Aggregator

4th May – Threat Intelligence Report

Check Point Research
1 week 5 days ago

For the latest discoveries in cyber research for the week of 4th May, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Medtronic, a global medical device maker, has disclosed a cyberattack on its corporate IT systems. An unauthorized party accessed data, while the company reported no impact on products, operations, or financial systems. Threat […]

The post 4th May – Threat Intelligence Report appeared first on Check Point Research.

urias

CVE-2026-24072 | Apache HTTP Server up to 2.4.66 .htaccess privileges management

VulDB Recent Entries
1 week 5 days ago
A vulnerability marked as problematic has been reported in Apache HTTP Server up to 2.4.66. Impacted is an unknown function of the component .htaccess Handler. The manipulation leads to improper privilege management. This vulnerability is traded as CVE-2026-24072. An attack has to be approached locally. There is no exploit available. It is suggested to upgrade the affected component.
vuldb.com

CVE-2026-33857 | Apache HTTP Server up to 2.4.66 mod_proxy_ajp out-of-bounds

VulDB Recent Entries
1 week 5 days ago
A vulnerability identified as critical has been detected in Apache HTTP Server up to 2.4.66. This vulnerability affects unknown code of the component mod_proxy_ajp. Performing a manipulation results in out-of-bounds read. This vulnerability is reported as CVE-2026-33857. The attack is possible to be carried out remotely. No exploit exists. You should upgrade the affected component.
vuldb.com

CVE-2026-7482 | Ollama up to 0.17.0 GGUF Model File Loader /api/create WriteTo out-of-bounds

VulDB Recent Entries
1 week 5 days ago
A vulnerability categorized as critical has been discovered in Ollama up to 0.17.0. This affects the function WriteTo of the file /api/create of the component GGUF Model File Loader. Such manipulation leads to out-of-bounds read. This vulnerability is documented as CVE-2026-7482. The attack can be executed remotely. There is not any exploit available. It is advisable to upgrade the affected component.
vuldb.com

CVE-2025-58074 | Gen Digital Norton Secure VPN 6.5.0.59 Installation mount point (TALOS-2025-2276)

VulDB Recent Entries
1 week 5 days ago
A vulnerability was found in Gen Digital Norton Secure VPN 6.5.0.59. It has been classified as critical. Affected is an unknown function of the component Installation Handler. The manipulation leads to insecure operation on windows junction / mount point. This vulnerability is listed as CVE-2025-58074. The attack must be carried out locally. There is no available exploit.
vuldb.com

DOJ Sentences Two Americans to Prison for ALPHV BlackCat Attacks on U.S. Victims

Cyber Security News
1 week 5 days ago

Two American cybersecurity professionals were sentenced to four years each in federal prison on April 30, 2026, for carrying out ransomware attacks against multiple U.S. businesses using the ALPHV BlackCat ransomware. The U.S. Department of Justice confirmed the sentencing of Ryan Goldberg, 40, of Georgia, and Kevin Martin, 36, of Texas, both of whom had […]

The post DOJ Sentences Two Americans to Prison for ALPHV BlackCat Attacks on U.S. Victims appeared first on Cyber Security News.

Tushar Subhra Dutta

Managed ad