Data & infrastructure
-
Traefik fixes eight vulnerabilities across proxy software
Traefik has released fixes for eight security vulnerabilities capable of affecting data confidentiality, integrity, security controls and service availability.
-
Cisco fixes six NX-OS vulnerability classes
Cisco’s October NX-OS hardening release fixes six CVEs across its switching software, including access control and memory corruption classes carrying maximum CVSS scores of 9.8.
-
SonicWall fixes new SMA 1000 remote access vulnerabilities
SonicWall has issued fixes for new SMA 1000 vulnerabilities that can enable remote code execution, server-side request forgery and cross-site scripting.
-
HPE Aruba fixes ClearPass and AOS-Switch security flaws
HPE Aruba has released fixes for vulnerabilities across ClearPass Policy Manager and AOS-Switch that can enable remote code execution, privilege escalation and policy bypass.
-
Elastic security update fixes flaws across search, Kibana and endpoint stack
Elastic has released a broad security update covering Elasticsearch, Kibana and Elastic Agent, with flaws affecting authorisation, availability and sensitive cryptographic material.
-
Veeam fixes Backup Viewer route to remote code execution
Veeam has fixed a critical Backup & Replication flaw that allows a user with the Backup Viewer role to execute code remotely on the backup server.
-
PoeLLM turns exposed AI servers into cryptomining botnet
PoeLLM malware has compromised more than 3,400 servers by targeting exposed AI and developer infrastructure, then reusing infected systems for mining, scanning and further exploitation.
-
Trusted npm publishing abused in SubQL supply chain attack
Attackers compromised the SubQL software pipeline and used GitHub Actions trusted publishing to release a malicious npm package that steals credentials and accepts remote commands.
-
Phishing campaign hides behind Microsoft Power BI links
Huntress has uncovered a phishing campaign using legitimate Microsoft Power BI pages to reach victims before installing redundant ScreenConnect clients for persistent remote access.
-
EY breach exposes financial data held for major clients
Personal and financial information held by EY for clients including Man Group was exposed after attackers compromised technology used within the professional services firm’s tax operations.