February 2021

Microsoft open sources CodeQL queries to scan for Solarwinds-like Solorigate activity

Microsoft has open sourced CodeQL queries used to scan for Solorigate malware activity that matches the SolarWinds supply-chain attack.

Microsoft open sources CodeQL queries to scan for Solarwinds-like Solorigate activity Read More »

Firefox 86 adds ‘Total Cookie Protection’ along with fixes for 5 High risk vulnerabilities

The Mozilla Foundation has released Firefox 86 that includes a new feature for ‘Total Cookie Protection,’ along with security fixes for five High risk vulnerabilities.

Firefox 86 adds ‘Total Cookie Protection’ along with fixes for 5 High risk vulnerabilities Read More »

SonicWall releases new firmware updates for SMA 100 Series 10.X And 9.X products

SonicWall has released a new firmware update for SMA 100 Series 10.X And 9.X products. The latest update supersedes previous urgent patches that fixed a zero-day vulnerability CVE-2021-20016 earlier this month.

SonicWall releases new firmware updates for SMA 100 Series 10.X And 9.X products Read More »

Cyber attackers exploit Accellion FTA 0-day vulnerabilities to steal data

Cyber attackers have been exploiting Accellion File Transfer (FTA) appliance 0-day vulnerabilities to steal data and threaten their victims with extortion attempts.

Cyber attackers exploit Accellion FTA 0-day vulnerabilities to steal data Read More »

Cisco patches AnyConnect Secure Mobility Client DLL hijacking vulnerability (CVE-2021-1366)

Cisco has patched a Cisco AnyConnect Secure Mobility Client DLL hijacking vulnerability (CVE-2021-1366). An attacker could remotely exploit some of these vulnerabilities to take control of an impacted system.

Cisco patches AnyConnect Secure Mobility Client DLL hijacking vulnerability (CVE-2021-1366) Read More »

North Korea threat actors use AppleJeus malware to steal cryptocurrency

U.S. Government cybersecurity experts have issued a security alert and analysis on AppleJeus malware used by North Korean threat actors to steal cryptocurrency.

North Korea threat actors use AppleJeus malware to steal cryptocurrency Read More »