PrivacyDigest · @PrivacyDigest
538 followers · 1984 posts · Server mas.to
How an #unpatched #MicrosoftExchange #0-day likely caused one of the #uk ‘s biggest hacks ever
#hack #privacy #breach #Microsoft
https://arstechnica.com/?p=1959987
#Microsoft #breach #privacy #hack #uk #MicrosoftExchange #unpatched
beSpacific · @bespacific
737 followers · 1183 posts · Server newsie.social
Multiple #ThreatActors 1 working on behalf of a nation-stat gained access 2 network of a US fed agency by exploiting a 4 yr-old #vulnerability that remained #unpatched, #Exploit activities by 1 group likely began in August 2021 & last August by the other, according advisory jointly published by #Cybersecurity & Infrastructure Security Agency, FBI, and Multi-State Information Sharing & Analysis Center. From November 22 to early January server exhibited signs of compromise. https://arstechnica.com/information-technology/2023/03/federal-agency-hacked-by-2-groups-thanks-to-flaw-that-went-unpatched-for-4-years/
#threatactors #vulnerability #unpatched #exploit #cybersecurity
Daniel M. Reck · @DanielMReck
17 followers · 19 posts · Server mas.to
"Malware that exploits #unpatched vulnerabilities in 30 different #WordPress plugins has infected hundreds if not thousands of sites and may have been in active use for years, according to a writeup published last week."
https://arstechnica.com/information-technology/2023/01/hundreds-of-wordpress-sites-infected-by-recently-discovered-backdoor/
#InfoSec #InfoTech #security #cms #hosting #tech #patchNow
#patchNow #tech #hosting #cms #security #infotech #infosec #WordPress #unpatched
Mario Stylianou :heart_cyber: · @supermjr
42 followers · 97 posts · Server infosec.exchange@Weld Disrupting the #killchain early on at the initial access stage (#unpatched #VMware) isn't as sexy of a headline as focusing on the execution capabilities or impact of #Log4Shell.
#killchain #unpatched #vmware #Log4Shell
ITSEC News · @itsecbot
687 followers · 32461 posts · Server schleuss.online
Windows Zero-Day Still Circulating After Faulty Fix - The LPE bug could allow an attacker to install programs; view, change, or delete data; or create n... https://threatpost.com/windows-zero-day-circulating-faulty-fix/162610/ #localprivilegeescalation #googleprojectzero #vulnerabilities #cve-2020-17008 #proofofconcept #windowszeroday #cve-2020-0986 #unpatched #badpatch
#badpatch #unpatched #windowszeroday #proofofconcept #cve #vulnerabilities #googleprojectzero #localprivilegeescalation
ITSEC News · @itsecbot
687 followers · 32461 posts · Server schleuss.online
Millions of Unpatched IoT, OT Devices Threaten Critical Infrastructure - Industrial, factory and medical gear remain largely unpatched when it comes to the URGENT/11 and C... https://threatpost.com/unpatched-iot-ot-devices-threaten-critical-infrastructure/162275/ #criticalinfrastructure #operationaltechnology #internetofthings #vulnerabilities #medicaldevices #securitybugs #factories #unpatched #urgent/11 #takeover #armis #cdpwn #iot #ot
#ot #iot #cdpwn #armis #takeover #urgent #unpatched #factories #securitybugs #medicaldevices #vulnerabilities #internetofthings #operationaltechnology #criticalinfrastructure
ITSEC News · @itsecbot
687 followers · 32461 posts · Server schleuss.online
Electronic Medical Records Cracked Open by OpenClinic Bugs - Four security vulnerabilities in an open-source medical records management platform allow remote c... https://threatpost.com/electronic-medical-records-openclinic-bugs/161722/ #personalhealthinformation #electronicmedicalrecords #medicalrecordsmanagement #securityvulnerabilities #informationdisclosure #patientdatatheft #vulnerabilities #cve-2020-28937 #cve-2020-28938 #cve-2020-28939 #opensource #openclinic #bishopfox #unpatched
#unpatched #bishopfox #openclinic #opensource #cve #vulnerabilities #patientdatatheft #informationdisclosure #securityvulnerabilities #medicalrecordsmanagement #electronicmedicalrecords #personalhealthinformation
ITSEC News · @itsecbot
687 followers · 32461 posts · Server schleuss.online
Mobile Browser Bugs Open Safari, Opera Users to Malware - A set of address-spoofing bugs affect users of six different types of mobile browsers, with some r... https://threatpost.com/mobile-browser-bugs-safari-opera-malware/160326/ #vulnerabilities #addressspoofing #mobilesecurity #disinformation #mobilebrowsers #cve-2020-9987 #securitybugs #websecurity #rafayboloch #unpatched #phishing #malware #rapid7 #safari #apple #opera
#opera #apple #safari #rapid7 #malware #phishing #unpatched #rafayboloch #websecurity #securitybugs #cve #mobilebrowsers #disinformation #mobilesecurity #addressspoofing #vulnerabilities
ITSEC News · @itsecbot
687 followers · 32461 posts · Server schleuss.online
