The vulnerability of the ActiveX control of Internet Explorer allows a hacker to execute arbitrary code.

The vulnerability of the ActiveX control in Internet Explorer is related to errors in processing the .mht file’s header. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted file to the user...

Qualys Integrates with Shodan to Help Map the External Attack Surface

Qualys CyberSecurity Asset Management CSAM now natively integrates with Shodan to enable cybersecurity teams to identify all assets visible on the internet, including previously unknown and potential security issues… before attackers find them. Your attack surface is dynamic. Assets come and go,...

More on NSO Group and Cytrox: Two Cyberweapons Arms Manufacturers

Citizen Lab published another report on the spyware used against two Egyptian nationals. One was hacked by NSO Groups Pegasus spyware. The other was hacked both by Pegasus and by the spyware from another cyberweapons arms manufacturer: Cytrox. We havent heard a lot about Cytrox and its Predator...

PT-2021-7004

Name of the Vulnerable Software and Affected Versions AVG Anti-Virus Free affected versions not specified AVG Internet Security affected versions not specified AVG Anti-Virus affected versions not specified Description The issue is related to insufficient access control in the aswArPot.sys driver...

How to Prevent Customer Support Help Desk Fraud Using VPN and Other Tools

It's no secret that the internet isn't a very safe place. And it's not hard to understand why. It's a medium that connects billions of people around the world that affords bad actors enough anonymity to wreak havoc without getting caught. It's almost as if the internet's tailor-made to enable sca...

Apache Log4Shell CVE-2021-45046 Bypass Remote Code Execution

Binary data apachelog4shellCVE-2021-45056directcheck.nbin...

CVE-2021-27855

FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p91 and 10.2.2r42 allows a remote, authenticated attacker with read-only privileges to grant themselves administrative privileges. Older versions of FatPipe software may also be vulnerable. The FatPipe advisory identifier for this...

CVE-2021-43888

Microsoft Defender for IoT Information Disclosure Vulnerability...

CVE-2021-43882

Microsoft Defender for IoT Remote Code Execution Vulnerability...

CVE-2021-43889

Microsoft Defender for IoT Remote Code Execution Vulnerability...

CVE-2021-43889

Microsoft Defender for IoT Remote Code Execution Vulnerability...

CVE-2021-43882

Microsoft Defender for IoT Remote Code Execution Vulnerability...

CVE-2021-43247

Windows TCP/IP Driver Elevation of Privilege Vulnerability...

CVE-2021-42311

Microsoft Defender for IoT Remote Code Execution Vulnerability...

CVE-2021-42310

Microsoft Defender for IoT Remote Code Execution Vulnerability...

CVE-2021-42313

Microsoft Defender for IoT Remote Code Execution Vulnerability...

CVE-2021-42312

Microsoft Defender for IoT Elevation of Privilege Vulnerability...

CVE-2021-42315

Microsoft Defender for IoT Remote Code Execution Vulnerability...

CVE-2021-41365

Microsoft Defender for IoT Remote Code Execution Vulnerability...

FatPipe 安全漏洞

FatPipe is a WAN redundancy technology from FatPipe USA that provides companies with automated and dynamic failover due to the failure of a WAN component or service resulting in the loss of data line connectivity.A security vulnerability exists in FatPipe WARP, IPVPN and MPVPN, which stems from t...