Muhstik Botnet Variant Targets Just-Patched Oracle WebLogic Flaw

Researchers are urging Oracle WebLogic users to update quickly – after new Muhstik botnet samples started targeting a critical flaw in the servers. Continue reading Muhstik Botnet Variant Targets Just-Patched Oracle WebLogic Flaw

New ‘Sodinokibi’ Ransomware Exploits Critical Oracle WebLogic Flaw

A recently-patched critical flaw in Oracle WebLogic is being actively exploited to peddle a new ransomware variant, which researchers call “Sodinokibi.” Continue reading New ‘Sodinokibi’ Ransomware Exploits Critical Oracle WebLogic Flaw

Medtronic Defibrillators Have Critical Flaws, Warns DHS

The unpatched vulnerabilities exist in 20 products made by the popular Medtronics medical device manufacturer, including defibrillators and home patient monitoring systems. Continue reading Medtronic Defibrillators Have Critical Flaws, Warns DHS

Drupal Patches Highly Critical Remote Code Execution Vulnerability

Websites based on the Drupal content management system might be affected by a highly critical vulnerability that could result in remote code execution. The vulnerability affects websites running Drupal 8 with RESTful Web Services (rest) module enabled… Continue reading Drupal Patches Highly Critical Remote Code Execution Vulnerability