Aggregator

Acronis MDR by TRU brings 24/7 managed detection and response to MSPs

Help Net Security
1 day 13 hours ago

Acronis has announced the launch of Acronis MDR by Acronis TRU, a globally available 24/7/365 managed detection and response (MDR) service. Built specifically for managed service providers (MSPs) of all sizes, the service provides threat detection, incident response, and cyber resilience powered by the Acronis Threat Research Unit (TRU). With this offering, MSPs can expand their security capabilities and deliver scalable protection without the complexity or cost of operating an in-house security operations center. As … More →

The post Acronis MDR by TRU brings 24/7 managed detection and response to MSPs appeared first on Help Net Security.

Industry News

CVE-2026-5736 | PowerJob 5.1.0/5.1.1/5.1.2 detailPlus Endpoint InstanceController.java customQuery sql injection (Issue 1167)

VulDB Recent Entries
1 day 14 hours ago
A vulnerability was found in PowerJob 5.1.0/5.1.1/5.1.2. It has been classified as critical. Impacted is an unknown function of the file powerjob-server/powerjob-server-starter/src/main/java/tech/powerjob/server/web/controller/InstanceController.java of the component detailPlus Endpoint. The manipulation of the argument customQuery leads to sql injection. This vulnerability is referenced as CVE-2026-5736. Remote exploitation of the attack is possible. Furthermore, an exploit is available. The project was informed of the problem early through an issue report but has not responded yet.
vuldb.com

CVE-2026-35554 | Apache Kafka Clients up to 3.9.1/4.0.1/4.1.1 Producer Message use after free

VulDB Recent Entries
1 day 14 hours ago
A vulnerability was found in Apache Kafka Clients up to 3.9.1/4.0.1/4.1.1 and classified as critical. This issue affects some unknown processing of the component Producer Message Handler. Executing a manipulation can lead to use after free. The identification of this vulnerability is CVE-2026-35554. The attack may be launched remotely. There is no exploit available. It is suggested to upgrade the affected component.
vuldb.com

CVE-2026-22679 | Weaver Network e-cology 10.0/2026-03-31 POST Request method interfaceName/methodName missing authentication (EUVD-2026-19607)

VulDB Recent Entries
1 day 14 hours ago
A vulnerability labeled as critical has been found in Weaver Network e-cology 10.0/2026-03-31. The impacted element is an unknown function of the file /papi/esearch/data/devops/dubboApi/debug/method of the component POST Request Handler. Such manipulation of the argument interfaceName/methodName leads to missing authentication. This vulnerability is documented as CVE-2026-22679. The attack can be executed remotely. Additionally, an exploit exists. The affected component should be upgraded.
vuldb.com

CVE-2026-22666 | Dolibarr ERP CRM up to 23.0.1 dol_eval_standard eval injection (EUVD-2026-19606)

VulDB Recent Entries
1 day 14 hours ago
A vulnerability identified as problematic has been detected in Dolibarr ERP CRM up to 23.0.1. The affected element is the function dol_eval_standard. This manipulation causes improper neutralization of directives in dynamically evaluated code. This vulnerability is registered as CVE-2026-22666. Remote exploitation of the attack is possible. No exploit is available. It is recommended to apply a patch to fix this issue.
vuldb.com

CVE-2021-4473 | Beijing Topsec Network Security Tianxin Internet Behavior Management System prior 4.0.0.7_20210716.180815 Reporter objClass os command injection (CNVD-2021-41972 / EUVD-2021-34776)

VulDB Recent Entries
1 day 14 hours ago
A vulnerability categorized as critical has been discovered in Beijing Topsec Network Security Tianxin Internet Behavior Management System. Impacted is an unknown function of the component Reporter Component. The manipulation of the argument objClass results in os command injection. This vulnerability is cataloged as CVE-2021-4473. The attack may be launched remotely. There is no exploit available. It is advisable to upgrade the affected component.
vuldb.com

Fast-moving Storm-1175 uses new exploits to breach networks and drop Medusa

Security Affairs
1 day 14 hours ago
China-based actor Storm-1175 runs fast ransomware attacks, exploiting new flaws to breach systems and quickly deploy Medusa ransomware. China-based actor Storm-1175 carries out fast, financially driven ransomware attacks by exploiting newly disclosed vulnerabilities before organizations patch them. The group targets exposed systems and quickly moves from initial access to data theft and Medusa ransomware deployment, […]
Pierluigi Paganini

Managed ad