Security Updates & Patches

APKPure Android store app infected with malware

Post author:Frank Crast
Post published:April 10, 2021
Post category:Malware Mobile Security Security Updates & Patches

APKPure Android app store and mobile app has been infected with malicious software that downloads trojans to Android devices.

Cisco patches vulnerabilities in SD-WAN, Small Business routers and other products

Post author:Frank Crast
Post published:April 8, 2021
Post category:Network Security Security Updates & Patches Vulnerabilities & Exploits

Cisco has patched multiple vulnerabilities in Cisco SD-WAN, Small Business routers, Unified Communications Products and Advanced Malware Protection. Two of those vulnerabilities (CVE-2021-1479, CVE-2021-1459) are rated Critical.

Legacy QNAP NAS devices vulnerable to zero-day cyberattacks

Post author:Frank Crast
Post published:April 7, 2021
Post category:Security Updates & Patches Vulnerabilities & Exploits Zero-days

Security researchers have warned legacy QNAP NAS devices are vulnerable to zero-day cyberattacks. Although QNAP patched two vulnerabilities in recent firmware updates, the company acknowledged patches were not yet available for certain legacy devices.

Threat actors target vulnerable critical SAP applications

Post author:Frank Crast
Post published:April 6, 2021
Post category:Configuration Management Cybersecurity Attacks Security Updates & Patches Vulnerabilities & Exploits

Security experts from Onapsis and SAP have released a new threat intel report for SAP customers that warns of cyber threat actors targeting unprotected SAP applications.

FBI and CISA warn of Fortinet FortiOS vulnerability exploits

Post author:Frank Crast
Post published:April 2, 2021
Post category:Security Updates & Patches Vulnerabilities & Exploits

Cybersecurity experts from the FBI and CISA have issued a joint cybersecurity advisory warning of APT exploits of Fortinet FortiOS vulnerabilities CVE-2018-13379, CVE-2019-5591 and CVE-2020-12812.

Citrix fixes 3 Hypervisor vulnerabilities

Post author:Frank Crast
Post published:March 31, 2021
Post category:Security Updates & Patches Vulnerabilities & Exploits

Citrix has released patches for Citrix Hypervisor that address two vulnerabilities. If exploited, an attacker could exploit privileged code in a guest VM and cause the host to crash or become unresponsive.

Google releases Chrome security update (89.0.4389.114)

Post author:Frank Crast
Post published:March 31, 2021
Post category:Security Updates & Patches Vulnerabilities & Exploits

Google has released Chrome 89 security update (89.0.4389.114) for Windows, Mac and Linux with fixes for 8 vulnerabilities.

VMware patches vRealize Operations vulnerabilities (CVE-2021-21975 and CVE-2021-21983)

Post author:Frank Crast
Post published:March 31, 2021
Post category:Security Updates & Patches Vulnerabilities & Exploits

VMware issued a security advisory for two vulnerabilities (CVE-2021-21975 and CVE-2021-21983) that impact vRealize Operations products.

CISA publishes reports on DearCry ransomware and China Chopper Web Shell malware linked to Exchange Server exploits (updated)

Post author:Frank Crast
Post published:March 29, 2021
Post category:Cybersecurity Attacks Malware Security Updates & Patches Vulnerabilities & Exploits Zero-days

The Cybersecurity and Infrastructure Security Agency (CISA) has published reports on DearCry ransomware and China Chopper Web Shell malware linked to recent Exchange Server exploits. Attackers can use this malware to further compromise on-premise Microsoft Exchange servers and launch other attacks.

Samba fixes two High severity bugs (CVE-2020-27840 and CVE-2021-20277)

Post author:Frank Crast
Post published:March 26, 2021
Post category:Messaging Security Security Updates & Patches Vulnerabilities & Exploits

Samba has released software updates to fix two High severity security vulnerabilities (CVE-2020-27840 and CVE-2021-20277) that impact Samba products. A remote attacker could take advantage of these bugs and exploit unpatched systems.