Yowai and Hakai botnets abuse ThinkPHP vulnerability

Cybercriminals are exploiting a ThinkPHP vulnerability, recently patched in December 2018. The attackers are using exploited systems to then propagate two new botnets - Yowai (variant of Mirai) and Hakai (variant of Gafgyt).

Continue Reading Yowai and Hakai botnets abuse ThinkPHP vulnerability

Cisco fixes critical SD-WAN solution vulnerabilities

Cisco released a security update to fix a critical vulnerability in the vContainer of the Cisco SD-WAN Solution. A remote authenticated attacker could cause a denial of service (DoS) condition and execute arbitrary code as the root user.

Continue Reading Cisco fixes critical SD-WAN solution vulnerabilities

Oracle Critical Patch Update for January 2019

Oracle has released its Critical Patch Update for January 2019 to include 284 vulnerability fixes across multiple products. Oracle continues to receive reports of remote attackers attempting to maliciously exploit unpatched vulnerabilities.

Continue Reading Oracle Critical Patch Update for January 2019