SolarWinds Hack — New Evidence Suggests Potential Links to Chinese Hackers



https://thehackernews.com/2021/03/solarwinds-hack-new-evidence-suggests.html
#infosec #cyberattack

Warning — SolarWinds Orion Platform has been found vulnerable to a new critical remote code execution (RCE) vulnerability via JSON deserialization.

Read: https://thehackernews.com/2021/03/solarwinds-orion-vulnerability.html
Patches have been released for this and 3 other vulnerabilities.
#infosec #cybersecurity

Microsoft has finally addressed a critical vulnerability in the Power Platform after facing criticism for the delay. Unauthorized access to Custom Code functions may lead to data disclosure.

Read: https://thehackernews.com/2023/08/microsoft-addresses-critical-power.html

Take immediate action to secure your system. #infosec

UPDATE — Airbus CERT releases Python scripts to scan for the critical CrushFTP flaw (CVE-2024-4040) that allows remote code execution. The zero-day has been exploited in attacks against U.S. entities.

Check: https://thehackernews.com/2024/04/critical-update-crushftp-zero-day-flaw.html

#infosec

A 27-year-old Russian has been sentenced to more than three years in prison for selling stolen financial information on the dark web.

He sold over 297,300 login credentials, resulting in $1.2 million in fraudulent transactions.

https://thehackernews.com/2024/08/russian-hacker-jailed-3-years-for.html

#infosec #cybersecurity

⚠️ Multiple MMS protocol vulnerabilities pose a severe threat to industrial devices, potentially leading to crashes or remote code execution that could disrupt critical infrastructure.

Learn more: https://thehackernews.com/2024/10/researchers-uncover-major-security.html

#infosec