Microsoft’s July security update reveals significant vulnerabilities, with attackers already exploiting flaws in the system. The update addresses a staggering 139 CVEs in Microsoft products and four in non-Microsoft products. The July update necessitates prompt action from administrators, given the patching requirements for 139 unique CVEs. Among these, two are actively exploited by attackers, and […]
A critical security flaw discovered in the RADIUS protocol, nicknamed BlastRADIUS (CVE-2024-3596), makes a wide range of networking equipment susceptible to MitM attacks. Although complex to exploit, a successful attack could have serious consequences. To mitigate BlastRADIUS, network devices like switches, routers, firewalls, VPN concentrators, access points, and DSL gateways need updates that add integrity […]
Hackers have targeted the WordPress Calendar plugin, a widely used WordPress tool with over 150,000 active installations. This significant security flaw, identified as an Arbitrary File Upload flaw (CVE-2024-5441), allows authenticated users, such as subscribers, to upload arbitrary files to a vulnerable site, potentially leading to remote code execution (RCE). The vulnerability was discovered on […]