Google, Intel Warn on ‘Zero-Click’ Kernel Bug in Linux-Based IoT Devices
Intel and Google are urging users to update the Linux kernel to version 5.9 or later. Continue reading Google, Intel Warn on ‘Zero-Click’ Kernel Bug in Linux-Based IoT Devices
Author Archives: Lindsey O'Donnell
Lemon Duck Cryptocurrency-Mining Botnet Activity Spikes
Researchers warn of a spike in the cryptocurrency-mining botnet since August 2020. Continue reading Lemon Duck Cryptocurrency-Mining Botnet Activity Spikes
Critical Flash Player Flaw Opens Adobe Users to RCE
The flaw stems from a NULL Pointer Dereference error and plagues the Windows, macOS, Linux and ChromeOS versions of Adobe Flash Player. Continue reading Critical Flash Player Flaw Opens Adobe Users to RCE
Election Systems Under Attack via Microsoft Zerologon Exploits
Cybercriminals are chaining Microsoft’s Zerologon flaw with other exploits in order to infiltrate government systems, putting election systems at risk, a new CISA and FBI advisory warns. Continue reading Election Systems Under Attack via Microsoft Zerologon Exploits
Ransomware Attackers Buy Network Access in Cyberattack Shortcut
Network access to various industries is being offered in underground forums at as little as $300 a pop – and researchers warn that ransomware groups like Maze and NetWalker could be buying in. Continue reading Ransomware Attackers Buy Network Access in Cyberattack Shortcut
Facebook Debuts Bug-Bounty ‘Loyalty Program’
Facebook bounty hunters will be placed into tiers by analyzing their score, signal and number of submitted bug reports — which will dictate new bonus percentages. Continue reading Facebook Debuts Bug-Bounty ‘Loyalty Program’
Cisco Fixes High-Severity Webex, Security Camera Flaws
Three high-severity flaws exist in Cisco’s Webex video conferencing system, Cisco’s Video Surveillance 8000 Series IP Cameras and Identity Services Engine. Continue reading Cisco Fixes High-Severity Webex, Security Camera Flaws
Microsoft Azure Flaws Open Admin Servers to Takeover
Two flaws in Microsoft’s cloud-based Azure App Services could have allowed server-side forgery request (SSFR) and remote code-execution attacks. Continue reading Microsoft Azure Flaws Open Admin Servers to Takeover
Google Rolls Out Fixes for High-Severity Android System Flaws
The most serious bugs are elevation-of-privilege issues in the Android System component (CVE-2020-0215 and CVE-2020-0416). Continue reading Google Rolls Out Fixes for High-Severity Android System Flaws
Google’s Chrome 86: Critical Payments Bug, Password Checker Among Security Notables
Google is rolling out 35 security fixes, and a new password feature, in Chrome 86 versions for Windows, Mac, Android and iOS users. Continue reading Google’s Chrome 86: Critical Payments Bug, Password Checker Among Security Notables