A security researcher has discovered a zero-day vulnerability CVE-2021-24084 in Windows Mobile Device Management that could allow information disclosure and local privilege escalation (LPE).
The National Institute of Standards and Technology (NIST) has issued the NIST SP 800-213 IoT Device: “Cybersecurity Guidance for the Federal Government: Establishing IoT Device Cybersecurity Requirements.”
The National Institute of Standards and Technology (NIST) has issued the NIST SP 800-213A: IoT Device Cybersecurity Guidance for the Federal Government: IoT Device Cybersecurity Requirement Catalog.
VMware has patched arbitrary file read and SSRF vCenter Server vulnerabilities (CVE-2021-21980, CVE-2021-22049) that affect VMware vSphere Web Client.
VMware patches 2 vSphere Web Client vulnerabilities (CVE-2021-21980, CVE-2021-22049) Read More »
Bad actors have been exploiting a previously patched Windows Installer zero-day privileged escalation vulnerability CVE-2021-41379.
Attackers exploit Windows Installer zero-day vulnerability (CVE-2021-41379) Read More »
The Federal Bureau of Investigation (FBI) has issued a report of advanced persistent threat (APT) actors exploiting 0-day FatPipe MPVPN networking devices since at least May of 2021.
FBI alert: APT actors exploit 0-Day FatPipe VPN vulnerabilities Read More »
GitHub has fixed two node package manager (npm) registry vulnerabilities, one of those could allow an attacker to publish new versions of an npm package without proper authorization.
GitHub fixes 2 npm registry vulnerabilities Read More »
Iranian state-sponsored advanced persistent threat (APT) actors have been targeting and exploiting Microsoft Exchange and Fortinet vulnerabilities.
Google has released Chrome 96 security update (96.0.4664.45) for Windows, Mac and Linux with fixes for multiple High risk vulnerabilities.
Researchers have discovered a new malware threat dubbed “Squirrelwaffle” that uses Microsoft Office documents to infect victim systems with CobaltStrike.
Squirrelwaffle uses Office docs to infect victim systems with CobaltStrike Read More »
