Collaborate Disseminate
On December 4, 2019, we discovered watering hole websites that were compromised to selectively trigger a drive-by download attack with fake Adobe Flash update warnings. Continue reading Holy water: ongoing targeted water-holing attack in Asia
Two critical Adobe vulnerabilities have been fixed in Adobe After Effects and Adobe Media Encoder. Continue reading Critical Adobe Flaws Fixed in Out-of-Band Update
Microsoft has finally patched the Internet Explorer (IE) zero-day flaw the company said in January was being used in “limited targeted attacks”. Continue reading IE zero day and heap of RDP flaws fixed in February Patch Tuesday
February 2020 Patch Tuesday is here. To mark the occasion, Microsoft has released fixes for 99 vulnerabilities – 12 critical, one of which is being exploited in the wild – and Adobe 42, most of which are critical and none actively exploited… Continue reading February 2020 Patch Tuesday: Microsoft fixes 99 vulnerabilities, Adobe 42
Overall, Adobe patched flaws tied to 42 CVEs as part of its regularly scheduled updates. Continue reading Adobe Addresses Critical Flash, Framemaker Flaws
Which ten software vulnerabilities should you patch as soon as possible (if you haven’t already)? Table of top exploited CVEs between 2016 and 2019 (repeats are noted by color) Recorded Future researchers have analyzed code repositories, undergro… Continue reading Which vulnerabilities were most exploited by cybercriminals in 2019?
If the criminals are continuing to make money by infecting Apple Mac computers in this fashion, whatever makes you think that they’ll come up with a more original social engineering trick?
Continue reading 1 in 10 Macs hit by crude malware that poses as Flash Player update, reports Kaspersky
US cable and wire manufacturer, Southwire, last week filed a civil suit against Maze’s mysterious makers in Georgia Federal court. Continue reading ‘Maze’ ransomware threatens data exposure unless $6m ransom paid
Sometimes, a Patch Tuesday update arrives with a bang that sends users scrambling for cover – September’s update earns that description. Continue reading September 2019’s Patch Tuesday: 2 zero-days, 17 critical bugs
For the September 2019 Patch Tuesday, Microsoft delivered fixes for 80 CVE-numbered security issues (including to actively exploited zero-days), Adobe fixed flaws in Flash Player and Application Manager, and Intel offered solutions and mitigations for … Continue reading September 2019 Patch Tuesday: Microsoft plugs two actively exploited zero-days