Collaborate Disseminate
The remote code execution flaw could allow attackers to deploy malware, modify network configurations and view databases. Continue reading SAP Stomps Out Critical RCE Flaw in Manufacturing Software
Spear-phishing emails are spreading the NimzaLoader malware loader, which some say may be used to download Cobalt Strike. Continue reading Nim-Based Malware Loader Spreads Via Spear-Phishing Emails
Microsoft’s regularly scheduled March Patch Tuesday updates address 89 CVEs overall. Continue reading Microsoft Patch Tuesday Updates Fix 14 Critical Bugs
The critical flaws exist in Adobe Framemaker, Connect and the Creative Cloud desktop application for Windows. Continue reading Adobe Critical Code-Execution Flaws Plague Windows Users
Apple pushed out security updates for a memory-corruption bug to devices running on iOS, macOS, watchOS and for Safari. Continue reading Apple Plugs Severe WebKit Remote Code-Execution Hole
A new side-channel attack takes aim at Intel’s CPU ring interconnect in order to glean sensitive data. Continue reading Newest Intel Side-Channel Attack Sniffs Out Sensitive Data
A phishing attack targeting Microsoft users leverages a bogus Google reCAPTCHA system. Continue reading Fake Google reCAPTCHA Phishing Attack Swipes Office 365 Passwords
The lack of cybersecurity requirements in weapons contracts from the Department of Defense opens the door for dangerous cyberattacks. Continue reading U.S. DoD Weapons Programs Lack ‘Key’ Cybersecurity Measures
A new variant of the Gafgyt botnet – that’s actively targeting vulnerable D-Link and Internet of Things devices – is the first variant of the malware to rely on Tor communications, researchers say. Continue reading D-Link, IoT Devices Under Attack By Tor-Based Gafgyt Variant
Researchers with Microsoft and FireEye found three new malware families, which they said are used by the threat group behind the SolarWinds attack. Continue reading Microsoft, FireEye Unmask More Malware Linked to SolarWinds Attackers