SUSE: Security Advisory (SUSE-SU-2017:2792-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2017:0780-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Malware Variants: More Sophisticated, Prevalent and Evolving in 2021

A malicious program intended to cause havoc with IT systems—malware—is becoming more and more sophisticated every year. The year 2021 is no exception, as recent trends indicate that several new variants of malware are making their way into the world of cybersecurity. While smarter security...

Zero Trust: The Mobile Dimension

After embarking on a second unforeseen year of mass remote work, everyone is now accessing corporate resources through the cloud. To help enable this, organizations are introducing new technologies into their standard workflows. The COVID-19 pandemic presented a new realm of unmarked territory as...

Network Detection & Response: The Next Frontier in Fighting the Human Problem

Last year, Gartner published a market guide on network detection and response NDR. Formerly known as network-traffic analytics, which I’ve spoken about in the past at length, NDR has adapted to not only play a major role in helping network and security teams identify threats, but it has enabled...

Threat Source Newsletter (April 8, 2021)

Newsletter compiled by Jon Munshaw. Good afternoon, Talos readers. We've all heard about spam coming through your email or those robocalls we all hate. But during the COVID-19 pandemic, attackers are now turning to chat rooms and gaming servers to spread spam. Talos researchers this... This is on...

KLA12163 DoS vulnerability in Mozilla Thunderbird

A denial of service vulnerability was found in Mozilla Thunderbird. Malicious users can exploit this vulnerability to cause denial of service. Original advisories MFSA2021-19 Related products Mozilla-Thunderbird CVE list CVE-2021-29951 high Solution Update to the latest version Download Thunderbi...

COVID-19 and HIPAA Enforcement Discretion Leaves Healthcare Organizations Vulnerable to Ransomware Attacks

Patient engagement is a term that has been discussed in healthcare for years. But now, its an urgent priority as providers work to vaccinate millions of Americans. The COVID-19 pandemic has put increased pressure on healthcare providers to ramp up digital communications with patients regarding...

Injecting Deception Mid-Pandemic: Covid-19 Vaccine Related Threats

We share some of our findings on malware, spam, phishing schemes, malicious websites, and illicit markets that use Covid-19 vaccines as a lure...

Server classes and resources exposure in OSGi applications using Vaadin 12-14 and 19

Vulnerability in OSGi integration in com.vaadin:flow-server versions 1.2.0 through 2.4.7 Vaadin 12.0.0 through 14.4.9, and 6.0.0 through 6.0.1 Vaadin 19.0.0 allows attacker to access application classes and resources on the server via crafted HTTP request. See CWE-402: Transmission of Private...

CVE-2019-14831

creationtimestamp| type| source ---|---|--- 2021-03-19 23:33:47+00:00| seen| https://t.me/cibsecurity/25210...

CVE-2019-14830

creationtimestamp| type| source ---|---|--- 2021-03-19 23:33:44+00:00| seen| https://t.me/cibsecurity/25206...

CVE-2019-10196

creationtimestamp| type| source ---|---|--- 2021-03-19 23:33:40+00:00| seen| https://t.me/cibsecurity/25205...

CVE-2019-10200

creationtimestamp| type| source ---|---|--- 2021-03-19 23:33:38+00:00| seen| https://t.me/cibsecurity/25203...

CVE-2021-26992

creationtimestamp| type| source ---|---|--- 2021-03-19 21:33:39+00:00| seen| https://t.me/cibsecurity/25197...

CVE-2021-26991

creationtimestamp| type| source ---|---|--- 2021-03-19 21:33:38+00:00| seen| https://t.me/cibsecurity/25196...

CVE-2019-10127

creationtimestamp| type| source ---|---|--- 2021-03-19 21:33:34+00:00| seen| https://t.me/cibsecurity/25195...

CVE-2021-26990

creationtimestamp| type| source ---|---|--- 2021-03-19 21:33:33+00:00| seen| https://t.me/cibsecurity/25194...

CVE-2021-27520

creationtimestamp| type| source ---|---|--- 2021-03-19 21:33:31+00:00| seen| https://t.me/cibsecurity/25192...

Report reveals the staggering scale of Business Email Compromise losses

Internet crime is ever present, and with the ongoing pandemic, levels of scams and fraud were exceptionally high in 2020. Opportunistic fraudsters didnt give a second thought to riding the COVID-19 wave and preying upon those who are truly in need of help, or those who truly want to help. The...