Collaborate Disseminate
Two months after the alarm sounded warning of a WannaCry-level event, progress in patching exposed Windows systems varies by country and industry. Continue reading Wormable BlueKeep Bug Still Threatens Legions of Windows Systems
The update patches critical flaw (CVE-2019-11707), a type confusion vulnerability in the Mozilla Firefox code that Tor uses. Continue reading Tor Browser Issues Update for Critical System Takeover Flaw
The Department of Homeland Security urged system administrators to update their Windows machines after testing a working BlueKeep exploit for Windows 2000. Continue reading Working BlueKeep Exploit Developed by DHS
Threatpost editors Tara Seals and Lindsey O’Donnell discuss a recent lawsuit against Amazon for its privacy policies, a Telegram DDoS attack and more. Continue reading News Wrap: Amazon Privacy and Telegram DDoS Attack
Evernote’s web clipper extension for Chrome is vulnerable to a critical flaw that could have exposed the data of more than 4.6 million users. Continue reading Evernote Critical Flaw Opened Personal Data of Millions to Attack
The two CVEs allow bypasses to get around NTLM relay attack mitigations. Continue reading Near-Ubiquitous Critical Microsoft RCE Bugs Affect All Versions of Windows
Researchers have discovered one million devices that are vulnerable to a “wormable” Microsoft flaw, which could open the door to a WannaCry-like cyberattack. Continue reading One Million Devices Open to Wormable Microsoft BlueKeep Flaw
The vendor also issued a patch schedule for the still-unpatched bug in its Secure Boot trusted hardware environment, which affects most of its enterprise and SMB portfolio, amounting to millions of vulnerable devices. Continue reading Cisco Service Provider, WebEx Bugs Offer Up Remote Code Execution
Cisco has patched a critical flaw in its virtualized function automation tool, Cisco Elastic Services Controller. Continue reading Critical Flaw in Cisco Elastic Services Controller Allows Full System Takeover
Crestron, Barco wePresent, Extron ShareLink and more wireless presentation systems have an array of critical flaws. Continue reading Critical Flaws Found in Eight Wireless Presentation Systems