CCNPSecurity | ccnp_security | News

@ccnpsecurity

Hack And Security News Channel
==========================
Main channel : @CCNA_SECURITY

Hack And Security News Channel (English)

Are you interested in the latest news and updates on hacking and cybersecurity? Look no further than the Hack And Security News Channel! This Telegram channel is your go-to source for all things related to hacking, security breaches, and cybersecurity trends. Stay informed and up-to-date with the latest developments in the world of cybersecurity. The Hack And Security News Channel is managed by the team behind @CCNA_SECURITY, a leading channel in the field of network security. With their expertise and knowledge, you can trust that the information shared on this channel is accurate and reliable. Whether you are a cybersecurity professional, a student studying IT security, or simply someone interested in the topic, this channel is perfect for you. Stay ahead of the curve and protect yourself from cyber threats by joining the Hack And Security News Channel today. Get real-time updates on cybersecurity news, tips on how to secure your devices, and insights into the latest hacking techniques. Don't wait until it's too late - arm yourself with the knowledge you need to stay safe online. Join the Hack And Security News Channel now and become a part of our growing community of cybersecurity enthusiasts. Let's work together to make the internet a safer place for everyone. Remember, knowledge is power when it comes to cybersecurity. Stay informed, stay safe. Join us today!

CCNPSecurity | ccnp_security | News

27 Oct, 23:51

🆘CISA Warns About New Microsoft SharePoint Vulnerability CVE-2024-38094: High Risks and Immediate Patching Needed

🐙Link(s):
- https://cyble.com/blog/cisa-warns-about-new-microsoft-sharepoint-vulnerability-cve-2024-38094/

🔥CVE(s):
- CVE-2024-38094

#SharePoint
#Microsoft
#CVE
#HACK
#SECURITY

336

CCNPSecurity | ccnp_security | News

15 Mar, 09:28

🆘FortiOS & FortiProxy – Authorization bypass in SSLVPN bookmarks

🐙Link(s):
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23112
- https://www.fortiguard.com/psirt/FG-IR-24-013

🔥CVE(s):
- CVE-2024-23112

#FortiOS
#FortiProxy
#Fortigate
#SSLVPN
#HACK
#SECURITY

Main Channel:
@CCNA_SECURITY
News Channel:
@CCNPSecurity

1,965

CCNPSecurity | ccnp_security | News

15 Mar, 09:27

🆘March 2024 Security Updates, This release consists of the following 61 Microsoft CVEs:

🐙Link(s):
- https://msrc.microsoft.com/update-guide/releaseNote/2024-Mar

#Microsoft
#HACK
#SECURITY

Main Channel:
@CCNA_SECURITY
News Channel:
@CCNPSecurity

1,604

CCNPSecurity | ccnp_security | News

07 Mar, 18:03

🆘Multiple vulnerabilities in VMware ESXi, Workstation, and Fusion were privately reported to VMware. Updates are available to remediate these vulnerabilities in affected VMware products.

🐙Link(s):
- https://www.vmware.com/security/advisories/VMSA-2024-0006.html

🔥CVE(s):
- CVE-2024-22252
- CVE-2024-22253
- CVE-2024-22254
- CVE-2024-22255

#Vmware
#ESXi
#Fusion
#CloudFoundation
#SECURITY

Main Channel:
@CCNA_SECURITY
News Channel:
@CCNPSecurity

1,517

CCNPSecurity | ccnp_security | News

01 Mar, 15:32

🔥CVE-2024-1709 : ConnectWise SecureConnect <= 23.9.7 - Authentication Bypass & Unauthenticated Remote Code Execution module (Updated)
🟢POC : https://github.com/horizon3ai/SecureConnect-Auth-Bypass [2] , [3]
📺Blog :
https://www.horizon3.ai/attack-research/red-team/connectwise-screenconnect-auth-bypass-deep-dive/
☠️Analysis (CVE-2024-1709 & CVE-2024-1708) :
https://www.huntress.com/blog/a-catastrophe-for-control-understanding-the-screenconnect-authentication-bypass

