What's new arround internet
| Src | Date (GMT) | Titre | Description | Tags | Stories | Notes |
 |
2024-07-17 14:17:00 | China-linked APT17 Targets Italian Companies with 9002 RAT Malware (lien direct) | A China-linked threat actor called APT17 has been observed targeting Italian companies and government entities using a variant of a known malware referred to as 9002 RAT. The two targeted attacks took place on June 24 and July 2, 2024, Italian cybersecurity company TG Soft said in an analysis published last week. "The first campaign on June 24, 2024 used an Office document, while the second | |||
 |
2024-07-17 14:00:00 | Attaques de compte Snowflake entraînées par des informations d'identification légitimes exposées Snowflake Account Attacks Driven by Exposed Legitimate Credentials (lien direct) |
La gestion des informations d'identification obtient un coup de pouce avec la dernière campagne d'infostellers \\ 'Extorsion construite sur les informations volées dans les systèmes de stockage cloud.
Credential management gets a boost with the latest infostealers\' extortion campaign built on info stolen from cloud storage systems. |
Cloud | ||
|
2024-07-17 11:20:00 | L'araignée dispersée adopte RansomHub et Ransomware Qilin pour les cyberattaques Scattered Spider Adopts RansomHub and Qilin Ransomware for Cyber Attacks (lien direct) |
Le tristement célèbre groupe de cybercrimes connu sous le nom d'araignée dispersée a incorporé des souches de ransomware telles que RansomHub et Qilin dans son arsenal, a révélé Microsoft.
Sporsed Spider est la désignation donnée à un acteur de menace qui est connu pour ses schémas d'ingénierie sociale sophistiqués pour violer les cibles et établir la persistance pour l'exploitation de suivi et le vol de données.Il a également une histoire de
The infamous cybercrime group known as Scattered Spider has incorporated ransomware strains such as RansomHub and Qilin into its arsenal, Microsoft has revealed. Scattered Spider is the designation given to a threat actor that\'s known for its sophisticated social engineering schemes to breach targets and establish persistence for follow-on exploitation and data theft. It also has a history of |
Ransomware Threat | ||
|
2024-07-17 10:55:00 | Vulnérabilité critique APCACH GROWGRAPH sous attaque - Patch dès que possible Critical Apache HugeGraph Vulnerability Under Attack - Patch ASAP (lien direct) |
Les acteurs de la menace exploitent activement un défaut de sécurité critique récemment divulgué qui a un impact sur Apache INNEALGRAPH-Server qui pourrait conduire à des attaques d'exécution de code distantes.
Suivi en CVE-2024-27348 (score CVSS: 9.8), la vulnérabilité a un impact sur toutes les versions du logiciel avant 1.3.0.Il a été décrit comme un défaut d'exécution de commande distant dans l'API du langage de traversée Gremlin Graph.
"Les utilisateurs sont
Threat actors are actively exploiting a recently disclosed critical security flaw impacting Apache HugeGraph-Server that could lead to remote code execution attacks. Tracked as CVE-2024-27348 (CVSS score: 9.8), the vulnerability impacts all versions of the software before 1.3.0. It has been described as a remote command execution flaw in the Gremlin graph traversal language API. "Users are |
Vulnerability Threat | ||
 |
2024-07-17 09:05:07 | SFR, Free, Corsica Telecom : un pirate commercialise-t-il des accès clients ? (lien direct) | Un pirate informatique commercialiserait des accès à plusieurs opérateurs de téléphonie français. Ce malveillant affirme avoir accès à n'importe quelle donnée client de SFR, Free, Corsica Telecom, etc.... | |||
 |
2024-07-17 09:02:53 | Vigilance Alertes Vulnérabilités - OpenText ArcSight Enterprise Security Manager : Cross Site Scripting du 17/05/2024 (lien direct) | Un attaquant peut provoquer un Cross Site Scripting de OpenText ArcSight Enterprise Security Manager, du 17/05/2024, afin d'exécuter du code JavaScript dans le contexte du site web. - Vulnérabilités | |||
