CVE-2020-35680

smtpd/lkafilter.c in OpenSMTPD before 6.8.0p1, in certain configurations, allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a crafted pattern of client activity, because the filter state machine does not properly maintain the I/O channel between th...

CISA Releases Free Detection Tool for Azure/M365 Environment

CISA has created a free tool for detecting unusual and potentially malicious activity that threatens users and applications in an Azure/Microsoft O365 environment. The tool is intended for use by incident responders and is narrowly focused on activity that is endemic to the recent identity- and...

CISA Releases CISA Insights and Creates Webpage on Ongoing APT Cyber Activity

CISA is tracking a known compromise involving SolarWinds Orion products that are currently being exploited by a malicious actor. An advanced persistent threat APT actor is responsible for compromising the SolarWinds Orion software supply chain, as well as widespread abuse of commonly used...

Cybercriminals' Favorite Bulletproof VPN Service Shuts Down In Global Action

Law enforcement agencies from the US, Germany, Netherlands, Switzerland, France, along with Europol's European Cybercrime Centre EC3, announced today the coordinated takedown of Safe-Inet, a popular virtual private network VPN service that was used to facilitate criminal activity. The three domai...

Threat Advisory: SolarWinds supply chain attack

Update 12/21: IOC section updated to include new information and associated stage. Update 12/18: We have been able to verify the name server for the DGA domain was updated as far back as late February. Compromised binaries appear to have been available on the SolarWinds website until very recentl...

CVE-2020-35606

creationtimestamp| type| source ---|---|--- 2020-12-21 22:52:17+00:00| seen| https://t.me/cibsecurity/21140 2020-12-22 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/49318 2020-12-31 18:30:13+00:00| seen| https://t.me/CyberSecurityTechnologies/2350 2024-11-14 06:07:39+00:00| seen|...

CVE-2020-20285

creationtimestamp| type| source ---|---|--- 2020-12-18 22:44:16+00:00| seen| https://t.me/cibsecurity/21096...

NSA Releases Cybersecurity Advisory on Detecting Abuse of Authentication Mechanisms

The National Security Agency NSA has released a cybersecurity advisory on detecting abuse of authentication mechanisms. This advisory describes tactics, techniques, and procedures used by malicious cyber actors to access protected data in the cloud and provides guidance on defending against and...

Vulnerability Spotlight: Multiple vulnerabilities in NZXT computer monitoring software

Carl Hurd of Cisco Talos discovered this vulnerability. Blog by Jon Munshaw. NZXT’s CAM computer monitoring software contains multiple vulnerabilities an attacker could use to carry out a range of malicious actions. CAM provides users information on their machines, such as fan speeds, temperature...

CVE-2020-0500

creationtimestamp| type| source ---|---|--- 2020-12-15 18:40:51+00:00| seen| https://t.me/cibsecurity/20816...

Zilliqa: Using gossip to drain miner wallets

Summary: Using a flaw in the gossip protocol, a malicious shard member can trick any other fellow shard member into signing an arbitrary message. One way this can be exploited is by creating a transaction transferring funds from the account corresponding to a target node's public key; having the...

Customer Guidance on Recent Nation-State Cyber Attacks

Note: we are updating as the investigation continues. Revision history listed at the bottom. This post contains technical details about the methods of the actor we believe was involved in Recent Nation-State Cyber Attacks, with the goal to enable the broader security community to hunt for activit...

CVE-2020-5950

creationtimestamp| type| source ---|---|--- 2020-12-11 22:38:59+00:00| seen| https://t.me/cibsecurity/20483 2020-12-11 22:54:32+00:00| seen| https://t.me/cibsecurity/20502 2020-12-11 23:25:27+00:00| seen| https://t.me/cibsecurity/20522 2020-12-12 00:25:27+00:00| seen| https://t.me/cibsecurity/205...

CVE-2020-17515

creationtimestamp| type| source ---|---|--- 2020-12-11 16:35:40+00:00| seen| https://t.me/cibsecurity/20105 2020-12-11 17:25:38+00:00| seen| https://t.me/cibsecurity/20125 2020-12-11 18:05:10+00:00| seen| https://t.me/cibsecurity/20143 2020-12-11 18:11:18+00:00| seen| https://t.me/cibsecurity/201...

CVE-2020-13530

creationtimestamp| type| source ---|---|--- 2020-12-11 07:35:10+00:00| seen| https://t.me/cibsecurity/19774 2020-12-11 07:38:12+00:00| seen| https://t.me/cibsecurity/19794 2020-12-11 08:25:26+00:00| seen| https://t.me/cibsecurity/19814 2020-12-11 09:25:21+00:00| seen| https://t.me/cibsecurity/198...

Cyber Monday is Every Monday: Securing the 'New Normal'

Derek Manky Though eCommerce threats are usually only top-of-mind during the holiday shopping season, researchers have been on high alert when it comes to cybercriminal activity in the retail space during all of 2020, due to troves of new shoppers and stores going online. That’s according to Dere...

CVE-2020-8919

creationtimestamp| type| source ---|---|--- 2020-12-10 14:34:03+00:00| seen| https://t.me/cibsecurity/18826 2020-12-10 14:41:04+00:00| seen| https://t.me/cibsecurity/18846 2020-12-10 14:53:37+00:00| seen| https://t.me/cibsecurity/18865 2020-12-10 15:23:41+00:00| seen| https://t.me/cibsecurity/188...

CVE-2020-12595

creationtimestamp| type| source ---|---|--- 2020-12-10 12:33:49+00:00| seen| https://t.me/cibsecurity/18722 2020-12-10 12:41:12+00:00| seen| https://t.me/cibsecurity/18742 2020-12-10 13:25:27+00:00| seen| https://t.me/cibsecurity/18762 2020-12-10 14:03:18+00:00| seen| https://t.me/cibsecurity/187...

CVE-2020-17133

creationtimestamp| type| source ---|---|--- 2020-12-10 02:39:16+00:00| seen| https://t.me/cibsecurity/18446 2020-12-10 03:25:36+00:00| seen| https://t.me/cibsecurity/18466 2020-12-10 04:25:36+00:00| seen| https://t.me/cibsecurity/18486 2020-12-10 05:25:34+00:00| seen| https://t.me/cibsecurity/185...

CVE-2020-17159

creationtimestamp| type| source ---|---|--- 2020-12-10 02:39:15+00:00| seen| https://t.me/cibsecurity/18444 2020-12-10 03:25:35+00:00| seen| https://t.me/cibsecurity/18464 2020-12-10 05:25:29+00:00| seen| https://t.me/cibsecurity/18504 2020-12-10 06:25:26+00:00| seen| https://t.me/cibsecurity/185...