🔥

Module RCE : https://github.com/rapid7/metasploit-framework/pull/18870

#ConnectWise
#RCE
#HACK
#SECURITY

Main Channel:
@CCNA_SECURITY
News Channel:
@CCNPSecurity

1,332

CCNPSecurity | ccnp_security | News

21 Feb, 23:33

ConnectWise urges ScreenConnect admins to patch critical RCE flaw

Link(s)
https://www.bleepingcomputer.com/news/security/connectwise-urges-screenconnect-admins-to-patch-critical-rce-flaw/

Patch Link(s):
- https://www.connectwise.com/company/trust/security-bulletins/connectwise-screenconnect-23.9.8

#ConnectWise
#RCE
#HACK
#SECURITY

Main Channel:
@CCNA_SECURITY
News Channel:
@CCNPSecurity

1,336

CCNPSecurity | ccnp_security | News

11 Feb, 07:55

Fortinet Warns of Critical FortiOS SSL VPN Flaw Likely Under Active Exploitation (CVSS score: 9.6)

Link(s)
https://thehackernews.com/2024/02/fortinet-warns-of-critical-fortios-ssl.html

CVE(s):
- CVE-2024-21762

#Fortinet
#Firewall
#HACK
#SECURITY

Main Channel:
@CCNA_SECURITY
News Channel:
@CCNPSecurity

1,417

CCNPSecurity | ccnp_security | News

07 Dec, 17:54

RCE Vulnerability In Confluence Data Center and Confluence Server

Link(s):
- https://confluence.atlassian.com/security/cve-2023-22522-rce-vulnerability-in-confluence-data-center-and-confluence-server-1319570362.html

CVE(s):
- CVE-2023-22522

#Atlassian
#AtlassianConfluence
#RCE
#Vulnerability
#HACK
#SECURITY

Main Channel:
@CCNA_SECURITY
News Channel:
@CCNPSecurity

1,825

CCNPSecurity | ccnp_security | News

07 Nov, 20:35

Critical Flaws Discovered in Veeam ONE IT Monitoring Software

Link(s):
- https://www.veeam.com/kb4508

- https://thehackernews.com/2023/11/critical-flaws-discovered-in-veeam-one.html

CVE(s):
- CVE-2023-38547
- CVE-2023-38548
- CVE-2023-38549
- CVE-2023-41723

#Veeam
#VeeamBackup
#HACK
#SECURITY

Main Channel:
@CCNA_SECURITY
News Channel:
@CCNPSecurity

1,898

CCNPSecurity | ccnp_security | News

06 Nov, 18:35

Detecting and Mitigating CVE-2023-4911: Local Privilege Escalation Vulnerability

Link(s):
- https://access.redhat.com/security/cve/cve-2023-4911
- https://sysdig.com/blog/cve-2023-4911/

CVE(s):
- CVE-2023-4911

#Privilege
#Linux
#HACK
#SECURITY

Main Channel:
@CCNA_SECURITY
News Channel:
@CCNPSecurity

1,473

CCNPSecurity | ccnp_security | News

12 Oct, 12:22

Windows IIS Server Elevation of Privilege Vulnerability

Link(s):
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36434

CVE(s):
- CVE-2023-36434

#IIS
#Microsoft
#HACK
#SECURITY

Main Channel:
@CCNA_SECURITY
News Channel:
@CCNPSecurity

1,664

CCNPSecurity | ccnp_security | News

30 Sep, 19:03

Millions of Exim mail servers exposed to zero-day RCE attacks

Link(s):
https://www.bleepingcomputer.com/news/security/millions-of-exim-mail-servers-exposed-to-zero-day-rce-attacks/