|
2024-07-17 09:02:53 | Vigilance Vulnerability Alerts - OpenText ArcSight Enterprise Security Manager: Cross Site Scripting dated 17/05/2024 (lien direct) | An attacker can trigger a Cross Site Scripting of OpenText ArcSight Enterprise Security Manager, dated 17/05/2024, in order to run JavaScript code in the context of the web site. - Security Vulnerability | |||
 |
2024-07-17 09:01:22 | Thomas Gourand, nouveau Directeur Général de Snowflake en France (lien direct) | Thomas Gourand est nommé Directeur Général pour la France. Il est chargé du développement de la filiale. | |||
|
2024-07-17 08:57:22 | Accord Microsoft-CISPE : comment Google a tenté la dissuasion (lien direct) | Pour dissuader le CISPE d'un accord avec Microsoft, Google aurait mis près de 500 M€ sur la table, avec le soutien d'AWS. | |||
|
2024-07-17 08:32:43 | Rapport Nozomi Networks : L\'industrie manufacturière critique cible principale des cyberattaque (lien direct) | Nozomi Networks dévoile les résultats de son rapport biannuel dédié à la sécurité OT/IoT Cybersecurity " Trends and Insights ", qui examine les tendances ayant affecté la cybersécurité OT et IoT lors du premier semestre 2024. - Investigations | |||
 |
2024-07-17 08:30:00 | CISA: Patch Critical GeoServer GeoTools Bug Now (lien direct) | CISA has told federal agencies to patch a critical GeoServer GeoTools vulnerability under active exploitation | |||
|
2024-07-17 08:18:23 | Vers des mises à jour cumulatives intermédiaires pour Windows (lien direct) | Pour réduire la taille des mises à jour de Windows, Microsoft va mettre en place des " checkpoints ". | |||
|
2024-07-17 08:16:30 | Netskope Threat Labs : plus d\'un tiers des informations sensibles saisies dans les applications d\'IA générative sont des données personnelles règlementées (lien direct) | Netskope Threat Labs : plus d'un tiers des informations sensibles saisies dans les applications d'IA générative sont des données personnelles règlementées Alors que l'utilisation de l'IA générative a plus que triplé en 12 mois, les entreprises peinent encore à trouver l'équilibre entre utilisation sécurisée de l'IA générative et gestion des risques. - Investigations | |||
 |
2024-07-17 07:45:32 | Rite Aid Says Hack Impacts 2.2M People as Ransomware Gang Threatens to Leak Data (lien direct) | >Pharmacy chain Rite Aid says 2.2 million people are impacted by a recent data breach for which the RansomHub group has taken credit. | |||
 |
2024-07-17 07:39:07 | SecureWorks fait ses débuts Taegis Managedxdr Plus pour stimuler la cybersécurité pour le milieu du marché avec des solutions personnalisées Secureworks debuts Taegis ManagedXDR Plus to boost cybersecurity for mid-market with customized solutions (lien direct) |
Le fournisseur de cybersécurité Securework a annoncé mardi le lancement de Taegis Managedxdr Plus, une nouvelle détection et réponse gérées (MDR) ...
Cybersecurity vendor Securework announced Tuesday the launch of Taegis ManagedXDR Plus, a new Managed Detection and Response (MDR)... |
|||
|
2024-07-17 07:08:57 | JO Paris 2024 - Les principales menaces et conseils de cybersécurité selon Tenable (lien direct) | Objet : JO Paris 2024 - Les principales menaces et conseils de cybersécurité selon Bernard Montel, Directeur Technique EMEA et Security Strategist chez Tenable - Points de Vue | Threat | ||
 |
2024-07-17 07:00:00 | Il a réussi à intercepter et reconstruire le gameplay de la Game Boy à partir de son bus mémoire (lien direct) | Un passionné a réussi l'exploit de reconstruire le gameplay de la Game Boy en analysant les données transitant sur son bus mémoire, ouvrant de nouvelles perspectives pour la préservation de cette console culte. | |||
|
2024-07-17 06:00:00 | Tsahal a repoussé les cyberattaques 3B depuis le 7 octobre, affirme le colonel IDF Has Rebuffed 3B Cyberattacks Since Oct. 7, Colonel Claims (lien direct) |
Les systèmes informatiques militaires d'Israël ont été sous un barrage constant ces derniers mois.
