QNAP fixes Command Injection vulnerability in QTS and QuTS hero
QNAP has fixed a High severity Command Injection vulnerability CVE-2020-25847 in QTS and QuTS hero.
Year: 2020
DHS issues new emergency guidance on SolarWinds Orion Code compromise
The Department of Homeland Security (DHS) has issued new emergency guidance on the SolarWinds Orion Code compromise and supply chain vulnerability.
SolarWinds releases updated advisory on SUPERNOVA malware (updated with CVE-2020-10148)
SolarWinds has released an updated security advisory on SUPERNOVA malware, a separate threat vector from the previously reported supply chain cyberattack that was based on SUNBURST backdoor malware. The update now includes new information on 0-day CVE-2020-10148 and PoC demo.
Hackers target Vietnam in supply chain cyberattack
Cybersecurity experts discovered a new supply chain attack against a certification authority organization in Vietnam.
Whirlpool victim of Nefilim ransomware attack
Home appliance maker Whirlpool has fallen victim to a Nefilim ransomware attack.
DHS warns businesses of risks using Chinese tech and data services
The United States Department of Homeland Security (DHS) has published a new advisory warning businesses of the risks using tech and data services linked to the People’s Republic of China (PRC).
Cybersecurity experts reveal growing list of SolarWinds 2nd stage attack victims
Cybersecurity experts have revealed a growing list of SolarWinds 2nd stage attack victims based on malware analysis.
Solorigate malware behind the SolarWinds attack
Microsoft shared new insights into the Solarigate malware, the compromised DLL file behind the SolarWinds software supply chain attacks.
CISA: Threat actors behind SolarWinds hack pose ‘grave risk’ (updated)
The Cybersecurity and Infrastructure Security Agency (CISA) has warned the recent compromise by threat actors of SolarWinds poses a ‘grave risk’ to critical infrastructure, government and private sector organizations.
Mozilla releases Firefox 84, fixes for 1 Critical and 6 High risk vulnerabilities
Mozilla releases Firefox 84, fixes for 1 Critical and 6 High risk vulnerabilities