all InfoSec news logo
all InfoSec news - Your InfoSec news aggregator
Log in Sign up
all InfoSec news

Over 1,400 CrushFTP servers vulnerable to actively exploited bug

Add to bookmarks
April 25, 2024, 4:40 p.m. | Sergiu Gatlan

BleepingComputer www.bleepingcomputer.com

​Over 1,400 CrushFTP servers exposed online were found vulnerable to attacks currently targeting a critical severity server-side template injection (SSTI) vulnerability previously exploited as a zero-day. [...]

actively exploited attacks bug critical crushftp exploited exposed found injection security server servers severity ssti targeting template template injection vulnerability vulnerable zero-day

Visit resource

More from www.bleepingcomputer.com / BleepingComputer

Ransomware gang targets Windows admins via PuTTy, WinSCP malvertising 11 hours ago | www.bleepingcomputer.com
administrators ads download fake +13
Android malware Grandoreiro returns after police disruption 15 hours ago | www.bleepingcomputer.com
accounts android android banking trojan android malware +16
Banking malware Grandoreiro returns after police disruption 15 hours ago | www.bleepingcomputer.com
accounts banking banking malware banking trojan +14
The Week in Ransomware - May 17th 2024 - Mailbombing is back 1 day, 8 hours ago | www.bleepingcomputer.com
attention back breachforums data +10
Microsoft to start enforcing Azure multi-factor authentication in July 1 day, 11 hours ago | www.bleepingcomputer.com
authentication azure factor july +8
SEC: Financial orgs have 30 days to send data breach notifications 1 day, 13 hours ago | www.bleepingcomputer.com
breach breach notifications data data breach +14
US arrests suspects behind $73M ‘pig butchering’ laundering scheme 1 day, 14 hours ago | www.bleepingcomputer.com
arrests charged crime cryptocurrency +11
WebTPA data breach impacts 2.4 million insurance policyholders 1 day, 15 hours ago | www.bleepingcomputer.com
breach data data breach department +8
Five charged for cyber schemes to benefit North Korea's weapons program 2 days, 10 hours ago | www.bleepingcomputer.com
charged cyber department generated +14

Jobs in InfoSec / Cybersecurity

Post a Job Search Talent

Information Security Engineers

@ D. E. Shaw Research | New York City
View on infosec-jobs.com

Technology Security Analyst

@ Halton Region | Oakville, Ontario, Canada
View on infosec-jobs.com

Senior Cyber Security Analyst

@ Valley Water | San Jose, CA
View on infosec-jobs.com

Sr. Staff Firmware Engineer – Networking & Firewall

@ Axiado | Bengaluru, India
View on infosec-jobs.com

Compliance Architect / Product Security Sr. Engineer/Expert (f/m/d)

@ SAP | Walldorf, DE, 69190
View on infosec-jobs.com

SAP Security Administrator

@ FARO Technologies | EMEA-Portugal
View on infosec-jobs.com