Chinese Ministry of State Security (MSS)-affiliated cyber threat actors are targeting U.S. government agencies, as well as exploiting four popular vulnerabilities over the past 12 months.
Chinese threat actors targeting U.S. government agencies and these 4 CVEs Read More »
Palo Alto Networks has fixed a Critical buffer overflow vulnerability that could allow an attacker to execute remote code as root on PAN-OS devices, along with multiple other High severity issues.
Palo Alto Networks fixes Critical PAN-OS vulnerability (CVE-2020-2040) Read More »
Security firm Bitdefender published its mid-year Threat Landscape Report 2020 that reveals how cybersecurity threats and malware play on the pandemic theme.
2020 Threat Landscape Report reveals new themes and evolving threats Read More »
Equinix, a leader in global colocation data centers, disclosed it experienced a ransomware incident that affected internal systems.
Equinix discloses ransomware incident Read More »
Microsoft has released the September 2020 Security updates that includes patches for 129 vulnerabilities, 24 of them rated Critical. Adobe also released updates for Experience Manager, Framemaker and InDesign.
Microsoft September 2020 Security and Adobe Updates Read More »
Google has released Chrome 85.0.4183.102 security update for Windows, Mac and Linux. An attacker could exploit these vulnerabilities to take control of impacted systems.
Google releases Chrome security update (85.0.4183.102) Read More »
Developers have updated the WordPress plugin File Manager to fix a critical vulnerability that could have allowed hackers to gain complete access to nearly 700 thousand WordPress websites.
Critical File Manager plugin vulnerability affects 700k WordPress Websites Read More »
Cisco issued a security advisory and patch for a new Cisco Jabber software RCE vulnerability CVE-2020-3495, as well as security fixes for multiple other products.
Security researchers have discovered a new malware dubbed KryptoCibule that poses a triple threat to victim’s cryptocurrency resources. Attackers are using KryptoCibule to abuse victim’s resources to mine coins, hijack cryptocurrency transactions and exfiltrate cryptocurrency-related files. The name KryptoCibule derives from the Czech and Slovak words for “crypto” and “onion” respectively. According to ESET researchers,
KryptoCibule malware: triple threat to cryptocurrencies Read More »
Cisco issued a security advisory warning of a new Cisco IOS XR software zero-day vulnerability CVE-2020-3566 under active exploit in the wild.
Cisco warns of IOS XR zero-day vulnerability exploit in the wild (CVE-2020-3566) Read More »
