CISA KEV Adds Six Flaws, NetScaler Web Shells Spotted
CISA adds six exploited flaws to KEV, including NetScaler, Linux, and SQL Server bugs.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) expanded its Known Exploited Vulnerabilities (KEV) catalog on Wednesday, adding six security flaws that carry evidence of active exploitation. The list includes a high-severity issue in Citrix NetScaler ADC and NetScaler Gateway, a remote code execution bug in Microsoft SQL Server, and vulnerabilities in the Linux kernel and Red Hat components.
Sources
- The Hacker News Original source
Continue Reading
SecurityNewLXD, MicroCloud flaw lets clients be impersonated
Canonical patched a maximum-severity LXD and MicroCloud bug that let attackers assume a trusted client's identity without its private key.
SecurityA hands-on way to gauge AI ransomware risk
OWASP volunteers released RAID-AI, a free manual self-assessment that maps AI controls to NIST and CISA frameworks.
SecurityAWS AgentCore Flaw Let One Prompt Hijack All Agents
Researchers say a single chat prompt could extract cloud credentials and let an attacker take over every AgentCore agent in an AWS account and region.