View Ridge Security
Back to Cyber Hose

Check Point, Kaspersky, Tanium Patch Product Vulnerabilities

Major security vendors patch product flaws, an AI agent breaches a Spanish org, and RatHat Android malware abuses ADB for persistence.

🕵️ RESEARCH & DEEP DIVES

  • MIND Secures $72 Million for AI-Powered DLP — SecurityWeek

  • Check Point, Kaspersky, Tanium Patch Product Vulnerabilities — SecurityWeek

  • HTTP QUERY Method: The Grey Zone Between GET And POST., (Fri, Sep 18th) — SANS ISC

  • AI Agent Breaches Spanish Organization, Modifies Personal Data — Dark Reading

  • RatHat Android Malware Abuses ADB to Retain Shell Access After Uninstall — The Hacker News

  • QTSAn improper authentication vulnerability has been reported to affect produ... — CVE ThreatInt

  • QcalAgentA cross-site scripting (XSS) vulnerability has been reported to affe... — CVE ThreatInt

  • Booking Calendar through 11.8.2 - Reflected Cross-Site Scripting via 'options' Par... — CVE ThreatInt

  • EmbedPress through 4.6.5 - Reflected Cross-Site Scripting via 'hash' and 'unique' ... — CVE ThreatInt

  • Custom Twitter Feeds through 2.8.0 - Authenticated (Contributor+) Stored Cross-Sit... — CVE ThreatInt

  • Auto Upload Images through 3.3.2 - Authenticated (Contributor+) Server-Side Reques... — CVE ThreatInt

  • Booking Calendar through 11.8.2 - Authenticated (Editor+) Privilege Escalation to ... — CVE ThreatInt

  • Magazine Blocks through 1.8.6 - Missing Authorization to Authenticated (Contributo... — CVE ThreatInt

  • Download Manager through 3.3.68 - Insecure Direct Object Reference to Authenticate... — CVE ThreatInt

  • Magazine Blocks through 1.8.6 - Authenticated (Contributor+) Stored Cross-Site Scr... — CVE ThreatInt

  • Foxtool All-in-One: Contact chat button, Custom login, Media optimize images ... — CVE ThreatInt

  • InfiniteWP Client through 1.13.9 - Authenticated (Admin+) SQL Injection via 'iwp_g... — CVE ThreatInt

  • Clean Login before 1.19 - Unauthenticated CAPTCHA Bypass via Empty Session Compari... — CVE ThreatInt

  • Clean Login before 1.19 - Unauthenticated Account Creation with Registration Disab... — CVE ThreatInt

  • All Bootstrap Blocks 1.3.20 - 1.3.31 - Contributor+ LFI via lightspeed Block ... — CVE ThreatInt

  • WP Ghost (Hide My WP Ghost) before 7.0.11 - Unauthenticated URL Hiding Bypass via ... — CVE ThreatInt

  • Hackers Poison Movie Torrents With MovieReaper Malware That Uses Solana for C2 — Cyber Security News

Need help assessing your exposure?

Start with the free Posture Self-Check to see where you stand against the current threat landscape.

Free Posture Self-Check