Collaborate Disseminate
Several vulnerabilities -dSAFER sandbox bypass vulnerabilities have been found in Ghostscript, which if exploited mat allow a remote, unauthenticated attacker to execute arbitrary commands. Continue reading Ghostscript vulnerabilities revealed, no patch yet available
Users of the open-source Apache Struts 2 web app development framework have been urged to update their software following today’s disclosure of a critical remote code execution vulnerability that leaves commonly used endpoints prone to exploitation. Continue reading Security update issued after critical RCE vulnerable found in core of Apache Struts
The cloud-based video creation service Animoto disclosed to the California Attorney General’s office last week that it discovered suspicious systems activity indicative of a July 10 breach that may have resulted in stolen information. Continue reading Cloud-based video creation service Animoto alerts California DOJ of possible data theft
Adobe today posted an out of band updates for two critical memory corruption vulnerabilities in Photoshop. Continue reading Adobe pushes out critical updates for Photoshop CC
Many of the pages, groups and accounts originated in Russia and Iran and targeted persons in the U.S., U.K., Middle East and Latin America. Continue reading Facebook purges hundreds of pages, accounts for ‘coordinated, inauthentic activity’
Attorney Lanny Davis, said Michael Cohen is willing to share whether or not President Trump knew in advance about Russia’s hack of the Democratic National Committee (DNC). Continue reading Cohen keen on talking to Mueller about ‘subjects of interest,” including Russia hacking
Researchers spotted the ransomware and noted that, like its predecessor, the newest variant communicates a lot with its Command and Control server and also displays consoles that provide status updates on the encryption process. Continue reading Fox variant of Matrix ransomware installed on computers running Remote Desktop Services
Researchers from Trend Micro have exposed two criminal cyber campaigns targeting South Korean organizations – one, a supply chain attack delivering a remote access tool under the guise of a software update, and two, a ransomware attack leveraging malic… Continue reading Supply chain attack targets South Koreans with 9002 RAT; separate phishing campaign delivers GandCrab ransomware
An updated version of AZORult Stealer is being used to distribute Hermes ransomware. Continue reading Updated AZORult Stealer used in Hermes ransomware campaign