⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
A new Linux kernel vulnerability called Zapscape allows an attacker with kernel privileges inside an L1 guest VM to escape KVM isolation and execute code on the host. The flaw is a use-after-free in KVM's shadow memory management unit, and the upstream fix has been merged.
Zapscape , a new Linux kernel vulnerability, could allow an attacker with kernel privileges inside an L1 guest virtual machine (VM) to escape KVM isolation and execute code on the host. The risk applies when nested virtualization is exposed to untrusted guests.
North Carolina Ports is recovering from a cyberattack that forced a switch to manual processing after its IT system was hacked by an outside actor or group. The attack is contained, and the Coast Guard along with state officials are investigating the incident.
Cisco released updates to address multiple critical security vulnerabilities in Catalyst SD-WAN and IOS XE Software, including three with a CVSS score of 9.9. The vulnerabilities were discovered during internal security testing and are not known to be actively exploited, but customers are urged to apply the necessary updates for protection.
Cisco has released patches to address 12 critical vulnerabilities affecting its Catalyst SD-WAN and IOS XE Software, including three flaws with a CVSS score of 9.9. These vulnerabilities, discovered during internal security testing using AI models, impact Cisco Catalyst SD-WAN Software across all configurations and IOS XE Software in autonomous or controller modes.
Connor Riley Moucka, a 26-year-old Canadian, pleaded guilty to computer fraud and conspiracy for hacking and extorting over 165 organizations using Snowflake, and stealing call and text history records of over 100 million AT&T customers. The hackers targeted accounts without multi-factor authentication, leading Snowflake to enforce stronger security measures.