nakedsecurity – Check your patches – public exploit now out for critical Exchange bug
naked security by SOPHOS At the start of this month, CVE-2021-42321 was technically...
Read More
Category: IT Vendors
bleepingcomputer – Microsoft Exchange servers hacked in internal reply-chain attacks
BLEEPING COMPUTER Threat actors are hacking Microsoft Exchange servers using ProxyShell and...
Read More
crn – Iranian Hackers Exploiting Microsoft, Fortinet Vulnerabilities: Feds
‘The FBI and CISA have observed Iranian government-sponsored APT actors leverage Microsoft...
Read More
thehackernews – U.S., U.K. and Australia Warn of Iranian Hackers Exploiting Microsoft, Fortinet Flaws
The Hacker News Cybersecurity agencies from Australia, the U.K., and the U.S. on...
Read More
theregister – ChaosDB: Infosec bods could pull anyone’s plaintext Azure Cosmos DB keys at will from Microsoft admin tools
And they had a wildcard cert too. Still feeling secure? The Register An astonishing piece of...
Read More
theregister – Let us give thanks that this November, Microsoft has given us just 55 security fixes, two of which are for actively exploited flaws
Light load has infosec bods wondering what awaits next month The register As the US season of...
Read More
helpnetsecurity – Microsoft patches actively exploited Exchange, Excel zero-days (CVE-2021-42321, CVE-2021-42292)
It’s a light November 2021 Patch Tuesday from Microsoft: 55 fixed CVEs, of which two are zero-days...
Read More
threatpost – Proofpoint Phish Harvests Microsoft O365, Google Logins
THREATPOST A savvy campaign impersonating the cybersecurity company skated past Microsoft email...
Read More
theregister – Microsoft rolls out $3-a-user Defender for small biz types
Endpoint security for firms with under 300 staffers The Register Sniffing the wind after the large...
Read More
helpnetsecurity – Rooting malware discovered on Google Play, Samsung Galaxy Store
HELPNETSECURITY Researchers have discovered 19 mobile apps carrying rooting malware on official...
Read More
nakedsecurity – Microsoft documents “SHROOTLESS” hack patched in latest Apple updates
naked security by SOPHOS When we wrote about Apple’s latest security patches earlier...
Read More
darkreading – Sneaky Android Trojan Siphons Millions Using Premium SMS
More than 200 applications on the Google Play store have, until recently, allowed cybercriminals...
Read More
