38666 matches found
Meta Sues Hackers Behind Facebook, WhatsApp and Instagram Phishing Attacks
Facebook's parent company Meta Platforms on Monday said it has filed a federal lawsuit in the U.S. state of California against bad actors who operated more than 39,000 phishing websites that impersonated its digital properties to mislead unsuspecting users into divulging their login credentials...
ASG2100 has weak password vulnerability
ASG2100 is an Internet behavior management product. ASG2100 is vulnerable to a weak password vulnerability. An attacker could exploit this vulnerability to obtain sensitive information...
The vulnerability of the ActiveX control of Internet Explorer allows a hacker to execute arbitrary code.
The vulnerability of the ActiveX control in Internet Explorer is related to errors in processing the .mht file’s header. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted file to the user...
Qualys Integrates with Shodan to Help Map the External Attack Surface
Qualys CyberSecurity Asset Management CSAM now natively integrates with Shodan to enable cybersecurity teams to identify all assets visible on the internet, including previously unknown and potential security issues… before attackers find them. Your attack surface is dynamic. Assets come and go,...
More on NSO Group and Cytrox: Two Cyberweapons Arms Manufacturers
Citizen Lab published another report on the spyware used against two Egyptian nationals. One was hacked by NSO Groups Pegasus spyware. The other was hacked both by Pegasus and by the spyware from another cyberweapons arms manufacturer: Cytrox. We havent heard a lot about Cytrox and its Predator...
PT-2021-7004
Name of the Vulnerable Software and Affected Versions AVG Anti-Virus Free affected versions not specified AVG Internet Security affected versions not specified AVG Anti-Virus affected versions not specified Description The issue is related to insufficient access control in the aswArPot.sys driver...
How to Prevent Customer Support Help Desk Fraud Using VPN and Other Tools
It's no secret that the internet isn't a very safe place. And it's not hard to understand why. It's a medium that connects billions of people around the world that affords bad actors enough anonymity to wreak havoc without getting caught. It's almost as if the internet's tailor-made to enable sca...
Apache Log4Shell CVE-2021-45046 Bypass Remote Code Execution
Binary data apachelog4shellCVE-2021-45056directcheck.nbin...
CVE-2021-27855
FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p91 and 10.2.2r42 allows a remote, authenticated attacker with read-only privileges to grant themselves administrative privileges. Older versions of FatPipe software may also be vulnerable. The FatPipe advisory identifier for this...
CVE-2021-43888
Microsoft Defender for IoT Information Disclosure Vulnerability...
CVE-2021-43882
Microsoft Defender for IoT Remote Code Execution Vulnerability...
CVE-2021-43889
Microsoft Defender for IoT Remote Code Execution Vulnerability...
CVE-2021-43882
Microsoft Defender for IoT Remote Code Execution Vulnerability...
CVE-2021-43889
Microsoft Defender for IoT Remote Code Execution Vulnerability...
CVE-2021-43247
Windows TCP/IP Driver Elevation of Privilege Vulnerability...
CVE-2021-42311
Microsoft Defender for IoT Remote Code Execution Vulnerability...
CVE-2021-42310
Microsoft Defender for IoT Remote Code Execution Vulnerability...
CVE-2021-42313
Microsoft Defender for IoT Remote Code Execution Vulnerability...