Israel\'s military computer systems have been under constant barrage in recent months. |
|||
 |
2024-07-17 03:19:41 | Looking for a Job in Cyber? Tips and Advice From the Pros (lien direct) | A career in cybersecurity can be rewarding, challenging, and, frankly, lucrative. But it's not the easiest industry to break into: the skills required for a cybersecurity role are both niche and specific, the bar for entry is relatively high, and there are very few entry-level jobs available. But don't be disheartened. The cybersecurity industry is crying out for fresh talent. With hard work, a little luck, and the right advice, you can set yourself up for a long and satisfying career in cybersecurity. With this in mind, we spoke to two industry veterans to get their thoughts on breaking into... | |||
|
2024-07-17 02:12:55 | OTAN pour établir un nouveau cyber-centre en Belgique NATO to Establish New Cyber Center in Belgium (lien direct) |
> L'OTAN établira un nouveau cyber-centre pour mieux se protéger contre les cyber-menaces de plus en plus sophistiquées.
>NATO will establish a new cyber center to better protect against increasingly sophisticated cyber threats. |
|||
 |
2024-07-17 00:49:56 | WhatsApp: AWS Loué Infrastructure au groupe NSO à partir de 2018 WhatsApp: AWS leased infrastructure to NSO Group beginning in 2018 (lien direct) |
Pas de details / No more details | |||
|
2024-07-17 00:08:20 | Le géant des meubles ferme les installations de fabrication après une attaque de ransomware Furniture giant shuts down manufacturing facilities after ransomware attack (lien direct) |
Pas de details / No more details | Ransomware | ||
 |
2024-07-17 00:00:51 | Les orgs israéliens de l'Iran \\ sont de la porte porte Iran\\'s MuddyWater phishes Israeli orgs with custom BugSleep backdoor (lien direct) |
L'Inde, en Turquie, est également ciblée par une campagne qui repose sur le compromis des e-mails d'entreprise Muddywater, un équipe de cyber-espionnage soutenue par le gouvernement iranien, a amélioré son malware avec une porte dérobée personnalisée, qu'il \\ ''S utilisé pour cibler les organisations israéliennes.…
India, Turkey, also being targeted by campaign that relies on corporate email compromise MuddyWater, an Iranian government-backed cyber espionage crew, has upgraded its malware with a custom backdoor, which it\'s used to target Israeli organizations.… |
Malware | ||
 |
2024-07-17 00:00:00 | L'impact potentiel des vulnérabilités OpenSSH CVE-2024 & # 8211; 6387 et CVE-2024-6409 The Potential Impact of the OpenSSH Vulnerabilities CVE-2024–6387 and CVE-2024-6409 (lien direct) |
Nous vérifions les vulnérabilités OpenSSH CVE-2024 & # 8211; 6387 et CVE-2024-6409, examinant leur impact potentiel réel et la possibilité d'exploitation pour CVE-2024 & # 8211; 6387 dans des systèmes x64.
