‼ CVE-2020-3998 ‼
📖 Read
via "National Vulnerability Database".
VMware Horizon Client for Windows (5.x prior to 5.5.0) contains an information disclosure vulnerability. A malicious attacker with local privileges on the machine where Horizon Client for Windows is installed may be able to retrieve hashed credentials if the client crashes.📖 Read
via "National Vulnerability Database".
❌ COVID-19 Vaccine-Maker Hit with Cyberattack, Data Breach ❌
📖 Read
via "Threat Post".
Dr. Reddy's, the contractor for Russia’s “Sputinik V” COVID-19 vaccine and a major generics producer, has had to close plants and isolate its data centers.📖 Read
via "Threat Post".
Threat Post
COVID-19 Vaccine-Maker Hit with Cyberattack, Data Breach
Dr. Reddy's, the contractor for Russia’s “Sputinik V” COVID-19 vaccine and a major generics producer, has had to close plants and isolate its data centers.
🦿 75% of all 56 US states and territories show signs of vulnerable election IT infrastructure, report finds 🦿
📖 Read
via "Tech Republic".
The report comes as officials in Georgia revealed more information about a ransomware attack that affected a digital voter database.📖 Read
via "Tech Republic".
TechRepublic
75% of all 56 US states and territories show signs of vulnerable election IT infrastructure, report finds
The report comes as officials in Georgia revealed more information about a ransomware attack that affected a digital voter database.
❌ Georgia Election Data Hit in Ransomware Attack ❌
📖 Read
via "Threat Post".
With Election Day approaching, local governments need to be prepared for malware attacks on election infrastructure.📖 Read
via "Threat Post".
Threat Post
Georgia Election Data Hit in Ransomware Attack
With Election Day approaching, local governments need to be prepared for malware attacks on election infrastructure.
❌ Election Security: Beyond Mail-In Voting ❌
📖 Read
via "Threat Post".
There are many areas of the election process that criminal hackers can target to influence election results.📖 Read
via "Threat Post".
Threat Post
Election Security: Beyond Mail-In Voting
There are many areas of the election process that criminal hackers can target to influence election results.
❌ Louisiana Calls Out National Guard to Fight Ransomware Surge ❌
📖 Read
via "Threat Post".
An investigation showed a custom backdoor RAT and the Emotet trojan in the networks of municipal victims of the attacks.📖 Read
via "Threat Post".
Threat Post
Louisiana Calls Out National Guard to Fight Ransomware Surge
An investigation showed a custom backdoor RAT and the Emotet trojan in the networks of municipal victims of the attacks.
🕴 Flurry of Warnings Highlight Cyber Threats to US Elections 🕴
📖 Read
via "Dark Reading".
FBI and intelligence officials issue fresh warnings about election interference attempts by Iranian and Russian threat actors.📖 Read
via "Dark Reading".
Dark Reading
Flurry of Warnings Highlight Cyber Threats to US Elections
FBI and intelligence officials issue fresh warnings about election interference attempts by Iranian and Russian threat actors.
‼ CVE-2020-25483 ‼
📖 Read
via "National Vulnerability Database".
An arbitrary command execution vulnerability exists in the fopen() function of file writes of UCMS v1.4.8, where an attacker can gain access to the server.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-24848 ‼
📖 Read
via "National Vulnerability Database".
FruityWifi through 2.4 has an unsafe Sudo configuration [(ALL : ALL) NOPASSWD: ALL]. This allows an attacker to perform a system-level (root) local privilege escalation, allowing an attacker to gain complete persistent access to the local system.📖 Read
via "National Vulnerability Database".
❌ IoT Device Takeovers Surge 100 Percent in 2020 ❌
📖 Read
via "Threat Post".
The COVID-19 pandemic, coupled with an explosion in the number of connected devices, have led to a swelling in IoT infections observed on wireless networks.📖 Read
via "Threat Post".
Threat Post
IoT Device Takeovers Surge 100 Percent in 2020
The COVID-19 pandemic, coupled with an explosion in the number of connected devices, have led to a swelling in IoT infections observed on wireless networks.