Bluetooth Spoofing Bug Affects Billions of IoT Devices - The 'BLESA' flaw affects the reconnection process that occurs when a device moves back into range ... https://threatpost.com/bluetooth-spoofing-bug-iot-devices/159291/ #criticalinfrastructure #bluetoothlowenergy #purdueuniversity #vulnerabilities #mobilesecurity #cve-2020-9770 #iotdevices #bluetooth #unpatched #spoofing #android #pairing #google #apple #blesa #bluez #linux #iot #ios
#ios #iot #linux #bluez #BLESA #apple #google #pairing #android #spoofing #unpatched #bluetooth #iotdevices #cve #mobilesecurity #vulnerabilities #purdueuniversity #bluetoothlowenergy #criticalinfrastructure
ITSEC News · @itsecbot
687 followers · 32461 posts · Server schleuss.online
4 Unpatched Bugs Plague Grandstream ATAs for VoIP Users - The flaws have been confirmed by Grandstream, but no firmware update has yet been issued. https://threatpost.com/4-unpatched-bugs-grandstream-atas-voip/157927/ #securityvulnerabilities #analogtelephoneadapter #vulnerabilities #firmwareupdate #cve-2020-5760 #cve-2020-5761 #cve-2020-5762 #cve-2020-5763 #websecurity #grandstream #ht800series #unpatched #voip #ata
#ata #voip #unpatched #ht800series #grandstream #websecurity #cve #firmwareupdate #vulnerabilities #analogtelephoneadapter #securityvulnerabilities
ITSEC News · @itsecbot
687 followers · 32461 posts · Server schleuss.online
Unpatched Wi-Fi Extender Opens Home Networks to Remote Control - The Homeplug device, from Tenda, suffers from web server bugs as well as a DoS flaw. more: https://threatpost.com/unpatched-wi-fi-extender-remote-control/156990/ #pa6wi-fipowerlineextender #securityvulnerabilities #internetofthings #vulnerabilities #denialofservice #version1.0.1.21 #bufferoverflow #cve-2019-16213 #cve-2019-19505 #cve-2019-19506 #codeexecution #remotecontrol #wi-fiextender #websecurity #unpatched #homeplug
#homeplug #unpatched #websecurity #wi #remotecontrol #codeexecution #cve #bufferoverflow #version1 #denialofservice #vulnerabilities #internetofthings #securityvulnerabilities #pa6wi
ITSEC News · @itsecbot
687 followers · 32461 posts · Server schleuss.online
Hoaxcalls Botnet Exploits Symantec Secure Web Gateways - The fast-moving botnet has added an exploit for an unpatched bug in an unsupported version of the ... more: https://threatpost.com/hoaxcalls-botnet-symantec-secure-web-gateways/155806/ #symantecsecurewebgateway #vulnerabilities #paloaltounit42 #vulnerability #websecurity #end-of-life #propagation #hoaxcalls #unpatched #malware #exploit #botnet #mirai
#mirai #botnet #exploit #malware #unpatched #hoaxcalls #propagation #end #websecurity #vulnerability #paloaltounit42 #vulnerabilities #symantecsecurewebgateway
ITSEC News · @itsecbot
687 followers · 32461 posts · Server schleuss.online
Fast-Moving DDoS Botnet Exploits Unpatched ZyXel RCE Bug - The rapidly evolving Hoaxcalls botnet is exploiting an unpatched vulnerability in the ZyXEL Cloud ... more: https://threatpost.com/fast-moving-ddos-botnet-unpatched-zyxel-rce-bug/155059/ #cloudcnmsecumanager #cloudcommunication #denialofservice #malwareanalysis #uncategorized #vulnerability #appliance #hoaxcalls #unpatched #radware #botnet #mirai #zyxel #ddos #xtc
#xtc #ddos #Zyxel #mirai #botnet #radware #unpatched #hoaxcalls #appliance #vulnerability #uncategorized #malwareanalysis #denialofservice #cloudcommunication #cloudcnmsecumanager
ITSEC News · @itsecbot
687 followers · 32461 posts · Server schleuss.online
Wormable, Unpatched Microsoft Bug Threatens Corporate LANs - CVE-2020-0796 affects version 3.1.1 of Microsoft’s SMB file-sharing system and was not included in... more: https://threatpost.com/wormable-unpatched-microsoft-bug/153632/?utm_source=rss&utm_medium=rss&utm_campaign=wormable-unpatched-microsoft-bug #securityvulnerability #file-sharingsystem #vulnerabilities #cve-2020-0796 #version3.1.1 #eternalblue #microsoft #unpatched #wannacry #wormable #smb
#smb #wormable #wannacry #unpatched #microsoft #eternalblue #version3 #cve #vulnerabilities #file #securityvulnerability
ITSEC News · @itsecbot
687 followers · 32461 posts · Server schleuss.online
Lenovo, HP, Dell Peripherals Face Unpatched Firmware Bugs - A lack of proper code-signing verification and authentication for firmware updates opens the door ... more: https://threatpost.com/lenovo-hp-dell-peripherals-unpatched-firmware/152936/ #improperauthentication #remotecodeexecution #vulnerabilities #firmwareupdates #cryptography #cyberattacks #verification #codesigning #peripherals #eclypsium #unpatched #lenovo #dell #hp
#hp #dell #lenovo #unpatched #eclypsium #peripherals #codesigning #verification #cyberattacks #cryptography #firmwareupdates #vulnerabilities #remotecodeexecution #improperauthentication