We check the OpenSSH vulnerabilities CVE-2024–6387 and CVE-2024-6409, examining their potential real-world impact and the possibility of exploitation for CVE-2024–6387 in x64 systems. |
Vulnerability | ||
 |
2024-07-16 23:39:43 | Attaque de Mirrorface contre les organisations japonaises MirrorFace Attack against Japanese Organisations (lien direct) |
#### Géolocations ciblées - Japon #### Industries ciblées - Fabrication critique ## Instantané Les analystes du JPCert Coordination Center (JPCERT / CC) ont publié un rapport sur le groupe d'acteur de menace Mirrorface et leur utilisation de Lodeinfo et NOOPDOOR MALWWare depuis 2002. ## Description Au début, Mirrorface a ciblé les médias, les organisations politiques et les universités;Cependant, le groupe s'est mis à l'orientation des fabricants et des institutions de recherche en 2023. Historiquement, Mirrorface a utilisé le spearphishing pour obtenir un accès intime aux réseaux de victimes, mais a élargi leurs techniques pour tirer parti des vulnérabilités dans les services de réseaux privés virtuels (VPN), en particulier Array Ag et Fortige. Le groupe utilise NOOPDOOR, un Shellcode, pour s'injecter dans des applications légitimes à l'aide de fichiers XML ou DLL, communiquer avec un serveur de commande et de contrôle (C2) sur le port 443, et s'engager dans la reconnaissance, le mouvement latéral et l'exfiltration d'informations.Noopdoor utilise également un certain nombre de tactiques d'évasion de défense, notamment la manipulation des horodatages, la suppression des journaux d'événements Windows et la suppression des fichiers, entre autres. ## Analyse supplémentaire Les chercheurs de l'ESET évaluent que Mirrorface est un acteur de menace chinois qui cible les entreprises et les organisations basées au Japon.Les principales motivations du groupe comprennent l'espionnage et l'exfiltration des données sensibles. En décembre 2022, les chercheurs de l'ESET ont publié un [rapport] (https://www.eset.com/int/about/newsroom/press-releases/research/chinese-shipaking-mirrorface-targeted-a-japanais-political-party--avec l'espionnage et le vol de la prodigue-malware-ahead-elections-eset-research-unpcovers /) détaillant une campagne de espionnage attribuée à Mirrorface ciblant les entités politiques japonaises.Cette campagne, surnommée Operation Liberalface, s'est produite juste avant les élétions de la Chambre des conseillers japonaises en juillet 2022. Notamment, Eset a rapporté que les membres d'un parti politique japonais étaient spécifiquement ciblés dans le cadre de la campagne Operation Liberalface.Les e-mails de Spearphishing contenaient la porte dérobée personnalisée de Mirrorface \\, Lodeinfo, qui a été utilisée pour livrer des charges utiles supplémentaires et exfiltrate victimes \\ 'des informations d'identification, des documents et des e-mails. ## Détections / requêtes de chasse ### Microsoft Defender Antivirus Microsoft Defender Antivirus détecte les composants de menace comme le folMALWODIQUE-LA LABILAGE: - [Trojan: XML / Malagent] (https://www.microsoft.com/en-us/wdsi/therets/malware-encycopedia-dercription?name=trojan:xml/malagent!msr) - [* Trojan: Win64 / Malagent *] (https://www.microsoft.com/en-us/wdsi/Threats/Malware-encyClopedia-dercription?name=trojan:win64 / Malagent! MSR) ## Recommandations Appliquez ces atténuations pour réduire l'impact de cette menace.Vérifiez la carte de recommandations pour l'état de déploiement des atténuations surveillées. - Appliquer des mises à jour de sécurité aux solutions VPN vulnérables: - nécessite une authentification multi-facteurs pour l'accès des périphériques locaux, l'accès RDP et les connexions distantes via VPN.Utilisez des solutions sans mot de passe comme [Microsoft Authenticator] (https://www.microsoft.com/en-us/account/authenticator/).Pour plus de conseils, lisez sur: - [Configurer l'authentification multi-facteurs pour Office 365] (https://docs.microsoft.com/en-us/office365/admin/security-and-compliance/set-up-multi-factor-authentication?view=O365-mondial) - [Utilisez une vérification en deux étapes avec les comptes de consommation] (https://support.microsoft.com/en-us/help/12408/microsoft-account-how-to-use-setwo-tep-verrification) - Sécurité des ser | Malware Tool Vulnerability Threat | ||
 |
2024-07-16 23:01:56 | Fracture des données Trello: le piratage déverse des informations personnelles de millions d'utilisateurs Trello Data Breach: Hacker Dumps Personal Info of Millions of Users (lien direct) |
Le pirate derrière la violation de données Trello affirme que les données ont été volées en janvier 2024 et peuvent être & # 8230;
The hacker behind the Trello data breach claims the data was stolen in January 2024 and can be… |
Data Breach | ||
 |
2024-07-16 22:09:58 | Rite Aid indique que Breach expose les détails sensibles de 2,2 millions de clients Rite Aid says breach exposes sensitive details of 2.2 million customers (lien direct) |
Les données volées incluent les noms de clients, les adresses, les dates de naissance et les numéros de licence de Driver \\.
