article thumbnail

Experts warn of mass exploitation of critical PHP flaw CVE-2024-4577

Security Affairs

Threat actors exploit PHP flaw CVE-2024-4577 for remote code execution. GreyNoise researchers warn of a large-scale exploitation of a critical vulnerability, tracked as CVE-2024-4577 (CVSS 9.8), in PHP. The flaw CVE-2024-4577 (CVSS score: 9.8) Over 1,000 attacks detected globally. is a PHP-CGI OS Command Injection Vulnerability.

DDOS 104
article thumbnail

Artificial Intelligence meets real talk at IRISSCON 2024

BH Consulting

There was no doubting the one topic on almost everyone’s minds at IRISSCON 2024: AI. AI alleviates alert fatigue In a similar vein, Forescout’s VP of security intelligence Rik Ferguson talked about how AI can help to manage the deluge of log information that security professionals often face. Drowning in data?

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Multiple threat actors exploit PHP flaw CVE-2024-4577 to deliver malware

Security Affairs

Multiple threat actors exploit a recently disclosed security PHP flaw CVE-2024-4577 to deliver multiple malware families. The flaw CVE-2024-4577 (CVSS score: 9.8) Cybersecurity and Infrastructure Security Agency (CISA) added the the vulnerability to its Known Exploited Vulnerabilities (KEV) catalog.

Malware 139
article thumbnail

Report Unveils Cybersecurity Leaks in U.S. Drinking Water Systems

SecureWorld News

The report, released on November 13, 2024, underscores the urgent need for increased security measures to protect critical infrastructure. Neglecting security measures for ICS can indeed pose a significant threat. "OT/ICS The report examines drinking water systems with populations serving 50,000 people or more. In 2023, the U.S.

article thumbnail

A new Mirai botnet variant targets DigiEver DS-2105 Pro DVRs

Security Affairs

In November 2024, the Akamai Security Intelligence Research Team (SIRT) observed increased activity targeting the URI /cgi-bin/cgi_main.cgi , linked to a Mirai-based malware campaign exploiting an unassigned RCE vulnerability in DVR devices, including DigiEver DS-2105 Pro. ” reads the analysis published by Akamai.

article thumbnail

Aquabotv3: The Mirai-Based Botnet Exploiting CVE-2024-41710 for DDoS Attacks

Penetration Testing

The Akamai Security Intelligence and Response Team (SIRT) has identified Aquabotv3, a new and more sophisticated variant of The post Aquabotv3: The Mirai-Based Botnet Exploiting CVE-2024-41710 for DDoS Attacks appeared first on Cybersecurity News.

DDOS 87
article thumbnail

Botnet Exploits Old GeoVision IoT Devices via CVE-2024-6047 & CVE-2024-11120

Penetration Testing

The Akamai Security Intelligence and Response Team (SIRT) has identified active exploitation of two command injection vulnerabilities The post Botnet Exploits Old GeoVision IoT Devices via CVE-2024-6047 & CVE-2024-11120 appeared first on Daily CyberSecurity.

IoT 70