securityaffairs – The hidden C2: Lampion trojan release 212 is on the rise and using a C2 server for two years
Figure 1: Emails templates are delivering malicious PDFs impersonating banking organizations in...
Read More
Category: Vulnerabilities
thehackernews – New Infinite Loop Bug in OpenSSL Could Let Attackers Crash Remote Servers
The Hacker News The maintainers of OpenSSL have shipped patches to resolve a high-severity security flaw in its software library that could lead to a denial-of-service (DoS) condition when parsing certificates. Tracked...
Read More
theregister – Linux botnet exploits Log4j flaw to hijack Arm, x86 systems
On a plus side, their code’s not very good The Register A new Linux botnet is using the...
Read More
threatpost – Most QNAP NAS Devices Affected by ‘Dirty Pipe’ Linux Flaw
threatpost There are currently no mitigations for the severe Linux kernel bug, QNAP warned on...
Read More
thehackernews – Why Enterprise Threat Mitigation Requires Automated, Single-Purpose Tools
The Hacker News As much as threat mitigation is to a degree a specialist task involving...
Read More
helpnetsecurity – The importance of building in security during software development
HELPNETSECURITY Checkmarx released the UK findings of its report which found that 45% of...
Read More
CISO2CISO – APACHE LOG4J – THE MOST IMPORTANT VULNERABILITY AND DISTRACTION OF 2021
CISO2CISO – APACHE LOG4J – THE MOST IMPORTANT VULNERABILITY AND DISTRACTION OF 2021 We...
Read More
helpnetsecurity – Control failures are behind a growing number of cybersecurity incidents
Data from a survey of 1,200 enterprise security leaders reveals that an increase in tools and...
Read More
nakedsecurity – Check your patches – public exploit now out for critical Exchange bug
naked security by SOPHOS At the start of this month, CVE-2021-42321 was technically...
Read More
thehackernews – Eavesdropping Bugs in MediaTek Chips Affect 37% of All Smartphones and IoT Globally
The Hacker News Multiple security weaknesses have been disclosed in MediaTek system-on-chips...
Read More
helpnetsecurity – After failed fix, researcher releases exploit for Windows EoP flaw (CVE-2021-41379)
A local elevation of privilege vulnerability (CVE-2021-41379) in the Windows Installer that...
Read More
darkreading – What You Need to Know — or Remember — About Web Shells
What’s old is new again as Web shell malware becomes the latest attack vector in widespread...
Read More