CVE(s):
- CVE-2023-42115

#Exim
#CVE
#RCE
#MailServer
#HACK
#SECURITY

Main Channel:
@CCNA_SECURITY
News Channel:
@CCNPSecurity

1,700

CCNPSecurity | ccnp_security | News

26 Sep, 20:34

Microsoft SharePoint Server Elevation of Privilege Vulnerability

Link(s):
https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-29357

Exploit Link:
https://github.com/Chocapikk/CVE-2023-29357/tree/main

CVE(s):
- CVE-2023-29357

#CVE
#Microsoft
#SharePoint
#CVE
#HACK
#SECURITY

Main Channel:
@CCNA_SECURITY
News Channel:
@CCNPSecurity

1,368

CCNPSecurity | ccnp_security | News

17 Sep, 20:12

Microsoft September 2023 Patch Tuesday fixes 2 zero-days, 59 flaws

Link(s):
https://www.bleepingcomputer.com/news/microsoft/microsoft-september-2023-patch-tuesday-fixes-2-zero-days-59-flaws/

#Microsoft
#CVE
#HACK
#SECURITY

Main Channel:
@CCNA_SECURITY
News Channel:
@CCNPSecurity

1,429

CCNPSecurity | ccnp_security | News

19 Aug, 23:20

🆘

🆘CISA adds Citrix ShareFile flaw to the KEV catalog (Base Score: 9.8 CRITICAL)

Link(s):
- https://www.scmagazine.com/news/cisa-adds-citrix-sharefile-flaw-to-the-kev-catalog
- https://nvd.nist.gov/vuln/detail/CVE-2023-24489

CVE(s):
- CVE-2023-24489

#Citrix
#Vulnerability
#HACK
#SECURITY

Main Channel:
@CCNA_SECURITY
News Channel:
@CCNPSecurity

1,652

CCNPSecurity | ccnp_security | News

10 Aug, 08:50

This release consists of the following 74 Microsoft CVEs, and 2 advisories:

Link(s):
- https://msrc.microsoft.com/update-guide/releaseNote/2023-Aug

#Microsoft
#HACK
#SECURITY

Main Channel:
@CCNA_SECURITY
News Channel:
@CCNPSecurity

1,487

CCNPSecurity | ccnp_security | News

25 Jul, 15:22

🆘

🆘 New OpenSSH Vulnerability Exposes Linux Systems to Remote Command Injection

Link(s):
- https://thehackernews.com/2023/07/new-openssh-vulnerability-exposes-linux.html?m=1
- https://nvd.nist.gov/vuln/detail/CVE-2023-38408

CVE(s):
- CVE-2023-38408

#OpenSSH
#Vulnerability
#CVE
#RCE
#HACK
#SECURITY

Main Channel:
@CCNA_SECURITY
News Channel:
@CCNPSecurity

1,665

CCNPSecurity | ccnp_security | News

25 Jul, 00:35

Atlassian RCE Bugs Plague Confluence, Bamboo

Link(s):
https://www.darkreading.com/cloud/atlassian-rce-bugs-plague-confluence-bamboo

CVE(s):
- CVE-2023-22505
- CVE-2023-22508
- CVE-2023-22506

#Atlassian
#Vulnerability
#CVE
#RCE
#HACK
#SECURITY

Main Channel:
@CCNA_SECURITY
News Channel:
@CCNPSecurity

1,315

CCNPSecurity | ccnp_security | News

20 Jul, 13:00

Citrix ADC and Citrix Gateway Security Bulletin for CVE-2023-3519, CVE-2023-3466, CVE-2023-3467

Link(s):
https://support.citrix.com/article/CTX561482/citrix-adc-and-citrix-gateway-security-bulletin-for-cve20233519-cve20233466-cve20233467

CVE(s):
CVE-2023-3466
CVE-2023-3467
CVE-2023-3519

#Citrix
#HACK
#SECURITY

Main Channel:
@CCNA_SECURITY
News Channel:
@CCNPSECURITY

1,172

CCNPSecurity | ccnp_security | News

14 Jul, 13:30

🔴🔴🔴 Zimbra urges admins to manually fix zero-day exploited in attacks

Link(s):
- https://www-bleepingcomputer-com.cdn.ampproject.org/c/s/www.bleepingcomputer.com/news/security/zimbra-urges-admins-to-manually-fix-zero-day-exploited-in-attacks/amp/

#Zimbra
#Mail
#Mailserver
#Mail_server
#Zero_day
#HACK
#SECURITY

Main Channel:
@CCNA_SECURITY
News Channel:
@CCNPSECURITY

1,218