Cisco DNA Center Bug Opens Enterprises to Remote Attack
The high-severity security vulnerability (CVE-2021-1257) allows cross-site request forgery (CSRF) attacks. Continue reading Cisco DNA Center Bug Opens Enterprises to Remote Attack
Author Archives: Tara Seals
Amazon Kindle RCE Attack Starts with an Email
The “KindleDrip” attack would have allowed attackers to siphon money from unsuspecting victims. Continue reading Amazon Kindle RCE Attack Starts with an Email
Discord-Stealing Malware Invades npm Packages
The CursedGrabber malware has infiltrated the open-source software code repository. Continue reading Discord-Stealing Malware Invades npm Packages
NVIDIA Gamers Face DoS, Data Loss from Shield TV Bugs
The company also issued patches for Tesla-based GPUs as part of an updated, separate security advisory. Continue reading NVIDIA Gamers Face DoS, Data Loss from Shield TV Bugs
Malwarebytes Hit by SolarWinds Attackers
The attack vector was not the Orion platform but rather an email-protection application for Microsoft 365. Continue reading Malwarebytes Hit by SolarWinds Attackers
SolarWinds Malware Arsenal Widens with Raindrop
The post-compromise backdoor installs Cobalt Strike to help attackers more laterally through victim networks. Continue reading SolarWinds Malware Arsenal Widens with Raindrop
Cloud Attacks Are Bypassing MFA, Feds Warn
CISA has issued an alert warning that cloud services at U.S. organizations are being actively and successfully targeted. Continue reading Cloud Attacks Are Bypassing MFA, Feds Warn
Critical WordPress-Plugin Bug Found in ‘Orbit Fox’ Allows Site Takeover
Two security vulnerabilities — one a privilege-escalation problem and the other a stored XSS bug — afflict a WordPress plugin with 40,000 installs. Continue reading Critical WordPress-Plugin Bug Found in ‘Orbit Fox’ Allows Site Takeover
Mimecast Certificate Hacked in Microsoft Email Supply-Chain Attack
A sophisticated threat actor has hijacked email security connections to spy on targets. Continue reading Mimecast Certificate Hacked in Microsoft Email Supply-Chain Attack
BumbleBee Opens Exchange Servers in xHunt Spy Campaign
The BumbleBee web shell allows APT attackers to upload and download files, and move laterally by running commands. Continue reading BumbleBee Opens Exchange Servers in xHunt Spy Campaign