CheckScan+ @check_scan

Lazarus hackers drop new RAT malware using 2-year-old Log4j bug buff.ly/47PwiEH

WordPress Releases Update 6.4.2 to Address Critical Remote Attack Vulnerability #cve #vulnerabilities #cybersecurity buff.ly/3t7MqlI

DAST vs. IAST vs. SAST all you need to know about testing your applications, APIs and infrastructure. Plus read the use cases. Consider yourself educated thanks to our partners at Appcheck 🤓🤷‍♀️🚀🔐👏buff.ly/3NbCiiH

WordPress plugin WP Fastest Cache's severe SQL injection vulnerability (CVE-2023-6063) threatens over 600K sites. The fix, version 1.2.2, was released on November 13, 2023. A PoC exploit is due November 27, 2023. Users are urged to update immediately. buff.ly/3sI2ryx

A recent critical vulnerability in Confluence Data Center and Confluence Server, tracked as CVE-2023-22518, is under active exploitation by threat actors. The flaw is an improper authorization issue that could lead to significant data loss. buff.ly/3Mvjr1D

New CVSS 4.0 vulnerability severity rating standard released buff.ly/3smfINg

🚨 A critical security flaw has been discovered in the libwebp image library used for rendering images in the WebP format. CVE identifier CVE-2023-5129 and has been given the maximum severity score 10.0 CVSS rating. Stay safe and update your software! 🔒 buff.ly/3RI215B

60% of cloud security issues involved stolen credentials, followed by misconfigurations at a distant 19%. securityboulevard.com/2023/08/google… #cloudsecurity #cybersecurity #stolencredentials #misconfigurations #GoogleCloud

🚨 CISA adds #Microsoft's zero-day flaw affecting .NET and Visual Studio (CVE-2023-38180) to its Known Exploited Vulnerabilities Catalog. The flaw, fixed in August 2023 #PatchTuesday, can be exploited for DoS attacks with no user interaction #Cybersecurity buff.ly/47qw5YI

A step-by-step guide for patching software vulnerabilities - Help Net Security buff.ly/3rVrGg0

Adobe Rolls Out New Patches for Actively Exploited ColdFusion Vulnerability buff.ly/3pP7ufo

🚨 Critical Alert! 🛡️ Citrix users beware! CVE-2023-3519 is a severe code injection flaw actively exploited in NetScaler ADC & Gateway. Update now! #Cybersecurity #CitrixADC #SecurityAlert buff.ly/3OjU6Jj

Beware of the new MOVEit Transfer software vulnerability! Progress Software has just revealed CVE-2023-36934, a critical SQL injection bug with a whopping score of 9.1. To make matters worse, a POC has been unleashed, and targeted attacks are already surfacing #Imperva

China's 'Volt Typhoon' APT Now Exploits Zoho ManageEngine buff.ly/3NC5yP8

🔒 MOVEit vulnerability underscores the importance of regular vulnerability testing for web applications. Stay secure! #Cybersecurity #VulnerabilityTesting #MOVEitVulnerability buff.ly/3X0o87W

WordPress plugin ‘Gravity Forms’ vulnerable to PHP object injection. The vulnerability, which is tracked as CVE-2023-28782, impacts all plugin versions from 2.73 and below. buff.ly/3C3qmJP

Red Hat Tackles Software Supply Chain Security buff.ly/3MBNAvr

Report shows 92% of orgs experienced an API security incident last year buff.ly/3NAR17I

Security response times and vulnerability management is under scrutiny with companies taking 145 hours on average to respond to security alerts. Excellent info from Palo Alto Unit 42. Read more here buff.ly/3ort5JP #vulnerabilitymanagement

Hackers Exploiting WordPress Elementor Pro Vulnerability: Millions of Sites at Risk! buff.ly/3M6x87Q