🦿 Ransomware now accounts for 69% of all attacks that use malware 🦿
📖 Read
via "Tech Republic".
The most common targets of ransomware in the second quarter of 2021 were governmental, medical and industrial companies along with scientific and educational institutions, says Positive Technologies.📖 Read
via "Tech Republic".
TechRepublic
Ransomware now accounts for 69% of all attacks that use malware
The most common targets of ransomware in the second quarter of 2021 were governmental, medical and industrial companies along with scientific and educational institutions, says Positive Technologies.
🦿 How to secure SSH logins with port knocking 🦿
📖 Read
via "Tech Republic".
Knock, knock ... who's there? SSH. SSH who? You need to lock down your servers so that only you have access via SSH. One way to help that is with knockd. Jack Wallen shows you how.📖 Read
via "Tech Republic".
🗓️ Fake WhatsApp backup message delivers malware to Spanish speakers’ devices 🗓️
📖 Read
via "The Daily Swig".
The trojan horse in Spain is nothing but a pain📖 Read
via "The Daily Swig".
The Daily Swig | Cybersecurity news and views
Fake WhatsApp backup message delivers malware to Spanish speakers’ devices
The trojan horse in Spain is nothing but a pain
🛠 Zeek 4.0.4 🛠
📖 Read
via "Packet Storm Security".
Zeek is a powerful network analysis framework that is much different from the typical IDS you may know. While focusing on network security monitoring, Zeek provides a comprehensive platform for more general network traffic analysis as well. Well grounded in more than 15 years of research, Zeek has successfully bridged the traditional gap between academia and operations since its inception. Today, it is relied upon operationally in particular by many scientific environments for securing their cyber-infrastructure. Zeek's user community includes major universities, research labs, supercomputing centers, and open-science communities. This is the source code release.📖 Read
via "Packet Storm Security".
Packetstormsecurity
Zeek 4.0.4 ≈ Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers
🦿 How phishing-as-a-service operations pose a threat to organizations 🦿
📖 Read
via "Tech Republic".
Attackers can easily buy, deploy and scale phishing campaigns to steal credentials and other sensitive data, says Microsoft.📖 Read
via "Tech Republic".
🦿 Ransomware detections dropped by almost half, but the threat is only getting worse, says Trend Micro 🦿
📖 Read
via "Tech Republic".
Rather than indicating ransomware was a passing fad, the decrease in attack volume shows that attackers are starting to become more opportunistic and smarter about picking targets.📖 Read
via "Tech Republic".
TechRepublic
Ransomware detections dropped by almost half, but the threat is only getting worse, says Trend Micro
Rather than indicating ransomware was a passing fad, the decrease in attack volume shows that attackers are starting to become more opportunistic and smarter about picking targets.
‼ CVE-2021-32963 ‼
📖 Read
via "National Vulnerability Database".
Null pointer dereference in SuiteLink server while processing commands 0x03/0x10📖 Read
via "National Vulnerability Database".
‼ CVE-2021-32959 ‼
📖 Read
via "National Vulnerability Database".
Heap-based buffer overflow in SuiteLink server while processing commands 0x05/0x06📖 Read
via "National Vulnerability Database".
‼ CVE-2021-32979 ‼
📖 Read
via "National Vulnerability Database".
Null pointer dereference in SuiteLink server while processing commands 0x04/0x0a📖 Read
via "National Vulnerability Database".
‼ CVE-2021-41381 ‼
📖 Read
via "National Vulnerability Database".
Payara Micro Community 5.2021.6 and below allows Directory Traversal.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-26750 ‼
📖 Read
via "National Vulnerability Database".
DLL hijacking in Panda Agent <=1.16.11 in Panda Security, S.L.U. Panda Adaptive Defense 360 <= 8.0.17 allows attacker to escalate privileges via maliciously crafted DLL file.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-32999 ‼
📖 Read
via "National Vulnerability Database".
Improper handling of exceptional conditions in SuiteLink server while processing command 0x01📖 Read
via "National Vulnerability Database".
‼ CVE-2021-41428 ‼
📖 Read
via "National Vulnerability Database".
Insecure permissions in Update Manager <= 5.8.0.2300 and DFL <= 12.5.1001.5 in DATEV programs v14.1 allows attacker to escalate privileges via insufficient configuration of service components.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-21913 ‼
📖 Read
via "National Vulnerability Database".
An information disclosure vulnerability exists in the WiFi Smart Mesh functionality of D-LINK DIR-3040 1.13B03. A specially-crafted network request can lead to command execution. An attacker can connect to the MQTT service to trigger this vulnerability.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-32987 ‼
📖 Read
via "National Vulnerability Database".
Null pointer dereference in SuiteLink server while processing command 0x0b📖 Read
via "National Vulnerability Database".
‼ CVE-2021-36872 ‼
📖 Read
via "National Vulnerability Database".
Authenticated Persistent Cross-Site Scripting (XSS) vulnerability in WordPress Popular Posts plugin (versions <= 5.3.3). Vulnerable at &widget-wpp[2][post_type].📖 Read
via "National Vulnerability Database".
‼ CVE-2021-32971 ‼
📖 Read
via "National Vulnerability Database".
Null pointer dereference in SuiteLink server while processing command 0x07📖 Read
via "National Vulnerability Database".
‼ CVE-2021-3824 ‼
📖 Read
via "National Vulnerability Database".
OpenVPN Access Server 2.9.0 through 2.9.4 allow remote attackers to inject arbitrary web script or HTML via the web login page URL.📖 Read
via "National Vulnerability Database".
⚠ How Outlook “autodiscover” could leak your passwords – and how to stop it ⚠
📖 Read
via "Naked Security".
The Microsoft Autodiscover "Great Leak" explained - and how to prevent it📖 Read
via "Naked Security".
Sophos News
Naked Security – Sophos News
⚠ VMware patch bulletin warns: “This needs your immediate attention.” ⚠
📖 Read
via "Naked Security".
"It is a matter of time before working exploits are available," warns VMware.📖 Read
via "Naked Security".
Naked Security
VMware patch bulletin warns: “This needs your immediate attention.”
“It is a matter of time before working exploits are available,” warns VMware.
🦿 How phishing-as-a-service operations pose a threat to organizations 🦿
📖 Read
via "Tech Republic".
Attackers can easily buy, deploy and scale phishing campaigns to steal credentials and other sensitive data, says Microsoft.📖 Read
via "Tech Republic".