🕴 Cybercriminals Could be Coming After Your Coffee 🕴
📖 Read
via "Dark Reading".
Researchers show no IoT device is too small to fall victim to ransomware techniques.📖 Read
via "Dark Reading".
Dark Reading
Cybercriminals Could be Coming After Your Coffee
Researchers show no IoT device is too small to fall victim to ransomware techniques.
❌ U.S. Levies Sanctions Against Russian Research Institution Linked to Triton Malware ❌
📖 Read
via "Threat Post".
The latest in a flurry of actions this week, tied to foreign threats against U.S. computer systems, includes sanctions by the Department of the Treasury.📖 Read
via "Threat Post".
Threat Post
U.S. Levies Sanctions Against Russian Research Institution Linked to Triton Malware
The latest in a flurry of actions this week, tied to foreign threats against U.S. computer systems, includes sanctions by the Department of the Treasury.
🕴 US Treasury Sanctions Russian Institution Linked to Triton Malware 🕴
📖 Read
via "Dark Reading".
Triton, also known as TRISIS and HatMan, was developed to target and manipulate industrial control systems, the US Treasury reports.📖 Read
via "Dark Reading".
Dark Reading
US Treasury Sanctions Russian Institution Linked to Triton Malware
Triton, also known as TRISIS and HatMan, was developed to target and manipulate industrial control systems, the US Treasury reports.
⚠ Naked Security Live – Who’s watching you? 5 mobile privacy tips ⚠
📖 Read
via "Naked Security".
Here's the latest Naked Security Live video - enjoy (and please share with your friends)!📖 Read
via "Naked Security".
Naked Security
Naked Security Live – Who’s watching you? 5 mobile privacy tips
Here’s the latest Naked Security Live video – enjoy (and please share with your friends)!
‼ CVE-2020-27388 ‼
📖 Read
via "National Vulnerability Database".
Multiple Stored Cross Site Scripting (XSS) vulnerabilities exist in the YOURLS Admin Panel, Versions 1.5 - 1.7.10. An authenticated user must modify a PHP plugin with a malicious payload and upload it, resulting in multiple stored XSS issues.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-27388 ‼
📖 Read
via "National Vulnerability Database".
Multiple Stored Cross Site Scripting (XSS) vulnerabilities exist in the YOURLS Admin Panel, Versions 1.5 - 1.7.10. An authenticated user must modify a PHP plugin with a malicious payload and upload it, resulting in multiple stored XSS issues.📖 Read
via "National Vulnerability Database".
🕴 The Story of McAfee: How the Security Giant Arrived at a Second IPO 🕴
📖 Read
via "Dark Reading".
Industry watchers explore the story of McAfee, from its founding in 1987, to its spinoff from Intel, to how it's keeping up with competitors.📖 Read
via "Dark Reading".
Dark Reading
The Story of McAfee: How the Security Giant Arrived at a Second IPO
Industry watchers explore the story of McAfee, from its founding in 1987, to its spinoff from Intel, to how it's keeping up with competitors.
‼ CVE-2020-27678 ‼
📖 Read
via "National Vulnerability Database".
An issue was discovered in illumos before 2020-10-22, as used in OmniOS before r151030by, r151032ay, and r151034y and SmartOS before 20201022. There is a buffer overflow in parse_user_name in lib/libpam/pam_framework.c.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-7751 ‼
📖 Read
via "National Vulnerability Database".
This affects all versions of package pathval.📖 Read
via "National Vulnerability Database".
🕴 Microsoft's Kubernetes Threat Matrix: Here's What's Missing 🕴
📖 Read
via "Dark Reading".
With a fuller picture of the Kubernetes threat matrix, security teams can begin to implement mitigation strategies to protect their cluster from threats.📖 Read
via "Dark Reading".
Dark Reading
Vulnerabilities & Threats recent news | Dark Reading
Explore the latest news and expert commentary on Vulnerabilities & Threats, brought to you by the editors of Dark Reading