Collaborate Disseminate
Two bugs (CVE-2020-4703 and CVE-2020-4711) in IBM’s Spectrum Protect Plus data-storage protection solution could enable remote code execution. Continue reading IBM Spectrum Protect Plus Security Open to RCE
Security researchers and U.S. government authorities alike are urging admins to address Microsoft’s critical privilege escalation flaw. Continue reading Windows Exploit Released For Microsoft ‘Zerologon’ Flaw
Monday’s CISA advisory is a staunch reminder for federal government and private sector entities to apply patches for flaws in F5 BIG-IP devices, Citrix VPNs, Pulse Secure VPNs and Microsoft Exchange servers. Continue reading Feds Warn Nation-State Hackers are Actively Exploiting Unpatched Microsoft Exchange, F5, VPN Bugs
The flaws are disclosed as Oracle reportedly partners with TikTok as concerns in the U.S. over spying continue. Continue reading TikTok Fixes Flaws That Opened Android App to Compromise
Attackers check the victims’ Office 365 credentials in real time as they are typed into the phishing landing page, by using authentication APIs. Continue reading Office 365 Phishing Attack Leverages Real-Time Active Directory Validation
The high-severity flaw in the Email Subscribers & Newsletters plugin by Icegram affects more than 100,000 WordPress websites. Continue reading WordPress Plugin Flaw Allows Attackers to Forge Emails
Just months before the U.S. presidential election, hackers from Russia, China and Iran are ramping up phishing and malware attacks against campaign staffers. Continue reading Microsoft Warns of Cyberattacks on Trump, Biden Election Campaigns
The “BLURtooth” flaw allows attackers within wireless range to bypass authentication keys and snoop on devices utilizing implementations of Bluetooth 4.0 through 5.0. Continue reading Bluetooth Bug Opens Devices to Man-in-the-Middle Attacks
Cyberattacks have caused several school systems to delay students’ first day back – and experts warn that new Covid-related threats will continue plaguing classrooms. Continue reading Ransomware And Zoom-Bombing: Cyberattacks Disrupt Back-to-School Plans
The September Android security bulletin addressed critical- and high-severity flaws tied to 53 CVEs overall. Continue reading Google Squashes Critical Android Media Framework Bug