Morning Overview on MSN

CISA added the actively exploited Windows Netlogon flaw to its must-patch catalog, ordering federal agencies to fix domain controllers now

Federal agencies running Windows domain controllers face a hard deadline after the Cybersecurity and Infrastructure Security ...
SecurityWeek

Critical Vulnerability in HP VoIP Phones Enables Enterprise Network Breaches

A stack-based buffer overflow vulnerability in HP VoIP phones allows remote attackers to execute arbitrary code with root ...
Bleeping Computer

Ivanti Avalanche impacted by critical pre-auth stack buffer overflows

Two stack-based buffer overflows collectively tracked as CVE-2023-32560 impact Ivanti Avalanche, an enterprise mobility management (EMM) solution designed to manage, monitor, and secure a wide range ...
GamingOnLinux

X.Org Security Advisory released for 9 new vulnerabilities in X.Org X server and Xwayland

Here we are again - X.Org X server and Xwayland have new security issues that have been revealed and patched in new versions ...
Threat Post

Series of Buffer Overflows Plague Many Yokogawa ICS Products

There is a series of stack buffer overflows in nearly 20 ICS products manufactured by Japanese vendor Yokogawa that can lead to remote code execution. The bugs affect a long list of the company’s ...
Threat Post

Honeywell PoS Software Vulnerable to Stack Buffer Overflows

There are stack buffer overflows in two components of a Honeywell point-of-sale software package that can allow attackers to run arbitrary code on vulnerable systems. The vulnerabilities lie in the ...