Collaborate Disseminate
A critical vulnerability in Cisco Small Business Routers will not be patched by the networking equipment giant, since the devices reached end-of-life in 2019.
Tracked as CVE-2021-34730 (CVSS score: 9.8), the issue resides in the routers’ Universal Plug… Continue reading Critical Flaw Found in Older Cisco Small Business Routers Won’t Be Fixed
Mozi, a peer-to-peer (P2P) botnet known to target IoT devices, has gained new capabilities that allow it to achieve persistence on network gateways manufactured by Netgear, Huawei, and ZTE, according to latest findings.
“Network gateways are a particul… Continue reading Mozi IoT Botnet Now Also Targets Netgear, Huawei, and ZTE Network Gateways
Cybersecurity researchers have disclosed details about an early development version of a nascent ransomware strain called Diavol that has been linked to threat actors behind the infamous TrickBot syndicate.
The latest findings from IBM X-Force show tha… Continue reading Researchers Find New Evidence Linking Diavol Ransomware to TrickBot Gang
A security vulnerability has been found affecting several versions of ThroughTek Kalay P2P Software Development Kit (SDK), which could be abused by a remote attacker to take control of an affected device and potentially lead to remote code execution.
T… Continue reading Critical ThroughTek SDK Bug Could Let Attackers Spy On Millions of IoT Devices
A major vulnerability affecting older versions of BlackBerry’s QNX Real-Time Operating System (RTOS) could allow malicious actors to cripple and gain control of a variety of products, including cars, medical, and industrial equipment.
The shortcoming (… Continue reading BadAlloc Flaw Affects BlackBerry QNX Used in Millions of Cars and Medical Devices
A North Korean threat actor has been discovered taking advantage of two exploits in Internet Explorer to infect victims with a custom implant as part of a strategic web compromise (SWC) targeting a South Korean online newspaper.
Cybersecurity firm Vole… Continue reading NK Hackers Deploy Browser Exploits on South Korean Sites to Spread Malware
IT and communication companies in Israel were at the center of a supply chain attack campaign spearheaded by an Iranian threat actor that involved impersonating the firms and their HR personnel to target victims with fake job offers in an attempt to pe… Continue reading Iranian Hackers Target Several Israeli Organizations With Supply-Chain Attacks
Details have emerged about a new unpatched security vulnerability in Fortinet’s web application firewall (WAF) appliances that could be abused by a remote, authenticated attacker to execute malicious commands on the system.
“An OS command injection vul… Continue reading Unpatched Remote Hacking Flaw Disclosed in Fortinet’s FortiWeb WAF
A new social engineering-based malvertising campaign targeting Japan has been found to deliver a malicious application that deploys a banking trojan on compromised Windows machines to steal credentials associated with cryptocurrency accounts.
The appli… Continue reading Malicious Ads Target Cryptocurrency Users With Cinobi Banking Trojan
Taiwanese chip designer Realtek is warning of four security vulnerabilities in three software development kits (SDKs) accompanying its WiFi modules, which are used in almost 200 IoT devices made by at least 65 vendors.
The flaws, which affect Realtek S… Continue reading Multiple Flaws Affecting Realtek Wi-Fi SDKs Impact Nearly a Million IoT Devices