Joomla XSS Bugs Open Millions of Websites to RCE

Improper content filtering in a core function allows multiple paths to exploitation for CVE-2024-21726.


https://www.darkreading.com/application-...bsites-rce

AI-Generated Patches Could Ease Developer, Operations Workload

Using information from a common technique for finding vulnerabilities, Google's Gemini LLM can produce patches for 15% of such bugs. And it's not the only way to help automate bug fixing.


https://www.darkreading.com/application-...s-workload

Library Cyber Defenses Are Falling Down

Librarians are being asked to defend themselves online against sophisticated and complex attacks. It's an unequal fight.


https://www.darkreading.com/cloud-securi...lling-down

Iranian APTs Dress Up as Hacktivists for Disruption, Influence Ops

Iran has taken a page from the Russian playbook: Passing off military groups as civilians for the sake of PR and plausible deniability.


https://www.darkreading.com/threat-intel...luence-ops

How CISOs Balance Business Growth, Security in Cyber-Threat Landscape

Collaboration, care, and proactive planning need to be part of CISO toolboxes as worsening threat environments become the new normal. CISOs need to adjust processes so business innovation can continue.


https://www.darkreading.com/vulnerabilit...-landscape

Critical Vulnerability in VMware vSphere Plug-in Allows Session Hijacking

Admins are urged to remove vSphere's vulnerable Enhanced Authentication Plug-in, which was discontinued nearly three years ago but is still widely in use.


https://www.darkreading.com/application-...-hijacking

DoT, White House Tackle the Chinese Threat to US Port Security

New investments and Coast Guard authority aim to curb the alleged threat that Chinese vendors pose to American maritime security.


https://www.darkreading.com/ics-ot-secur...t-security

El Al Flight Crew Suffers Midflight Communication Disruption

Though the incident took place over a known Houthi area, some say this incident was at the hands of a Somali group, based on frequent communication disruptions in the country.


https://www.darkreading.com/endpoint-sec...disruption

Critical ConnectWise RMM Bug Poised for Exploitation Avalanche

Two days after disclosure, most instances of the remote desktop tool remain unpatched, while cyberattackers have started in-the-wild exploitation — and researchers warn it could get ugly, fast.


https://www.darkreading.com/remote-workf...-avalanche

'VoltSchemer' Hack Allows Wireless Charger Takeovers

Researchers tested their theory on nine chargers, each different and available to consumers, and found them all vulnerable to their attacks.


https://www.darkreading.com/vulnerabilit...-takeovers