Stolen data includes customer names, addresses, birth dates, and driver\'s license numbers. |
|||
|
2024-07-16 21:54:25 | Le rapport de publication de la Linux Foundation et OpenSSF sur l'état de l'éducation dans le développement de logiciels sécurisés The Linux Foundation and OpenSSF Release Report on the State of Education in Secure Software Development (lien direct) |
Pas de details / No more details | |||
|
2024-07-16 21:43:36 | Sécurité du cloud, l'expertise de PowerShell émerge comme des compétences clés d'analyste SOC Cloud Security, PowerShell Expertise Emerge as Key SOC Analyst Skills (lien direct) |
Les analystes SOC devraient également cultiver des compétences telles que la manipulation des incidents et la réponse, la chasse aux menaces, la criminalistique numérique, le python et les scripts bash.
SOC analysts should also cultivate skills like incident handling and response, threat hunting, digital forensics, Python, and bash scripting. |
Threat Cloud | ||
|
2024-07-16 21:42:37 | Secureworks élève l'état de cybersécurité pour les clients du marché moyen avec une détection et une réponse gérées Secureworks Elevates State of Cybersecurity for Mid-Market Customers With Managed Detection and Response Offering (lien direct) |
Pas de details / No more details | |||
 |
2024-07-16 21:40:36 | GCP-2024-033 (lien direct) | Published: 2024-06-10Description Description Severity Notes The following vulnerabilities were discovered in the Linux kernel that can lead to a privilege escalation on Container-Optimized OS nodes:CVE-2022-23222 For instructions and more details, see the following bulletins: GKE security bulletin GKE on VMware security bulletin GKE on AWS security bulletin GKE on Azure security bulletin GKE on Bare Metal security bulletin High CVE-2022-23222 | |||
|
2024-07-16 21:40:36 | GCP-2024-043 (lien direct) | Published: 2024-07-16Description Description Severity Notes The following vulnerabilities were discovered in the Linux kernel that can lead to a privilege escalation on Container-Optimized OS and Ubuntu nodes:CVE-2024-26921 For instructions and more details, see the following bulletins: GKE security bulletin GDC software for VMware security bulletin GKE on AWS security bulletin GKE on Azure security bulletin GDC software for bare metal security bulletin High CVE-2024-26921 | |||
|
2024-07-16 21:40:36 | GCP-2024-041 (lien direct) | Published: 2024-07-08Description Description Severity Notes The following vulnerabilities were discovered in the Linux kernel that can lead to a privilege escalation on Container-Optimized OS and Ubuntu nodes:CVE-2023-52654CVE-2023-52656 For instructions and more details, see the following bulletins: GKE security bulletin GDC software for VMware security bulletin GKE on AWS security bulletin GKE on Azure security bulletin GDC software for bare metal security bulletin High CVE-2023-52654 CVE-2023-52656 | |||
|
2024-07-16 21:40:36 | GCP-2024-027 (lien direct) | Published: 2024-05-08Updated: 2024-05-09, 2024-05-15Description Description Severity Notes 2024-05-15 Update: Added patch versions for GKE Ubuntu node pools. 2024-05-09 Update: Corrected severity from Medium to High and clarified that GKE Autopilot clusters in the default configuration are not impacted. The following vulnerabilities were discovered in the Linux kernel that can lead to a privilege escalation on Container-Optimized OS and Ubuntu nodes:CVE-2024-26808 For instructions and more details, see the following bulletins: GKE security bulletin GKE on VMware security bulletin GKE on AWS security bulletin GKE on Azure security bulletin GKE on Bare Metal security bulletin High CVE-2024-26808 | |||
|
2024-07-16 21:40:36 | GCP-2024-026 (lien direct) | Published: 2024-05-07Updated: 2024-05-09Description Description Severity Notes 2024-05-09 Update: Corrected severity from Medium to High. The following vulnerabilities were discovered in the Linux kernel that can lead to a privilege escalation on Container-Optimized OS and Ubuntu nodes:CVE-2024-26643 For instructions and more details, see the following bulletins: GKE security bulletin GKE on VMware security bulletin GKE on AWS security bulletin GKE on Azure security bulletin GKE on Bare Metal security bulletin High CVE-2024-26643 | |||
