Collaborate Disseminate
A critical privilege-escalation vulnerability could lead to backdoors for admin access nesting in web servers. Continue reading All in One SEO Plugin Bug Threatens 3M Websites with Takeovers
Don’t freak: It’s got nothing to do with Log4Shell, except it may be just as far-reaching as Log4j, given HTTPD’s tendency to tiptoe into software projects. Continue reading Critical Apache HTTPD Server Bugs Could Lead to RCE, DoS
Yaron Kassner, CTO and co-founder of Silverfort, discusses why using all-seeing privileged accounts for monitoring is bad practice. Continue reading Time to Ditch Big-Brother Accounts for Network Scanning
There are 17,000npatched Log4j packages in the Maven Central ecosystem, leaving massive supply-chain risk on the table from Log4Shell exploits. Continue reading Java Code Repository Riddled with Hidden Log4j Bugs; Here’s Where to Look
A quarter-billion of those passwords were not seen in previous breaches that have been added to Have I Been Pwned. Continue reading Half-Billion Compromised Credentials Lurking on Open Cloud Server
APT attackers are using a security vulnerability in ManageEngine Desktop Central to take over servers, deliver malware and establish network persistence. Continue reading FBI: Another Zoho ManageEngine Zero-Day Under Active Attack
Conti has become the first professional-grade, sophisticated ransomware group to weaponize Log4j2, now with a full attack chain.
Continue reading Conti Ransomware Gang Has Full Log4Shell Attack Chain
The new Log4j vulnerability is similar to Log4Shell in that it also affects the logging library, but this DoS flaw has to do with Context Map lookups, not JNDI. Continue reading Third Log4J Bug Can Trigger DoS; Apache Issues Patch
Meta, Facebook’s parent company, said that the seven banned actors run fake accounts on its platforms to deceive users and plant malware on targets’ phones. Continue reading Facebook Bans Spy-for-Hire Firms for Targeting 50K People
Attackers are using the excitement over the new Spider-Man movie to steal bank information and spread malware. Continue reading Spider-Man Movie Release Frenzy Bites Fans with Credit-Card Harvesting