Veeam Releases Security Updates to Fix 18 Flaws, Including 5 Critical Issues

Veeam has shipped security updates to address a total of 18 security flaws impacting its software products, including five critical vulnerabilities that could result in remote code execution.
The list of shortcomings is below –

CVE-2024-40711 (CVSS score: 9.8) – A vulnerability in Veeam Backup & Replication that allows unauthenticated remote code execution.

CVE-2024-42024 (CVSS score: 9.1

The Hacker News – ​Read More

WordPress Mandates 2FA, SVN Passwords for Plugin, Theme Authors

Starting October 2024, WordPress requires plugin and theme authors to enable two-factor authentication (2FA) and use SVN-specific passwords…

Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News – ​Read More

Cisco Fixes Root Escalation Vulnerability With Public Exploit Code

Local attackers can exploit this weakness through malicious CLI commands without user interaction, but only if they have Administrator privileges. So far, there is no evidence of this vulnerability being exploited in the wild.

Cyware News – Latest Cyber News – ​Read More

Russia’s Most Notorious Special Forces Unit Now Has Its Own Cyber Warfare Team

Unit 29155 of Russia’s GRU military intelligence agency—a team responsible for coup attempts, assassinations, and bombings—has branched out into brazen hacking operations with targets across the world.

Security Latest – ​Read More

Intricate Babylon RAT Campaign Targets Malaysian Politicians, Government

This campaign, active since July, utilizes at least three malicious ISO files to compromise Malaysian entities, containing components like a malicious executable and a decoy PDF file, ultimately delivering the Babylon RAT as a final payload.

Cyware News – Latest Cyber News – ​Read More

Why It’s So Hard to Fully Block X in Brazil

With 20,000 internet providers across the country, the technical challenges of blocking X in Brazil mean some connections are slipping through the cracks.

Security Latest – ​Read More

Australia Proposes Mandatory Guardrails for AI

New mandatory guardrails will apply to AI models in high-risk settings, with businesses encouraged to adopt new safety standards starting now.

Security | TechRepublic – ​Read More

Businesses still ready to invest in Gen AI, with risk management a top priority

According to a Salesforce study, 87% of C-suite executives say implementing AI technology is a top business priority, but 93% acknowledge barriers to adoption in their organizations.

Latest stories for ZDNET in Security – ​Read More

The Role of Trust Anchors in Modern IT Security

To fully realize the benefits trust anchors provide, organizations need to implement processes and technologies that maintain the privacy and security of trust anchors and the personal data they contain.

darkreading – ​Read More

Cisco Warns of Backdoor Admin Account in Smart Licensing Utility

Cisco has issued a warning about a backdoor admin account discovered in the Cisco Smart Licensing Utility (CSLU), allowing unauthorized access to unpatched systems. This critical flaw (CVE-2024-20439) enables remote access with admin privileges.

Cyware News – Latest Cyber News – ​Read More