Kiteworks Patches Max-Severity Email Protection Gateway Code Injection Vulnerability（Kiteworks、Email Protection Gatewayの最大深刻度コードインジェクション脆弱性を修正） #BleepingComputer (Oct 1) BleepingComputer
www.bleepingcomputer.com/news/securit...
@kitafox.bsky.social
@kitafox.bsky.socialKiteworks Patches Max-Severity Email Protection Gateway Code Injection Vulnerability（Kiteworks、Email Protection Gatewayの最大深刻度コードインジェクション脆弱性を修正） #BleepingComputer (Oct 1) BleepingComputer
www.bleepingcomputer.com/news/securit...
@kitafox.bsky.socialFortinet Warns of Critical FortiMail Flaw Exploited in Zero-Day Attacks（Fortinet、ゼロデイ攻撃で悪用中のFortiMail重大脆弱性を警告） #BleepingComputer (Oct 1)
www.bleepingcomputer.com/news/securit...
@kitafox.bsky.socialTeamViewer urges users to patch severe flaws “as soon as possible”（TeamViewer、深刻な脆弱性5件を修正し早急なアップデートを要請） #BleepingComputer (Sep 30)
www.bleepingcomputer.com/news/securit...
@kitafox.bsky.socialShinyHunters hacked Clop leak site using Grav CMS path traversal flaw（ShinyHunters、Grav CMSのパストラバーサル脆弱性を悪用しClopのリークサイトを侵害） #BleepingComputer (Sep 25)
@kitafox.bsky.socialKiteworks urges 6-hour server shutdown over potential zero-day attacks（Kiteworks、ゼロデイ攻撃の恐れから顧客にサーバ停止を緊急要請） #BleepingComputer (Sep 25)
@kitafox.bsky.socialShinyHunters uses WAF bypass trick in Oracle PeopleSoft attacks（ShinyHunters、WAF回避手法を使いOracle PeopleSoftへの攻撃を再開） #BleepingComputer (Sep 26)
@kitafox.bsky.socialOpenAI is preparing ‘o,’ an always-on ChatGPT assistant that could handle email（OpenAI、メール対応も視野に入れた常時稼働型ChatGPTアシスタント「o」を準備か） #BleepingComputer (Sep 26)
@kitafox.bsky.socialCISA warns of Sharepoint, WSO2, Adobe Commerce flaws exploited in attacks（CISA、SharePoint・WSO2・Adobe Commerceの脆弱性が実攻撃で悪用と警告） #BleepingComputer （Sep 25）
@kitafox.bsky.socialCitrix confirms two NetScaler RCE zero-days exploited in attacks（Citrix NetScalerのRCEゼロデイ2件、実攻撃での悪用を確認） #BleepingComputer （Sep 27）
@cyzoio.bsky.socialCitrix confirms two NetScaler RCE zero-days exploited in attacks
Source: BleepingComputer
Read: https://www.bleepingcomputer.com/news/security/citrix-admins-warned-to-shut-down-netscalers-over-2-exploited-zero-days/
#Cyzo #CyberSecurity #BleepingComputer
@cyzoio.bsky.socialShinyHunters hacked Clop leak site using Grav CMS path traversal flaw
Source: BleepingComputer
Read: https://www.bleepingcomputer.com/news/security/shinyhunters-hacked-clop-leak-site-using-grav-cms-path-traversal-flaw/
#Cyzo #CyberSecurity #BleepingComputer
@donnamenner.bsky.social@cyzoio.bsky.socialGitHub Actions re-enabled with Mini Shai-Hulud payload still active
Source: BleepingComputer
Read: https://www.bleepingcomputer.com/news/security/github-actions-re-enabled-with-mini-shai-hulud-payload-still-active/
#Cyzo #CyberSecurity #BleepingComputer
@cyzoio.bsky.socialMicrosoft pauses KB5002907 update after Office license deactivations
Source: BleepingComputer
Read: https://www.bleepingcomputer.com/news/microsoft/microsoft-365-kb5002907-update-paused-after-office-license-deactivations/
#Cyzo #CyberSecurity #BleepingComputer
@cyzoio.bsky.socialShinyHunters uses WAF bypass trick in Oracle PeopleSoft attacks
Source: BleepingComputer
Read: https://www.bleepingcomputer.com/news/security/shinyhunters-uses-waf-bypass-trick-in-oracle-peoplesoft-attacks/
#Cyzo #CyberSecurity #BleepingComputer
@cyzoio.bsky.socialOpenAI's AI agents accidentally uploaded user-provided images to thir…
Source: BleepingComputer
Read: https://www.bleepingcomputer.com/news/artificial-intelligence/openais-ai-agents-accidentally-uploaded-user-provided-images-to-third-party-sites/
#Cyzo #CyberSecurity #BleepingComputer
@cyzoio.bsky.socialKiteworks urges 6-hour server shutdown over potential zero-day attacks
Source: BleepingComputer
Read: https://www.bleepingcomputer.com/news/security/kiteworks-urges-6-hour-server-shutdown-over-potential-zero-day-attacks/
#Cyzo #CyberSecurity #BleepingComputer
@kitafox.bsky.socialCheck Point warns of hackers exploiting Security Gateway VPN RCE flaw（Check Point Security GatewayのVPN脆弱性、認証前RCE攻撃で実悪用を確認） #BleepingComputer (Sep 23)
@kitafox.bsky.socialMicrosoft: September Windows updates break Always On VPN connections（Microsoft、9月のWindows更新でAlways On VPN接続に障害） #BleepingComputer (Sep 23)
@kitafox.bsky.socialHackers start exploiting critical WordPress flaw for code execution（攻撃者がWordPressの重大な脆弱性を悪用、コード実行攻撃を開始） #BleepingComputer (Sep 23)