The Cybersecurity and Infrastructure Security Agency (CISA) issued a new security advisory warning of publicly available exploit code for a Microsoft Netlogon vulnerability CVE-2020-1472. Researchers have dubbed the vulnerability 'Zerologon' that could allow attackers to hijack Windows domain controllers.
Chinese Ministry of State Security (MSS)-affiliated cyber threat actors are targeting U.S. government agencies, as well as exploiting four popular vulnerabilities over the past 12 months.
Palo Alto Networks has fixed a Critical buffer overflow vulnerability that could allow an attacker to execute remote code as root on PAN-OS devices, along with multiple other High severity issues.
Security firm Bitdefender published its mid-year Threat Landscape Report 2020 that reveals how cybersecurity threats and malware play on the pandemic theme.
Equinix, a leader in global colocation data centers, disclosed it experienced a ransomware incident that affected internal systems.
Microsoft has released the September 2020 Security updates that includes patches for 129 vulnerabilities, 24 of them rated Critical. Adobe also released updates for Experience Manager, Framemaker and InDesign.
Google has released Chrome 85.0.4183.102 security update for Windows, Mac and Linux. An attacker could exploit these vulnerabilities to take control of impacted systems.
Developers have updated the WordPress plugin File Manager to fix a critical vulnerability that could have allowed hackers to gain complete access to nearly 700 thousand WordPress websites.
Cisco issued a security advisory and patch for a new Cisco Jabber software RCE vulnerability CVE-2020-3495, as well as security fixes for multiple other products.
Security researchers have discovered a new malware dubbed KryptoCibule that poses a triple threat to victim's cryptocurrency resources. Attackers are using KryptoCibule to abuse victim's resources to mine coins, hijack…