Critical Update: CrushFTP Zero-Day Flaw Exploited in Targeted Attacks

Critical Update: CrushFTP Zero-Day Flaw Exploited in Targeted Attacks

/in

Users of the CrushFTP enterprise file transfer software are being urged to update to the latest version following the discovery of a security flaw that has come under targeted exploitation in the wild.
“CrushFTP v11 versions below 11.1 have a vulnerability where users can escape their VFS and download system files,” CrushFTP said in an advisory released Friday.

The Hacker News – ​Read More

Palo Alto Networks Discloses More Details on Critical PAN-OS Flaw Under Att...Palo Alto Networks Discloses More Details on Critical PAN-OS Flaw Under AttackCrushFTP Warns Users to Patch Exploited Zero-Day “Immediately”