Category Archives: Vulnerabilities

You are here:

Home
Category "Vulnerabilities"

NSA Warns of Sandworm Backdoor Attacks on Mail Servers

Black Energy, critical vulnerability, CVE-2019-10149, Cyberattacks, Exim, Exploit, Government, mail server, NSA, russia, sandworm, spy group, Vulnerabilities, warning, Web SecurityBy Jeremy McClure May 29, 2020

The Russian spy group, a.k.a. BlackEnergy, is actively compromising Exim mail servers via a critical security vulnerability. NSA Warns of Sandworm Backdoor Attacks on Mail Servers

Inside the Hoaxcalls Botnet: Both Success and Failure

abandoned exploits, botnet, DDoS, draytek, exploits, failures, grandstream, hoaxcalls, IoT, Malware, Malware analysis, Radware, symantec web gateway, takedown, Vulnerabilities, Web Security, ZyxelBy Jeremy McClure May 28, 2020

The DDoS group sets itself apart by using exploits — but it doesn’t always pan out. Inside the Hoaxcalls Botnet: Both Success and Failure

Hackers Compromise Cisco Servers Via SaltStack Flaws

breach, Cisco, cisco breach, cisco server, critical flaw, critical saltstack, network compromise, salt, salt flaw, saltstack, VIRL-PE server, VulnerabilitiesBy Jeremy McClure May 28, 2020

Attackers compromised six Cisco VIRL-PE servers that are affected by critical SaltStack vulnerabilities. Hackers Compromise Cisco Servers Via SaltStack Flaws

PonyFinal Ransomware Targets Enterprise Servers Then Bides Its Time

Credential Theft, enterprise servers, human operated, lateral movement, Malware, Malware analysis, ponyfinal, Ransomware, Vulnerabilities, Web SecurityBy Jeremy McClure May 28, 2020

Microsoft has warned on a new breed of patient ransomware attacks that lurk in networks for weeks before striking. PonyFinal Ransomware Targets Enterprise Servers Then Bides Its Time

Microsoft Addresses 111 Bugs for May Patch Tuesday

Cloud Security, elevation of privilege, EoP, IoT, may 2020, Microsoft, patch tuesday, RCE, remote code execution, Security Vulnerabilities, Sharepoint, Vulnerabilities, Web SecurityBy Jeremy McClure May 12, 2020

Important-rated EoP flaws make up the bulk of the CVEs; SharePoint continues its critical run with four worrying bugs. Microsoft Addresses 111 Bugs for May Patch Tuesday

WordPress Page Builder Plugin Bugs Threaten 1 Million Sites with Full Takeover

CSRF, page builder, Patches, plugin, Security Bugs, Security Vulnerabilities, site origin, site takeover, Vulnerabilities, web pages, Web Security, wordpress, XSSBy Jeremy McClure May 12, 2020

Severe CSRF to XSS bugs open the door to code execution and complete website compromise. WordPress Page Builder Plugin Bugs Threaten 1 Million Sites with Full Takeover

Adobe Kills 16 Critical Flaws in Acrobat and Reader, Digital Negative SDK

acrobat and reader, adobe, adobe flaw, critical flaw, DNG, DNG software development kit, patch, SDK, VulnerabilitiesBy Jeremy McClure May 12, 2020

Adobe patched 36 flaws, including critical vulnerabilities in Acrobat and Reader and its DNG Software Development Kit. Adobe Kills 16 Critical Flaws in Acrobat and Reader, Digital Negative SDK

Zero-Day No More: Windows Bug Gets a Fix

0patch, Local Privilege Escalation, micropatch, sandboxescaper, Task Scheduler, Vulnerabilities, vulnerability, Windows, zero dayBy Jeremy McClure June 4, 2019

0patch has released an interim micropatch for the dangerous LPE bug from SandboxEscaper, while we wait for Microsoft’s official patch. Zero-Day No More: Windows Bug Gets a Fix

AI Isn’t Good Enough When Lives Are on the Line, Experts Warn

ai, artificial intelligence, cyber warfare, Government, Hacks, infosecurity Europe, nation state, VulnerabilitiesBy Jeremy McClure June 4, 2019

During Infosecurity Europe in London this week, cybersecurity experts sounded off on worries about artificial intelligence being used for nation state cyber weapons. AI Isn’t Good Enough When Lives Are on the Line, Experts Warn

Smart-TV Bug Allows Rogue Broadcasts

Bug, Cloud Security, CVE-2019-12477, Dhiraj Mishra, emergency messages, Hacks, hijacking, IoT, rogue broadcast content, supra smart tv, Vulnerabilities, vulnerabilityBy Jeremy McClure June 3, 2019

An attacker could gain remote access by chaining together an exploit for home routers with the TV flaw. Smart-TV Bug Allows Rogue Broadcasts