Collaborate Disseminate
A growing class of phishing kits – transparent reverse proxy kits – are being used to get past multi-factor authentication using MiTM tactics. Continue reading Low-Detection Phishing Kits Increasingly Bypass MFA
The company’s RV line of small-business routers contains 15 different security vulnerabilities that could enable everything from RCE to corporate network access and denial-of-service – and many have exploits circulating. Continue reading Critical Cisco Bugs Open VPN Routers to Cyberattacks
The Conti gang strikes again, disrupting the nom-merchant’s supply chain and threatening empty supermarket shelves lasting for weeks. Continue reading KP Snacks Left with Crumbs After Ransomware Attack
The issue in the file-sharing and interop platform also affects Red Hat, SUSE Linux and Ubuntu packages. Continue reading Samba ‘Fruit’ Bug Allows RCE, Full Root User Access
Visitors who shopped on the company’s eCommerce website in January will likely find their payment-card data heisted, researchers warned. Continue reading Segway Hit by Magecart Attack Hiding in a Favicon
A critical security bug and a months-long, ongoing supply-chain attack spell trouble for WordPress users. Continue reading AdSanity, AccessPress Plugins Open Scads of WordPress Sites to Takeover
The information-disclosure issue, affecting Macs, iPhones and iPads, allows a snooping website to find out information about other tabs a user might have open. Continue reading Pervasive Apple Safari Bug Exposes Web-Browsing Data, Google IDs
A security bug in the file-sharing cloud app could have allowed attackers using stolen credentials to skate by one-time SMS code verification requirements. Continue reading Box 2FA Bypass Opens User Accounts to Attack
Zoho’s comprehensive endpoint-management platform suffers from an authentication-bypass bug (CVE-2021-44757) that could lead to remote code execution. Continue reading Critical ManageEngine Desktop Server Bug Opens Orgs to Malware
Attackers could access and modify agent resources, telephone queues and other customer-service systems – and access personal information on companies’ customers. Continue reading Critical Cisco Contact Center Bug Threatens Customer-Service Havoc