Layer 7 DDoS Attacks: ❗️ Methods and Ways of Mitigation

The web has been the greatest type of development in the 21st century. It has uncovered the whole world to more current prospects and more effective methods of living. Today, we have various sites, online stores, online papers, etc. Essentially everything is online nowadays. Be that as it may, th...

CVE-2021-35549

Oracle Solaris 11 Utility vulnerability (CVE-2021-35549) is described as a low-privilege, local flaw that requires user interaction to exploit. Successful attacks could unauthorizedly update/insert/delete Oracle Solaris data and cause a partial denial of service in affected systems. The CVSS 3.1 ...

CVE-2021-35540

CVE-2021-35540 affects Oracle VM VirtualBox (Core) prior to 6.1.28. The vulnerability allows a low-privilege, logon-based attacker to compromise VirtualBox, with the documented impact of a hang or frequently repeatable crash (DoS) on affected systems. The issue is limited to the VirtualBox Core c...

CrowdSec - An Open-Source Massively Multiplayer Firewall Able To Analyze Visitor Behavior And Provide An Adapted Response To All Kinds Of Attacks

CrowdSec is a free, modern & collaborative behavior detection engine, coupled with a global IP reputation network. It stacks on fail2ban's philosophy but is IPV6 compatible and 60x faster Go vs Python, uses Grok patterns to parse logs and YAML scenario to identify behaviors. CrowdSec is engineere...

Zoho ManageEngine Password Manager Zero-Day Gets Fix

A critical security vulnerability in the Zoho ManageEngine ADSelfService Plus platform could allow remote attackers to bypass authentication and have free rein across users’ Active Directory AD and cloud accounts. The issue CVE-2021-40539 has been actively exploited in the wild as a zero-day,...

What’s past is prologue – A new world of critical infrastructure security

By Caitlin Huey, Joe Marshall and Thomas Pope. Attackers have targeted American critical infrastructure several times over the past few years, putting at risk U.S. electrical grids, oil pipelines and water supply systems. However, we collectively have not responded in a meaningful way to these...

Ransomware to be investigated like terrorism

The impact of recent ransomware attacks on vital infrastructure in the US has triggered a reaction from the US Attorney’s office. In an internal guidance it says that all ransomware investigations in the field should be centrally coordinated with a recently created task force in Washington...

Colonial Pipeline attack spurs new rules for critical infrastructure

Following a devastating cyberattack on the Colonial Pipeline, the Transportation Security Administration—which sits within the government’s Department of Homeland Security—will issue its first-ever cybersecurity directive for pipeline companies in the United States, according to exclusive reporti...

CVE-2021-2296

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.20. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...

CVE-2021-2312

CVE-2021-2312 concerns Oracle VM VirtualBox (Core) with affected builds prior to 6.1.20 on Windows. The issue allows a high-privilege, local attacker to cause a hang or a frequent crash (partial/complete DOS) of VirtualBox. Public sources consistently tie the flaw to Windows systems and describe ...

CVE-2021-2291

CVE-2021-2291 affects Oracle VM VirtualBox Core prior to 6.1.20. The vulnerability, described as difficult to exploit, allows a low-privileged attacker with logon to the infrastructure where VirtualBox runs to gain unauthorized access to data or full access to VirtualBox data. CVSS 3.1 base score...

CVE-2021-2281

CVE-2021-2281 affects Oracle VM VirtualBox (Core) with affected versions prior to 6.1.20. The vulnerability allows an unauthenticated attacker who can log on to the infrastructure where VirtualBox runs to compromise VirtualBox, potentially leading to unauthorized creation, deletion, or modificati...

CVE-2021-2282

CVE-2021-2282 affects Oracle VM VirtualBox Core, with vulnerable versions before 6.1.20. The issue enables information disclosure or unauthorized data access when an unauthenticated user logs on to the infrastructure where VirtualBox runs. The practical impact is access to critical data or all Vi...

CVE-2021-2287

Oracle VM VirtualBox CVE-2021-2287 affects the Core component and is tied to versions prior to 6.1.20. The vulnerability enables an unauthenticated attacker with local logon to compromise the VirtualBox instance, potentially leading to unauthorized data access. The issue is documented with a CVSS...

CVE-2021-2250

CVE-2021-2250 affects Oracle VM VirtualBox Core (pre-6.1.20). The issue allows high-privilege attackers with logon to compromise VirtualBox, with potential takeover of the product and impact to connected products. The family of CVEs discussed (including CVE-2021-2250, 2145, 2264–2310, etc.) share...

More Biden Cybersecurity Nominations

News: President Biden announced key cybersecurity leadership nominations Monday, proposing Jen Easterly as the next head of the Cybersecurity and Infrastructure Security Agency and John "Chris" Inglis as the first ever national cyber director NCD. I know them both, and think theyre both good...

4 Steps to Container Lifecycle Security

Containers and Kubernetes have revolutionized developing, deploying, and scaling applications and infrastructure. Learn best practices for security across the container lifecycle, so you can guard your containers against attack...

Critical Flaws Affecting GE's Universal Relay Pose Threat to Electric Utilities

The U.S. Cybersecurity and Infrastructure Security Agency CISA has warned of critical security shortcomings in GE's Universal Relay UR family of power management devices. "Successful exploitation of these vulnerabilities could allow an attacker to access sensitive information, reboot the UR, gain...

Ransomware Attack Strikes Spain’s Employment Agency

The Spanish State Employment Service SEPE in Spain has been hit by a cyberattack, suspending its communications systems across hundreds of offices and delaying thousands of appointments. SEPE is an “autonomous body” in Spain that manages and controls unemployment benefits. The cyberattack hit...

GHSA-XR9H-9M79-X29G SSRF in Rendertron

Rendertron versions prior to 3.0.0 are are susceptible to a Server-Side Request Forgery SSRF attack. An attacker can use a specially crafted webpage to force a rendertron headless chrome process to render internal sites it has access to, and display it as a screenshot. Suggested mitigations are t...