|
2024-07-16 21:40:36 | GCP-2024-028 (lien direct) | Published: 2024-05-13Updated: 2024-05-22Description Description Severity Notes 2024-05-22 Update: Added patch versions for Ubuntu The following vulnerabilities were discovered in the Linux kernel that can lead to a privilege escalation on Container-Optimized OS and Ubuntu nodes:CVE-2024-26581 For instructions and more details, see the following bulletins: GKE security bulletin GKE on VMware security bulletin GKE on AWS security bulletin GKE on Azure security bulletin GKE on Bare Metal security bulletin High CVE-2024-26581 | |||
|
2024-07-16 21:40:36 | GCP-2024-039 (lien direct) | Published: 2024-06-28Description Description Severity Notes The following vulnerabilities were discovered in the Linux kernel that can lead to a privilege escalation on Container-Optimized OS and Ubuntu nodes:CVE-2024-26923 For instructions and more details, see the following bulletins: GKE security bulletin GDC software for VMware security bulletin GKE on AWS security bulletin GKE on Azure security bulletin GDC software for bare metal security bulletin High CVE-2024-26923 | |||
|
2024-07-16 21:40:36 | GCP-2024-024 (lien direct) | Published: 2024-04-25Description Description Severity Notes The following vulnerabilities were discovered in the Linux kernel that can lead to a privilege escalation on Container-Optimized OS and Ubuntu nodes:CVE-2024-26585 For instructions and more details, see the following bulletins: GKE security bulletin GKE on VMware security bulletin GKE on AWS security bulletin GKE on Azure security bulletin GKE on Bare Metal security bulletin High CVE-2024-26585 | |||
|
2024-07-16 21:40:36 | GCP-2024-034 (lien direct) | Published: 2024-06-11Updated: 2024-07-10Description Description Severity Notes 2024-07-10 Update: Added patch versions for Container-Optimized OS nodes running minor version 1.26 and 1.27 and added patch versions for Ubuntu nodes. The following vulnerabilities were discovered in the Linux kernel that can lead to a privilege escalation on Container-Optimized OS nodes:CVE-2024-26583 For instructions and more details, see the following bulletins: GKE security bulletin GKE on VMware security bulletin GKE on AWS security bulletin GKE on Azure security bulletin GKE on Bare Metal security bulletin High CVE-2024-26583 | |||
|
2024-07-16 21:40:36 | GCP-2024-030 (lien direct) | Published: 2024-05-15Description Description Severity Notes The following vulnerabilities were discovered in the Linux kernel that can lead to a privilege escalation on Container-Optimized OS and Ubuntu nodes:CVE-2023-52620 For instructions and more details, see the following bulletins: GKE security bulletin GKE on VMware security bulletin GKE on AWS security bulletin GKE on Azure security bulletin GKE on Bare Metal security bulletin High CVE-2023-52620 | |||
|
2024-07-16 21:40:36 | GCP-2024-029 (lien direct) | Published: 2024-05-14Description Description Severity Notes The following vulnerabilities were discovered in the Linux kernel that can lead to a privilege escalation on Container-Optimized OS and Ubuntu nodes:CVE-2024-26642 For instructions and more details, see the following bulletins: GKE security bulletin GKE on VMware security bulletin GKE on AWS security bulletin GKE on Azure security bulletin GKE on Bare Metal security bulletin High CVE-2024-26642 | |||
|
2024-07-16 21:40:36 | GCP-2024-018 (lien direct) | Published: 2024-03-12Updated: 2024-04-04, 2024-05-06Description Description Severity Notes 2024-05-06 Update: Added patch versions for GKE Ubuntu node pools. 2024-04-04 Update: Corrected minimum versions for GKE Container-Optimized OS node pools. The following vulnerabilities were discovered in the Linux kernel that can lead to a privilege escalation on Container-Optimized OS and Ubuntu nodes:CVE-2024-1085 For instructions and more details, see the following bulletins: GKE security bulletin GKE on VMware security bulletin GKE on AWS security bulletin GKE on Azure security bulletin GKE on Bare Metal security bulletin High CVE-2024-1085 | |||
|
