Browsing Tag
exploit
22 posts
Weekly Top 10 – 10.23.2023- Critical Vulnerability in Cisco IOS XE Leads to Over 30k Compromised Devices, Threat Actors Abuse Google Ads to Deliver Malware, QR Codes Used to Spread Malware and Steal Passwords, Coordinated Law Enforcement Effort Takes Down RagnarLocker Ransomware Gang
Critical Vulnerabilities discovered in WS_FTP Server software, Zero-day exploit in Exim Maill Server, Maximum Severity Vulnerabilities in Confulence, Looney-Toonable flaw in Linux Distributions GNU C Library, and 6 more cybersecurity stories...
Current Dependency Vulnerabilities Giving Us PTSD
Lately, it seems we’re all plagued by zero-day and dependency-related vulnerabilities. Log4Shell had everyone scrambling in 2021, and…
Weekly Top 10 – 10.9.2023- Zombie Zoom Links, Indeed.com Redirect Vulnerability Abused, CISA Adds Windows and JetBrains to KEV Catalogue, BING AI Convinced to Reveal CAPTCHA
Critical Vulnerabilities discovered in WS_FTP Server software, Zero-day exploit in Exim Maill Server, Maximum Severity Vulnerabilities in Confulence, Looney-Toonable flaw in Linux Distributions GNU C Library, and 6 more cybersecurity stories...
Anatomy of a Data Breach
A data breach is a common occurrence in the wake of a successful cyberattack. Let's discuss how they happen and how to prevent them.
Baselining Endpoint Risk
Baselining endpoints tells security professionals what risks exist and lets them develop a plan that improves and matures your security. Here we take a look at the common issues they find.
Mitigating The Unpatched Office and Windows HTML RCE (CVE-2023-36884)
July 2023's Patch Tuesday released fixes for several vulnerabilities being actively exploited in the wild, but only identified mitigation for one particular unpatched zero-day that can allow HTML remote code execution as part of an initial attack.
Follina Zero-Day Allows Zero-Click RCE From Office Docs
JUNE 2, 2022 19:09 GMT Microsoft Office docs are the primary vector for an actively exploited zero-day vulnerability…
Weekly Top Ten Cybersecurity Stories – 5.20.2022
VMWare emergency patch, Microsoft updates break domain controller auth, Sysrv-K Botnet Abusing WordPress, Brute force MSSQL
May 2022 Windows Patches Could Cause Auth Issues On Domain Controllers
MAY 19, 2022 16:36 GMT Proceed with caution before patching Domain Controllers in your environment with Microsoft’s May…
Weekly Top Ten Cybersecurity Stories – 5.13.2022
F5 BIG-IP exploits, Gootloader and SEO Poisoning, NerbianRAT phishing campaign, Raspberry Robin malicious USB drive campaign