eSecurity Planet

OCTOBER 10, 2023

A vulnerability in the HTTP/2 protocol dubbed “Rapid Reset” has led to record DDoS attacks on web servers in recent months. “There are botnets today that are made up of hundreds of thousands or millions of machines,” Cloudflare said in a technical blog post on the vulnerability ( CVE-2023-44487 ).

DDOS 102

DDOS Cybersecurity Security Defenses Software 102

eSecurity Planet

AUGUST 12, 2023

Trellix researchers are disclosing a number of critical data center power management platform vulnerabilities at DEFCON 2023 today. effort to secure critical infrastructure. CVE-2023-3265: Improper Neutralization of Escape, Meta, or Control Sequences (Auth Bypass; CVSS 7.2) CVE-2023-3261: Buffer Overflow (DOS; CVSS 7.5)

Authentication 98

Authentication Spyware DDOS Cybersecurity 98

eSecurity Planet

MARCH 19, 2024

The problem: Cisco announced patches for 10 vulnerabilities (one critical, four high, five medium) affecting its IOS XR Software, SD-WAN vMaange, and Secure Client products. The vulnerability, CVE-2023-48788 , earns a critical CVSS score of 9.8 The fix: Upgrade to Kubernetes versions 1.28.4 or later to fix the flaw.

Authentication 117

Authentication VPN Software DDOS 117