helpnetsecurity – Control failures are behind a growing number of cybersecurity incidents
Data from a survey of 1,200 enterprise security leaders reveals that an increase in tools and...
Read More
Category: Vulnerabilities
nakedsecurity – Check your patches – public exploit now out for critical Exchange bug
naked security by SOPHOS At the start of this month, CVE-2021-42321 was technically...
Read More
thehackernews – Eavesdropping Bugs in MediaTek Chips Affect 37% of All Smartphones and IoT Globally
The Hacker News Multiple security weaknesses have been disclosed in MediaTek system-on-chips...
Read More
helpnetsecurity – After failed fix, researcher releases exploit for Windows EoP flaw (CVE-2021-41379)
A local elevation of privilege vulnerability (CVE-2021-41379) in the Windows Installer that...
Read More
darkreading – What You Need to Know — or Remember — About Web Shells
What’s old is new again as Web shell malware becomes the latest attack vector in widespread...
Read More
netspi – CVE-2021-42306 CredManifest: App Registration Certificates Stored in Azure Active Directory
NetSPI logo Introduction Occasionally, we find something in an environment that just looks off....
Read More
crn – Iranian Hackers Exploiting Microsoft, Fortinet Vulnerabilities: Feds
‘The FBI and CISA have observed Iranian government-sponsored APT actors leverage Microsoft...
Read More
threatpost – FBI: FatPipe VPN Zero-Day Exploited by APT for 6 Months
THREATPOST The bureau’s flash alert said an APT has been exploiting the flaw to compromise FatPipe...
Read More
thehackernews – 11 Malicious PyPI Python Libraries Caught Stealing Discord Tokens and Installing Shells
The Hacker News Cybersecurity researchers have uncovered as many as 11 malicious Python packages...
Read More
thehackernews – U.S., U.K. and Australia Warn of Iranian Hackers Exploiting Microsoft, Fortinet Flaws
The Hacker News Cybersecurity agencies from Australia, the U.K., and the U.S. on...
Read More
cisomag – Zero-Day Exploits on High Demand on Dark Web
Several cybercriminal groups are found buying zero-day vulnerabilities and leasing...
Read More
BotenaGo – A New Malware Targeting Millions of IoT Devices
Recently discovered BotenaGo malware reportedly uses the Go programming language and exploits...
Read More
