US CISA warns of Rockwell Automation ControlLogix flaws

The U.S. CISA warns of two flaws impacting Rockwell Automation ControlLogix that can lead to remote code execution and DoS attacks. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning of two vulnerabilities affecting Rockwell Automation ControlLogix EtherNet/IP (ENIP) communication module models that could be exploited to achieve remote code execution and trigger a […]

The post US CISA warns of Rockwell Automation ControlLogix flaws appeared first on Security Affairs.

July 14, 2023
Read More >>

Indexing Over 15 Million WordPress Websites with PWNPress

Sicuranex’s PWNPress platform indexed over 15 million WordPress websites, it collects data related to vulnerabilities and misconfigurations Leveraging the extensive Common Crawl dataset and pushing the boundaries of data analysis, cybersecurity firm Sicuranex successfully indexed over 15 million WordPress websites using the PWNPress service. This endeavor involved parsing the entire Web Archive Text (WAT) database, a […]

The post Indexing Over 15 Million WordPress Websites with PWNPress appeared first on Security Affairs.

July 14, 2023
Read More >>

New AVrecon botnet remained under the radar for two years while targeting SOHO Routers

A new malware dubbed AVrecon targets small office/home office (SOHO) routers, it infected over 70,000 devices from 20 countries. Lumen Black Lotus Labs uncovered a long-running hacking campaign targeting SOHO routers with a strain of malware dubbed AVrecon. The malware was spotted the first time in May 2021, but has been operating under the radar for […]

The post New AVrecon botnet remained under the radar for two years while targeting SOHO Routers appeared first on Security Affairs.

July 14, 2023
Read More >>

Apple re-released Rapid Security Response to fix recently disclosed zero-day

Apple re-released its Rapid Security Response updates for iOS and macOS after fixing browsing issues on certain websites caused by the first RSR. Apple has re-released its Rapid Security Response updates to address the CVE-2023-37450 flaw in iOS and macOS after fixing browsing issues on certain websites caused by the first RSR issued by the […]

The post Apple re-released Rapid Security Response to fix recently disclosed zero-day appeared first on Security Affairs.

July 14, 2023
Read More >>

Zimbra urges customers to manually fix actively exploited zero-day reported by Google TAG

Zimbra has released updates to address a zero-day vulnerability actively exploited in attacks aimed at Zimbra Collaboration Suite (ZCS) email servers. Zimbra urges customers to manually install updates to fix a zero-day vulnerability that is actively exploited in attacks against Zimbra Collaboration Suite (ZCS) email servers. Zimbra Collaboration Suite is a comprehensive open-source messaging and […]

The post Zimbra urges customers to manually fix actively exploited zero-day reported by Google TAG appeared first on Security Affairs.

July 13, 2023
Read More >>