Category Archives: Vulnerabilities

You are here:

Home
Category "Vulnerabilities"

DarkCrewFriends Returns with Botnet Strategy

botnet, Check Point, code execution, Content Management Systems, darkcrewfriends, file upload vulnerability, Malware, php servers, Vulnerabilities, Web Security, zero dayBy Jeremy McClure June 26, 2020

The botnet can be used to mount different kinds of attacks, including code-execution and DDoS. DarkCrewFriends Returns with Botnet Strategy

Golang Worm Widens Scope to Windows, Adds Payload Capacity

backdoor, Barracuda, Cryptominer, cryptomining, drupalgeddon 2.0, exploits, golang, Linux, Malware, Oracle, Security Vulnerabilities, Vulnerabilities, Web Security, Windows, Worm, XMRigBy Jeremy McClure June 25, 2020

A first-stage malware loader spotted in active campaigns has added additional exploits and a new backdoor capability. Golang Worm Widens Scope to Windows, Adds Payload Capacity

Nvidia Warns Windows Gamers of Serious Graphics Driver Bugs

gamers, GPU display driver, high severity flaw, Nvidia, nvidia fix, nvidia flaw, patch, Security, Security Vulnerabilities, vGPU, Vulnerabilities, WindowsBy Jeremy McClure June 25, 2020

Several high-severity flaws in Nvidia’s GPU display drivers for Windows users could lead to code-execution, DoS and more. Nvidia Warns Windows Gamers of Serious Graphics Driver Bugs

Emerging Ransomware Targets Photos, Videos on Android Devices

Android, Canada, contact tracing app, COVID-19, crycryptor, crydroid, decryptor tool, ESET, google play, Government, Malware, Malware analysis, mobile app, Mobile Security, new strain, Pandemic, Ransomware, VulnerabilitiesBy Jeremy McClure June 24, 2020

The CryCryptor malware strain is a brand-new family of threats, leveraging COVID-19 to spread. Emerging Ransomware Targets Photos, Videos on Android Devices

NSA Warns of Sandworm Backdoor Attacks on Mail Servers

Black Energy, critical vulnerability, CVE-2019-10149, Cyberattacks, Exim, Exploit, Government, mail server, NSA, russia, sandworm, spy group, Vulnerabilities, warning, Web SecurityBy Jeremy McClure May 29, 2020

The Russian spy group, a.k.a. BlackEnergy, is actively compromising Exim mail servers via a critical security vulnerability. NSA Warns of Sandworm Backdoor Attacks on Mail Servers

Inside the Hoaxcalls Botnet: Both Success and Failure

abandoned exploits, botnet, DDoS, draytek, exploits, failures, grandstream, hoaxcalls, IoT, Malware, Malware analysis, Radware, symantec web gateway, takedown, Vulnerabilities, Web Security, ZyxelBy Jeremy McClure May 28, 2020

The DDoS group sets itself apart by using exploits — but it doesn’t always pan out. Inside the Hoaxcalls Botnet: Both Success and Failure

Hackers Compromise Cisco Servers Via SaltStack Flaws

breach, Cisco, cisco breach, cisco server, critical flaw, critical saltstack, network compromise, salt, salt flaw, saltstack, VIRL-PE server, VulnerabilitiesBy Jeremy McClure May 28, 2020

Attackers compromised six Cisco VIRL-PE servers that are affected by critical SaltStack vulnerabilities. Hackers Compromise Cisco Servers Via SaltStack Flaws

PonyFinal Ransomware Targets Enterprise Servers Then Bides Its Time

Credential Theft, enterprise servers, human operated, lateral movement, Malware, Malware analysis, ponyfinal, Ransomware, Vulnerabilities, Web SecurityBy Jeremy McClure May 28, 2020

Microsoft has warned on a new breed of patient ransomware attacks that lurk in networks for weeks before striking. PonyFinal Ransomware Targets Enterprise Servers Then Bides Its Time

Microsoft Addresses 111 Bugs for May Patch Tuesday

Cloud Security, elevation of privilege, EoP, IoT, may 2020, Microsoft, patch tuesday, RCE, remote code execution, Security Vulnerabilities, Sharepoint, Vulnerabilities, Web SecurityBy Jeremy McClure May 12, 2020

Important-rated EoP flaws make up the bulk of the CVEs; SharePoint continues its critical run with four worrying bugs. Microsoft Addresses 111 Bugs for May Patch Tuesday

WordPress Page Builder Plugin Bugs Threaten 1 Million Sites with Full Takeover

CSRF, page builder, Patches, plugin, Security Bugs, Security Vulnerabilities, site origin, site takeover, Vulnerabilities, web pages, Web Security, wordpress, XSSBy Jeremy McClure May 12, 2020

Severe CSRF to XSS bugs open the door to code execution and complete website compromise. WordPress Page Builder Plugin Bugs Threaten 1 Million Sites with Full Takeover