SecurityCheck Point's Fifth Critical Flaw Since July
A new 9.8-severity stack overflow lets unauthenticated attackers hit Security Management Servers as root, and it's not the first this summer.
> Search
26 results for “servers”
Security
SecurityLiteSpeed Enterprise Flaw Risks Root on Shared Hosts
cPanel warns a LiteSpeed Web Server Enterprise bug could let one hosting account gain root on shared servers, with no CVE assigned.
SecurityZero-Day Backdoor Campaign Targets Magento Stores
Unpatched flaw lets attackers plant persistent backdoors on Magento and Adobe Commerce servers without login.
SecurityGiveWP flaw opens server to unauthenticated takeover
A critical GiveWP plugin bug chains three issues, letting attackers run commands on WordPress servers with no account needed.
AI & MLAI Agent Ecosystem Grows Riskier as Oversight Lags
Reco report: 80% of AI tools lack IT oversight; MCP servers and rising vulnerabilities amplify risk.
SecurityZimbra attacks breach 270+ servers
Threat actors compromised over 270 Zimbra instances in ongoing RCE attacks, prompting CISA to order urgent patching.
SecuritySpring Framework's 91 Flaws: A Wake-Up Call
Broadcom patches 91 Spring vulnerabilities, with one critical flaw exposing LDAP servers to attack.
SecurityMCP Servers: A New Secret-Leak Vector
Model Context Protocol servers can expose enterprise secrets via plaintext configs, over-permissioning, and prompt injection, often undetected.
SecurityAI-Assisted SharePoint Exploit Reaches Unauthenticated RCE
Researchers chain AI-found flaws to gain admin on SharePoint servers, bypassing authentication entirely.
AI & MLHow MCP Splits Can Leak Secrets
Malicious MCP servers can split instructions to make AI coding agents exfiltrate secrets, ASSET reports.
SecurityLexisNexis disconnects vendor systems after anomaly
LexisNexis took Diligence, Metabase API, and Newsdesk offline after detecting unusual activity on third-party servers.
SecurityCritical CodeIgniter File Upload Flaw Found
A critical vulnerability in CodeIgniter 4 allows attackers to bypass file validation, potentially leading to remote code execution on affected servers.
SecurityBMC Vulnerabilities Expose Servers
New research reveals widespread security flaws in baseboard management controllers across major global server manufacturers.
SecurityFlowise Fixes Critical Root RCE Vulnerability
A critical remote code execution vulnerability in Flowise allows low-privileged attackers to gain root access on vulnerable servers via CSV Agent code injection.
Cyber CrimeAutonomous AI Weaponization at Scale
Researchers have identified a threat actor using the DeepSeek AI model to automate the lifecycle of cyberattacks on exposed servers.
SecurityCritical Spikster API Flaw Exposes Servers
A missing authentication vulnerability in Spikster allows unauthenticated attackers to remotely access API routes and perform administrative actions.
SecurityDecades-Old BMC Flaw Exposes Servers
A legacy vulnerability in IPMI 2.0 leaves over 24,000 servers vulnerable to offline password cracking and potential remote control.
SecurityOpenAM RCE Vulnerability Exposes Servers
A critical pre-authentication vulnerability allows attackers to execute arbitrary code on unpatched OpenAM instances.
SecurityCritical DoS Flaw Found in npm tar Package
A severe vulnerability in the node-tar library allows attackers to crash servers and exhaust storage through maliciously crafted archive files.
SecuritySecuring Identity Without Data Exposure
New architectural approaches to age verification aim to satisfy global mandates while keeping biometric data off centralized servers.
OnlyFans Takedowns Shield Web Servers
Copyright enforcement by adult content creators is inadvertently neutralizing infrastructure vulnerabilities across the public sector.
SecurityClawvet API Secret Flaw Exposed
A hard-coded JWT secret in self-hosted clawvet API servers allows remote attackers to bypass authentication and harvest sensitive data.
SecurityCISA Mandates Patching for SharePoint
Federal agencies must secure SharePoint servers against active exploitation of three critical remote code execution vulnerabilities.
SecurityTrusted Browser Tool Becomes Vector for Hidden Data Exfiltration
A widely used extension for developers and testers was found harboring spyware that sent user traffic data to remote servers.
Cyber CrimeDutch Server Raids Expose Infrastructure Ties to Russian Operations
Authorities seized 800 servers in a probe targeting individuals accused of facilitating cyberattacks through sanctioned networks.
SecurityThe Fragile Bridge: Why Progress Ordered an Immediate Server Shutdown
As Progress Software forces ShareFile servers offline, a sudden threat exposes the vulnerabilities inherent in hybrid storage systems.