2020 - Securezoo Blog

QNAP fixes Command Injection vulnerability in QTS and QuTS hero

Post author:Frank Crast
Post published:December 31, 2020
Post category:Network Security Security Updates & Patches Vulnerabilities & Exploits

QNAP has fixed a High severity Command Injection vulnerability CVE-2020-25847 in QTS and QuTS hero.

DHS issues new emergency guidance on SolarWinds Orion Code compromise

Post author:Frank Crast
Post published:December 30, 2020
Post category:Cybersecurity Articles Cybersecurity Attacks Data Breach Security Updates & Patches Third-Party Security

The Department of Homeland Security (DHS) has issued new emergency guidance on the SolarWinds Orion Code compromise and supply chain vulnerability.

SolarWinds releases updated advisory on SUPERNOVA malware (updated with CVE-2020-10148)

Post author:Frank Crast
Post published:December 29, 2020
Post category:Malware

SolarWinds has released an updated security advisory on SUPERNOVA malware, a separate threat vector from the previously reported supply chain cyberattack that was based on SUNBURST backdoor malware. The update now includes new information on 0-day CVE-2020-10148 and PoC demo.

Hackers target Vietnam in supply chain cyberattack

Post author:Frank Crast
Post published:December 29, 2020
Post category:Cybersecurity Attacks Malware Third-Party Security

Cybersecurity experts discovered a new supply chain attack against a certification authority organization in Vietnam.

Whirlpool victim of Nefilim ransomware attack

Post author:Frank Crast
Post published:December 28, 2020
Post category:Cybersecurity Attacks Data Breach Malware

Home appliance maker Whirlpool has fallen victim to a Nefilim ransomware attack.

DHS warns businesses of risks using Chinese tech and data services

Post author:Frank Crast
Post published:December 24, 2020
Post category:Cybersecurity Articles Data Breach Data Privacy Insider Threats Regulations & Laws Security Monitoring Third-Party Security

The United States Department of Homeland Security (DHS) has published a new advisory warning businesses of the risks using tech and data services linked to the People’s Republic of China (PRC).

Cybersecurity experts reveal growing list of SolarWinds 2nd stage attack victims

Post author:Frank Crast
Post published:December 22, 2020
Post category:Cybersecurity Attacks Malware Third-Party Security

Cybersecurity experts have revealed a growing list of SolarWinds 2nd stage attack victims based on malware analysis.

Solorigate malware behind the SolarWinds attack

Post author:Frank Crast
Post published:December 22, 2020
Post category:Cybersecurity Attacks Malware Third-Party Security

Microsoft shared new insights into the Solarigate malware, the compromised DLL file behind the SolarWinds software supply chain attacks.

CISA: Threat actors behind SolarWinds hack pose ‘grave risk’ (updated)

Post author:Frank Crast
Post published:December 19, 2020
Post category:Cloud Security Configuration Management Cybersecurity Attacks Data Breach Malware Security Updates & Patches Third-Party Security Vulnerabilities & Exploits

The Cybersecurity and Infrastructure Security Agency (CISA) has warned the recent compromise by threat actors of SolarWinds poses a 'grave risk' to critical infrastructure, government and private sector organizations.

Mozilla releases Firefox 84, fixes for 1 Critical and 6 High risk vulnerabilities

Post author:Frank Crast
Post published:December 16, 2020
Post category:Security Updates & Patches Vulnerabilities & Exploits

Mozilla releases Firefox 84, fixes for 1 Critical and 6 High risk vulnerabilities