Chinese threat actors targeting U.S. government agencies and these 4 CVEs

Chinese Ministry of State Security (MSS)-affiliated cyber threat actors are targeting U.S. government agencies, as well as exploiting four popular vulnerabilities over the past 12 months.

Continue Reading Chinese threat actors targeting U.S. government agencies and these 4 CVEs

Palo Alto Networks fixes Critical PAN-OS vulnerability (CVE-2020-2040)

Palo Alto Networks has fixed a Critical buffer overflow vulnerability that could allow an attacker to execute remote code as root on PAN-OS devices, along with multiple other High severity issues.

Continue Reading Palo Alto Networks fixes Critical PAN-OS vulnerability (CVE-2020-2040)

Critical File Manager plugin vulnerability affects 700k WordPress Websites

Developers have updated the WordPress plugin File Manager to fix a critical vulnerability that could have allowed hackers to gain complete access to nearly 700 thousand WordPress websites.

Continue Reading Critical File Manager plugin vulnerability affects 700k WordPress Websites

Cisco fixes 11 High risk vulnerabilities in NX-OS Software and other network products

Cisco has patched 11 High severity vulnerabilities in Cisco NX-OS Software, Nexus switches, Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Software.

Continue Reading Cisco fixes 11 High risk vulnerabilities in NX-OS Software and other network products