SSRF in Eclipse Che dashboard resolver endpoint fixed in 7.122.0
Eclipse Che versions 7.79.0 to 7.121.0 had an SSRF flaw allowing internal network access, fixed in 7.122.0 with no known exploits.
In this digest
Security Intel Feed
Cyber Hose
Page 40 of 93
Read digest
WordPress Unbounce Landing Pages plugin has broken access control flaw
A high-severity missing authorization flaw affects all versions of the Unbounce Landing Pages WordPress plugin through 1.1.4.
In this digest
Springfield Public Schools cyber incident closes schools
Springfield Public Schools closed after a cyber incident, as reported on r/cybersecurity.
In this digest
DEF CON 34: AI customer service agents tricked into leaking secrets
DEF CON 34 research reveals AI chatbot attacks, plus ASUS driver flaws and a novel headphone audio recovery technique.
In this digest
Critical SAP GUI for Java Flaw Allows Command Execution
A critical SAP GUI for Java flaw enables low-privileged attackers to execute arbitrary commands on victims' machines.
In this digest
Jaguar Land Rover hit by cyberattack
Jaguar Land Rover suffers a cyberattack, a crypto exchange is hacked, and a critical path traversal CVE in knowns highlights this digest.
In this digest
Dutch police release suspect's voice in ShinyHunters-linked Odido hack
Dutch police published a voice reenactment of a suspect in the ShinyHunters-linked Odido breach affecting 6.2 million customers, plus JetBrains and Adobe flaws.
In this digest
JetBrains YouTrack Cross-Tenant GitHub App Token Theft
A critical cross-tenant token theft vulnerability in JetBrains YouTrack affects many users and raises serious security concerns.
In this digest
Magento StyleSmuggler zero-day exploited to deploy Linux backdoor
A zero-day vulnerability in Magento StyleSmuggler is actively exploited to install a Linux backdoor.
In this digest
Mathspace data breach affects over 1 million users in Australia, NZ
A CVSS 10.0 Metabase flaw enabled a breach of over 1 million Mathspace users, plus a 389 Directory Server heap overflow and a ScreenConnect flaw.
In this digest
Assess Your Exposure
Start with the free Posture Self-Check to see where you stand against the current threat landscape.
Free Posture Self-Check