⚠ Home delivery scams get smarter – don’t get caught out ⚠
📖 Read
via "Naked Security".
We've said it before, and we'll say it again: don't be in too much of a hurry for those home deliveries you're expecting!📖 Read
via "Naked Security".
Naked Security
Home delivery scams get smarter – don’t get caught out
We’ve said it before, and we’ll say it again: don’t be in too much of a hurry for those home deliveries you’re expecting!
‼ CVE-2021-33211 ‼
📖 Read
via "National Vulnerability Database".
A Directory Traversal vulnerability in the Unzip feature in Elements-IT HTTP Commander 5.3.3 allows remote authenticated users to write files to arbitrary directories via relative paths in ZIP archives.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-22781 ‼
📖 Read
via "National Vulnerability Database".
Insufficiently Protected Credentials vulnerability exists in EcoStruxure Control Expert (all versions prior to V15.0 SP1, including all versions of Unity Pro), EcoStruxure Process Expert (all versions, including all versions of EcoStruxure Hybrid DCS), and SCADAPack RemoteConnect for x70, all versions, that could cause a leak of SMTP credential used for mailbox authentication when an attacker can access a project file.📖 Read
via "National Vulnerability Database".
🕴 10 Mistakes Companies Make In Their Ransomware Responses 🕴
📖 Read
via "Dark Reading".
Hit by ransomware? These missteps can take a bad scenario and make it even worse.📖 Read
via "Dark Reading".
Dark Reading
10 Mistakes Companies Make In Their Ransomware Responses
Hit by ransomware? These missteps can take a bad scenario and make it even worse.
❌ Trickbot Malware Rebounds with Virtual-Desktop Espionage Module ❌
📖 Read
via "Threat Post".
The attackers have spruced up the 'vncDll' module used for spying on targets and stealing data.📖 Read
via "Threat Post".
Threat Post
Trickbot Malware Rebounds with Virtual-Desktop Espionage Module
The attackers have spruced up the 'vncDll' module used for spying on targets and stealing data.
🦿 IoT projects demand new skills from IT project managers 🦿
📖 Read
via "Tech Republic".
If you think regular IT project managers can run IoT projects, you might be miscalculating. Here's why.📖 Read
via "Tech Republic".
TechRepublic
IoT projects demand new skills from IT project managers
If you think regular IT project managers can run IoT projects, you might be miscalculating. Here's why.
❌ Linux-Focused Cryptojacking Gang Tracked to Romania ❌
📖 Read
via "Threat Post".
The gang is using a new brute-forcer – “Diicot brute” – to crack passwords on Linux-based machines with weak passwords.📖 Read
via "Threat Post".
Threat Post
Linux-Focused Cryptojacking Gang Tracked to Romania
The gang is using a new brute-forcer – “Diicot brute” – to crack passwords on Linux-based machines with weak passwords.
🕴 Did the Cybersecurity Workforce Gap Distract Us From the Leak? 🕴
📖 Read
via "Dark Reading".
Cyber games can play a critical role in re-engaging our workforce and addressing the employee retention crisis.📖 Read
via "Dark Reading".
Dark Reading
Did the Cybersecurity Workforce Gap Distract Us From the Leak?
Cyber games can play a critical role in re-engaging our workforce and addressing the employee retention crisis.
‼ CVE-2020-29147 ‼
📖 Read
via "National Vulnerability Database".
A SQL injection vulnerability in wy_controlls/wy_side_visitor.php of Wayang-CMS v1.0 allows attackers to obtain sensitive database information.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-36740 ‼
📖 Read
via "National Vulnerability Database".
Varnish Cache, with HTTP/2 enabled, allows request smuggling and VCL authorization bypass via a large Content-Length header for a POST request. This affects Varnish Enterprise 6.0.x before 6.0.8r3, and Varnish Cache 5.x and 6.x before 6.5.2, 6.6.x before 6.6.1, and 6.0 LTS before 6.0.8.📖 Read
via "National Vulnerability Database".
❌ Cryptominer Farm Rigged with 3,800 PS4s Busted in Ukraine ❌
📖 Read
via "Threat Post".
Ukrainian cops seize PlayStation 4 consoles, graphics cards, processors and more in cryptomining sting involving alleged electricity theft.📖 Read
via "Threat Post".
Threat Post
Cryptominer Farm Rigged with 3,800 PS4s Busted in Ukraine
Ukrainian cops seize PlayStation 4 consoles, graphics cards, processors and more in cryptomining sting involving alleged electricity theft.
🦿 Kaspersky: LuminousMoth spearphishing campaign hit 1,500 targets in Asia 🦿
📖 Read
via "Tech Republic".
Security researchers think HoneyMyte is behind the advanced persistent threat that has mostly targeted government entities.📖 Read
via "Tech Republic".
TechRepublic
Kaspersky: LuminousMoth spearphishing campaign hit 1,500 targets in Asia
Security researchers think HoneyMyte is behind the advanced persistent threat that has mostly targeted government entities.
‼ CVE-2021-34514 ‼
📖 Read
via "National Vulnerability Database".
Windows Kernel Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-31979, CVE-2021-33771.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-33746 ‼
📖 Read
via "National Vulnerability Database".
Windows DNS Server Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-33754, CVE-2021-33780, CVE-2021-34494, CVE-2021-34525.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-34490 ‼
📖 Read
via "National Vulnerability Database".
Windows TCP/IP Driver Denial of Service Vulnerability This CVE ID is unique from CVE-2021-31183, CVE-2021-33772.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-34473 ‼
📖 Read
via "National Vulnerability Database".
Microsoft Exchange Server Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-31196, CVE-2021-31206.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-33774 ‼
📖 Read
via "National Vulnerability Database".
Windows Event Tracing Elevation of Privilege Vulnerability📖 Read
via "National Vulnerability Database".
‼ CVE-2021-33768 ‼
📖 Read
via "National Vulnerability Database".
Microsoft Exchange Server Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-34470, CVE-2021-34523.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-33778 ‼
📖 Read
via "National Vulnerability Database".
HEVC Video Extensions Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-31947, CVE-2021-33775, CVE-2021-33776, CVE-2021-33777.📖 Read
via "National Vulnerability Database".
🕴 Targeted Attack Activity Heightens Need for Orgs. to Patch New SolarWinds Flaw 🕴
📖 Read
via "Dark Reading".
A China-based threat actor -- previously observed targeting US defense industrial base organizations and software companies -- is exploiting the bug in SolarWinds' Serv-U software, Microsoft says.📖 Read
via "Dark Reading".
Dark Reading
Targeted Attack Activity Heightens Need for Orgs. to Patch New SolarWinds Flaw
A China-based threat actor -- previously observed targeting US defense industrial base organizations and software companies -- is exploiting the bug in SolarWinds' Serv-U software, Microsoft says.
🕴 Google to Bring HTTPS-First Mode to Chrome Browser 🕴
📖 Read
via "Dark Reading".
Beginning in M94, Chrome will offer HTTPS-First Mode, which will attempt to upgrade all page loads to HTTPS.📖 Read
via "Dark Reading".
Dark Reading
Google to Bring HTTPS-First Mode to Chrome Browser
Beginning in M94, Chrome will offer HTTPS-First Mode, which will attempt to upgrade all page loads to HTTPS.