Vulnerabilities

Vulnerabilities | News, how-tos, features, reviews, and videos

Proof-of-concept bypass shows weakness in Linux security tools, claims Israeli vendor

Linux security still too reliant on eBPF-based agents, says Armo.

By John E. Dunn

Apr 25, 2025 1 min

Operating Systems Security Vulnerabilities

As clock ticks, vendors slowly patch critical flaw in AMI MegaRAC BMC firmware

Lenovo patches have now appeared as the slow-motion industry effort to fix the issue trundles on.

By John E. Dunn

Apr 24, 2025 4 mins

Data Center Management Servers Vulnerabilities

Ivanti warns customers of new critical flaw exploited in the wild

Chinese APT group UNC5221 appears to have studied a recent Ivanti Connect Secure patch to develop a remote code execution exploit on previous versions, and on end-of-support Pulse Connect Secure appliances.

By Lucian Constantin

Apr 4, 2025 1 min

Network Security Vulnerabilities

Ubuntu namespace vulnerability should be addressed quickly: Expert

A feature that was supposed to harden the OS can by bypassed, say researchers.

By Howard Solomon

Mar 28, 2025 5 mins

Operating Systems Vulnerabilities

Attackers probing backdoor flaw in popular Cisco Smart Licensing Utility, warns SANS

Information on the critical flaw was made public in September; patches should be applied ASAP, says SANS Technology Institute.

By John E. Dunn

Mar 21, 2025 3 mins

Network Security Vulnerabilities

Hackers gain root access to Palo Alto firewalls through chained bugs

A recently disclosed medium-severity bug was chained with critical, older bugs to gain root-level access to PAN firewall systems.

By Shweta Sharma

Feb 19, 2025 1 min

Network Security Vulnerabilities

Palo Alto Networks firewall bug being exploited by threat actors: Report

PAN admins urged to block open internet access to firewall management interfaces after discovery of vulnerability.

By Howard Solomon

Feb 14, 2025 3 mins

Firewalls Vulnerabilities Zero-Day Vulnerabilities

Cisco’s ISE bugs could allow root-level command execution

The insecure deserialization and authorization bypass flaws could enable attackers to escalate privileges and run arbitrary commands.

By Shweta Sharma

Feb 7, 2025 1 min

Security Vulnerabilities

Palo Alto Networks firewalls have UEFI flaws, Secure Boot bypasses

Security researchers have uncovered known firmware flaws in three Palo Alto enterprise firewall devices built on commodity hardware.

By Lucian Constantin

Jan 23, 2025 1 min

Firewalls Network Security Vulnerabilities

CISOs who delayed patching Palo Alto Vulnerabilities now face real threat

CISA said it has evidence of active exploitation for two out of six Expedition vulnerabilities Palo Alto Networks patched in October.

By Shweta Sharma

Nov 15, 2024 1 min

Firewalls Security Vulnerabilities