Collaborate Disseminate
Successful exploitation of these flaws could lead to arbitrary code execution and information disclosure.
The post Fortinet, Ivanti Patch Critical Vulnerabilities appeared first on SecurityWeek.
Continue reading Fortinet, Ivanti Patch Critical Vulnerabilities
In this Help Net Security interview, Sandra McLeod, CISO at Zoom, reflects on her first year in the role. She talks about moving from reactive firefighting to business strategy, and what she heard from engineers, the board, and customers during her ear… Continue reading A year in, Zoom’s CISO reflects on balancing security and business
BITTER APT spreads ProSpy and ToSpy via Signal, Google, and Zoom lures, targeting journalists through LinkedIn and iMessage spearphishing. Continue reading BITTER APT Uses Signal, Google, and Zoom Lures to Spread ProSpy Spyware
North Korean group UNC1069 targets Node.js maintainers using fake LinkedIn and Slack profiles to spread malware and compromise open source packages. Continue reading UNC1069 Targets Node.js Maintainers via Fake LinkedIn, Slack Profiles
Cybersecurity researchers at Sublime Security have discovered a new scam that uses realistic, interactive JavaScript-based Zoom meeting invites to trick users into installing malware. Continue reading New Fake Zoom Meeting Invite Scam Spreads Malware on Windows PCs
Critical- and high-severity flaws could be exploited to execute arbitrary shell commands or elevate privileges.
The post Splunk, Zoom Patch Severe Vulnerabilities appeared first on SecurityWeek.
Continue reading Splunk, Zoom Patch Severe Vulnerabilities
A new phishing campaign is using stolen certificates from TrustConnect Software PTY LTD to sign malware. By impersonating updates for Zoom and Microsoft Teams, hackers install RMM tools to gain persistent, privileged access to networks Continue reading Fake Zoom, Teams Meeting Invites Use Compromised Certificates to Drop Malware
Fake Zoom and Google Meet pages trick users into installing a monitoring software on Windows systems through phishing links and fake updates. Continue reading Fake Zoom and Google Meet Pages Trick Users Into Installing Monitoring Tool
Malwarebytes researchers have uncovered a fake (but convincing) Zoom meeting page that downloads surveillance software on Windows computers and tricks users into running it. According to Microsoft MVP Steven Lim, the page has claimed nearly 1,500 victi… Continue reading Fake Zoom meeting leads to silent install of surveillance software
Both platforms serve as backbone infrastructure for remote work and software development, making these flaws particularly dangerous for business continuity.
The post Zoom and GitLab Patch RCE, DoS, and 2FA Bypass Vulnerabilities appeared first on TechR… Continue reading Zoom and GitLab Patch RCE, DoS, and 2FA Bypass Vulnerabilities