2024-07-16 21:40:36 | GCP-2024-036 (lien direct) | Published: 2024-06-18Description Description Severity Notes The following vulnerabilities were discovered in the Linux kernel that can lead to a privilege escalation on Container-Optimized OS nodes:CVE-2024-26584 For instructions and more details, see the following bulletins: GKE security bulletin GKE on VMware security bulletin GKE on AWS security bulletin GKE on Azure security bulletin GKE on Bare Metal security bulletin High CVE-2024-26584 | |||
|
2024-07-16 21:40:36 | GCP-2024-042 (lien direct) | Published: 2024-07-15Description Description Severity Notes The following vulnerabilities were discovered in the Linux kernel that can lead to a privilege escalation on Container-Optimized OS and Ubuntu nodes:CVE-2024-26809 For instructions and more details, see the following bulletins: GKE security bulletin GDC software for VMware security bulletin GKE on AWS security bulletin GKE on Azure security bulletin GDC software for bare metal security bulletin High CVE-2024-26809 | |||
|
2024-07-16 21:40:36 | GCP-2024-044 (lien direct) | Published: 2024-07-16Description Description Severity Notes The following vulnerabilities were discovered in the Linux kernel that can lead to a privilege escalation on Container-Optimized OS and Ubuntu nodes:CVE-2024-36972 For instructions and more details, see the following bulletins: GKE security bulletin GDC software for VMware security bulletin GKE on AWS security bulletin GKE on Azure security bulletin GDC software for bare metal security bulletin High CVE-2024-36972 | |||
|
2024-07-16 21:40:36 | GCP-2024-038 (lien direct) | Published: 2024-06-26Description Description Severity Notes The following vulnerabilities were discovered in the Linux kernel that can lead to a privilege escalation on Container-Optimized OS and Ubuntu nodes:CVE-2024-26924 For instructions and more details, see the following bulletins: GKE security bulletin GDC software for VMware security bulletin GKE on AWS security bulletin GKE on Azure security bulletin GDC software for bare metal security bulletin High CVE-2024-26924 | |||
|
2024-07-16 21:40:36 | GCP-2024-035 (lien direct) | Published: 2024-06-12Description Description Severity Notes The following vulnerabilities were discovered in the Linux kernel that can lead to a privilege escalation on Container-Optimized OS and Ubuntu nodes:CVE-2024-26584 For instructions and more details, see the following bulletins: GKE security bulletin GKE on VMware security bulletin GKE on AWS security bulletin GKE on Azure security bulletin GKE on Bare Metal security bulletin High CVE-2024-26584 | |||
|
2024-07-16 21:40:36 | GCP-2024-017 (lien direct) | Published: 2024-03-06Description Description Severity Notes The following vulnerabilities were discovered in the Linux kernel that can lead to a privilege escalation on Container-Optimized OS and Ubuntu nodes:CVE-2023-3611 For instructions and more details, see the following bulletins: GKE security bulletin GKE on VMware security bulletin GKE on AWS security bulletin GKE on Azure security bulletin GKE on Bare Metal security bulletin High CVE-2023-3611 | |||
|
2024-07-16 21:40:36 | GCP-2024-014 (lien direct) | Published: 2024-02-26Description Description Severity Notes The following vulnerabilities were discovered in the Linux kernel that can lead to a privilege escalation on Container-Optimized OS and Ubuntu nodes:CVE-2023-3776 For instructions and more details, see the following bulletins: GKE security bulletin GKE on VMware security bulletin GKE on AWS security bulletin GKE on Azure security bulletin GKE on Bare Metal security bulletin High CVE-2023-3776 | |||
|
2024-07-16 21:40:36 | GCP-2024-013 (lien direct) | Published: 2024-02-27Description Description Severity Notes The following vulnerabilities were discovered in the Linux kernel that can lead to a privilege escalation on Container-Optimized OS and Ubuntu nodes:CVE-2023-3610 For instructions and more details, see the following bulletins: GKE security bulletin GKE on VMware security bulletin GKE on AWS security bulletin GKE on Azure security bulletin GKE on Bare Metal security bulletin High CVE-2023-3610 |
To see everything:
