CISA says Oracle and Mitel have critical security flaws being exploited
CISA addS three new bugs to KEV - two in Mitel’s MiCollab, and one in Oracle WebLogic Server The bugs allowed crooks to read ...
The Hacker News15h
CISA Flags Critical Flaws in Mitel and Oracle Systems Amid Active Exploitation
CISA lists critical flaws in Mitel MiCollab (CVE-2024-41713, CVE-2024-55550) and Oracle WebLogic (CVE-2020-2883).
Hosted on MSN1d
Mitel 0-day, 5-year-old Oracle RCE bug under active exploit
CVEs added to CISA's catalog Cybercriminals are actively exploiting two vulnerabilities in Mitel MiCollab, including a ...
SecurityWeek1d
CISA Warns of Mitel MiCollab Vulnerabilities Exploited in Attacks
CISA says two recently disclosed path traversal vulnerabilities in the Mitel MiCollab collaboration platform have been ...
CSOonline1d
Critical Mitel, Oracle flaws find active exploitation, CISA urges patching
CISA added the flaws to its known vulnerability catalog, recommending swift patching pursuant to Binding Operational ...
CISA warns of critical Oracle, Mitel flaws exploited in attacks
CISA has warned U.S. federal agencies to secure their systems against critical vulnerabilities in Oracle WebLogic Server and ...
US security agency warns of attacks on MiCollab and WebLogic Server
If attacks on Oracle WebLogic Server are successful, attackers can compromise systems. What this could look like in detail is ...
SecurityWeek2d
CISA: No Federal Agency Beyond Treasury Impacted by BeyondTrust Incident
CISA says no federal agencies other than Treasury were impacted by the recent compromise of a BeyondTrust cloud-based service ...
Fox News1mon
FBI, CISA say Chinese hackers breached multiple US telecom providers in targeted attack
The FBI and the Cybersecurity and Infrastructure Security Agency (CISA) said that People's Republic of China (PRC) hackers breached commercial telecommunication service providers in the U.S. The ...
Nextgov23d
CISA orders federal agencies to secure their cloud environments
Cloud CISA Cyber Defense The Cybersecurity and Infrastructure Security Agency invoked a binding directive Tuesday that requires federal agencies to retune their cloud security posture to a set of ...
Forbes23d
New Microsoft Windows Security Deadline—Why You Must Update Before Jan. 6
This is important as, it would appear, attackers have managed to exploit it in the wild, hence it’s addition to the CISA KEV catalog. Although details of how this vulnerability is actually being ...
Forbes1mon
271 New Critical Security Warnings—From Android To Zyxel
Here’s what you need to know. Providing a helpful summary of the security vulnerabilities that have dropped covering a single weekly period, the CISA vulnerability bulletin is both a quick ...