Collaborate Disseminate
While probes looking for vulnerable Apache Struts 2 deployments continue, malicious traffic has tapered off, researchers at Rapid7 said. Continue reading Apache Attack Traffic Dropping, Limited to Few Sources
Apache administrators are urged to immediately upgrade the Struts 2 web application framework to address a remote code execution flaw under public attack. Continue reading Attacks Heating Up Against Apache Struts 2 Vulnerability
A unique attack called DNSMessenger uses DNS queries to carry out malicious PowerShell commands on compromised computers. Continue reading New Fileless Attack Using DNS Queries to Carry Out PowerShell Commands
Three vulnerabilities, all which can lead to remote code execution, exist in the LibTIFF library. Continue reading Remote Code Execution Vulnerabilities Plague LibTIFF Library
Researchers said they observed three separate spam campaigns pushing an updated version of Locky on Monday. Continue reading Following Lull, New Campaigns Pushing Retooled ‘Pumpkin’ Locky
Researchers said they’ve seen an uptick in RIG Exploit Kit traffic and that attackers have begun using the kit to peddle CrypMIC ransomware. Continue reading RIG Picks Up Where Neutrino Left Off, Pushes CrypMIC Ransomware
Researchers uncovered a global malvertising campaign exposing potentially millions of users to the risk of being hit with CrypMIC ransomware delivered via the Neutrino Exploit Kit. Continue reading Malvertising Campaign Pushing Neutrino Exploit Kit Shut Down
No encryption is needed for the ransomware Ranscam, which simply deletes users’ files, even if the victim chooses to pay, researchers claim.
Continue reading Ranscam Ransomware Deletes Victims’ Files Outright
Libarchive was patched against three memory-related vulnerabilities, putting pressure on admins to ensure third-party software that also uses the library is patched. Continue reading Patched libarchive Vulnerabilities Have Big Reach
Several vulnerabilities were fixed this week in the file archiver 7-Zip which could have led to arbitrary code execution and file corruption.
Continue reading Corruption, Code Execution Vulnerabilities Patched in Open Source Archiver 7-Zip