Attackers now ready to exploit how things work, rather than just break them, says Oracle support expert
Read full article at The Register ↗Researchers have identified a chained SharePoint sequence vulnerability that enables authentication bypass and is already being exploited in active attacks. This latest threat represents part of an ongoing pattern of SharePoint vulnerabilities being targeted by threat actors in the wild.
CISA has ordered federal agencies to remediate an exploited vulnerability in Zimbra collaboration software. The vendor delayed patching the flaw for nearly a month following its initial disclosure, creating an extended window of exposure for affected organizations.
Attackers can obfuscate IP addresses by using hostnames to bypass security filters that target specific IP strings, a technique particularly relevant for exploiting SSRF vulnerabilities against cloud metadata services. Since most software accepts both IP addresses and hostnames interchangeably, filtering based solely on IP strings like 169.254.169.254 can be circumvented by resolving the equivalent hostname instead. Security teams should implement filtering strategies that account for hostname resolution rather than relying only on IP-based blocklists.
Oasis Security discovered a vulnerability in NVIDIA NemoClaw that enables an attacker-controlled webpage to gain unauthenticated access to a local Ollama instance and inject malicious instructions directly into the AI model. This technique allows adversaries to compromise AI agents by poisoning the underlying model through a web-based attack vector. The vulnerability was disclosed to NVIDIA's Product Security team prior to public release.