE.
- MittelCVE-2025-38354drm/msm/gpu: Fix crash when throttling GPU immediately during boot
- Ohne Bewertungosv:CVE-2025-38354drm/msm/gpu: Fix crash when throttling GPU immediately during boot
- HochCVE-2024-58055usb: gadget: f_tcm: Don't free command immediately
- HochCVE-2024-53427decNumberCopy in decNumber.c in jq through 1.7.1 does not properly consider that NaN is interpreted as numeric, which has a resultant stack-based buffer overflow and out-of-bounds write, as demonstrated by use of --slurp with subtraction, such as a filter of .-. when the input has a certain form of digit string with NaN (e.g., "1 NaN123" immediately followed by many more digits).
Weitere News-Einträge
- CISA Urges Immediate Ivanti Connect Secure Updates as Honeypots Log 105 Exploit AttemptsNewsThe Hacker News
- Attacker Chains Three Ivanti Connect Secure Zero-Days for Root Access, Only Two Patched So FarNewsThe Hacker News
- Ivanti warns of Connect Secure zero-day exploited in attacksNewsBleepingComputer
- GitLab warns of max severity code execution vulnerabilityNewsBleepingComputer
- Citrix warns admins to patch new NetScaler RCE flaw immediatelyNewsBleepingComputer
- GitLab warns of critical RCE vulnerability in AI Gateway serviceNewsBleepingComputer
- TeamViewer urges users to patch severe flaws “as soon as possible”NewsBleepingComputer
- Dutch Police Arrest ‘Reformed’ Hacker in Shiny Hunters InvestigationNewsKrebs on Security
ID