Collaborate Disseminate
Microsoft is warning of a widespread credential phishing campaign that leverages open redirector links in email communications as a vector to trick users into visiting malicious websites while effectively bypassing security software.
“Attackers combine… Continue reading Microsoft Warns of Widespread Phishing Attacks Using Open Redirects
Google and Microsoft said they are pledging to invest a total of $30 billion in cybersecurity advancements over the next five years, as the U.S. government partners with private sector companies to address threats facing the country in the wake of a st… Continue reading Microsoft, Google to Invest $30 Billion in Cybersecurity Over Next 5 Years
U.S. technology firm Kaseya has released security patches to address two zero-day vulnerabilities affecting its Unitrends enterprise backup and continuity solution that could result in privilege escalation and authenticated remote code execution.
The t… Continue reading Kaseya Issues Patches for Two New 0-Day Flaws Affecting Unitrends Servers
Cloud infrastructure security company Wiz on Thursday revealed details of a now-fixed Azure Cosmos database vulnerability that could have been potentially exploited to grant any Azure user full admin access to other customers’ database instances withou… Continue reading Critical Cosmos Database Flaw Affected Thousands of Microsoft Azure Customers
Enterprise security and network appliance vendor F5 has released patches for more than two dozen security vulnerabilities affecting multiple versions of BIG-IP and BIG-IQ devices that could potentially allow an attacker to perform a wide range of malic… Continue reading F5 Releases Critical Security Patch for BIG-IP and BIG-IQ Devices
VMware on Wednesday shipped security updates to address vulnerabilities in multiple products that could be potentially exploited by an attacker to take control of an affected system.
The six security weaknesses (from CVE-2021-22022 through CVE-2021-220… Continue reading VMware Issues Patches to Fix New Flaws Affecting Multiple Products
Cisco Systems on Wednesday issued patches to address a critical security vulnerability affecting the Application Policy Infrastructure Controller (APIC) interface used in its Nexus 9000 Series Switches that could be potentially abused to read or write … Continue reading Critical Flaw Discovered in Cisco APIC for Switches — Patch Released
A financially motivated threat actor notorious for setting its sights on retail, hospitality, and entertainment industries has been observed deploying a completely new backdoor on infected systems, indicating the operators are continuously retooling th… Continue reading Researchers Uncover FIN8’s New Backdoor Targeting Financial Institutions
Cybersecurity researchers have disclosed five previously unreported security vulnerabilities affecting B. Braun’s Infusomat Space Large Volume Pump and SpaceStation that could be abused by malicious parties to tamper with medication doses without any p… Continue reading B. Braun Infusomat Pumps Could Let Attackers Remotely Alter Medication Dosages
A computer retail company based in the U.S. was the target of a previously undiscovered implant called SideWalk as part of a recent campaign undertaken by a Chinese advanced persistent threat group primarily known for singling out entities in East and … Continue reading New SideWalk Backdoor Targets U.S.-based Computer Retail Business