Cybercriminals Ramp Up Exploits Against Serious Zyxel Flaw

More than 100,000 Zyxel networking products could be vulnerable to a hardcoded credential vulnerability (CVE-2020-29583) potentially allowing cybercriminal device takeover. Continue reading Cybercriminals Ramp Up Exploits Against Serious Zyxel Flaw

Microsoft Zerologon Flaw Under Attack By Iranian Nation-State Actors

Microsoft warns that the MERCURY APT has been actively exploiting CVE-2020-1472 in campaigns for the past two weeks. Continue reading Microsoft Zerologon Flaw Under Attack By Iranian Nation-State Actors

Microsoft Exchange Servers Still Open to Actively Exploited Flaw

Despite Microsoft issuing patches almost eight months ago, 61 percent of Exchange servers are still vulnerable. Continue reading Microsoft Exchange Servers Still Open to Actively Exploited Flaw

Oracle: Unpatched Versions of WebLogic App Server Under Active Attack

CVE-2020-2883 was patched in Oracle’s April 2020 Critical Patch Update – but proof of concept exploit code was published shortly after. Continue reading Oracle: Unpatched Versions of WebLogic App Server Under Active Attack

April Patch Tuesday: Microsoft Battles 4 Bugs Under Active Exploit

Microsoft issued 113 patches in a big update, unfortunately for IT staff already straining under WFH security concerns. Continue reading April Patch Tuesday: Microsoft Battles 4 Bugs Under Active Exploit

Active Exploits Hit Vulnerable WordPress ThemeGrill Plugin

Websites using a vulnerable version of the WordPress plugin, ThemeGrill Demo Importer, are being targeted by attackers. Continue reading Active Exploits Hit Vulnerable WordPress ThemeGrill Plugin