vulnerability (Page 19)

CVE-2021-44832: The fifth critical vulnerability discovered in the Apache logging library

On: December 29, 2021

Tagged: Apache Software Foundation, Common Vulnerability Scoring System (CVSS), Cyberattack, cybercrime, cybersecurity, Denial of Service (DDoS), Hacking, Information Security, Log4j, man-in-the-middle (MITM), remote code execution (RCE), security flaws, security patches, vulnerability

This week, the Apache Software Foundation issued a new set of patches to address remote code execution (RCE) flaws in Log4j, which could be exploited by threat actors to compromiseRead More →

12 critical vulnerabilities in mySCADA myPRO could shutdown lots of manufacturing plants

On: December 27, 2021

In: Vulnerabilities

Tagged: arbitrary code execution, Cyberattack, cybercrime, cybersecurity, Cybersecurity and Infrastructure Security Agency (CISA), Hacking, Information Security, malware, myPRO, mySCADA, privilege escalation, remote code execution (RCE), security flaws, vulnerability

A cybersecurity specialist reports the detection of a dozen vulnerabilities in myPRO, a product developed by industrial automation firm mySCADA. Among the reported flaws, the expert highlighted an error consideredRead More →

Critical vulnerability breaks Site Isolation feature in Google Chrome. Update immediately

On: December 21, 2021

In: Vulnerabilities

Tagged: Chrome, Cyberattack, cybercrime, cybersecurity, Firefox, Google, Google Project Zero, Hacking, incidents, Information Security, security flaws, Site Isolation, vulnerability, Web Browsers

Cybersecurity specialists report the detection of a flaw that would allow threat actors to abuse a set of load optimization features in Google Chrome to evade the Site Isolation feature.Read More →

Free tool to detect Log4j components in your network infrastructure: Check if your servers are vulnerable

On: December 20, 2021

In: Vulnerabilities

Tagged: Cyberattack, cybersecurity, GitHub, Hacking, Hacking Tools, Information Security, Linux, Log4j, macOS, network security, operating systems, security flaws, vulnerability, Windows

Exploiting vulnerabilities detected in previous versions of Log4j remains a severe issue, so the cybersecurity community is still looking for the best ways to prevent a cyberattack. However, some usersRead More →

Critical vulnerability in All In One SEO WordPress plugin affects 3 million websites

On: December 17, 2021

In: Vulnerabilities

Tagged: All in One SEO, content management system (CMS), Cyberattack, cybercrime, cybersecurity, data security, data theft, Hacking, Information Security, infosec, Plugins, security flaws, vulnerability, Wordpress

Cybersecurity specialists report the detection of a critical vulnerability in All In One SEO, one of the most popular plugins in WordPress, installed on more than 3 million websites operatedRead More →

How you can hack the US Department of Homeland Security and earn a great bounty?

On: December 15, 2021

In: Cyber Security

Tagged: Bug Bounty program, cybersecurity, Cybersecurity and Infrastructure Security Agency (CISA), Department of Homeland Security (DHS), ethical hacking, Hack DHS, Hack the Army, Hacking, incidents, Information Security, research, United States, vulnerability, vulnerability testing

In a statement, the U.S. Department of Homeland Security (DHS) announced the launching of “Hack DHS”, a new vulnerability bounty program that will allow the ethical hacking community to discoverRead More →

TP-Link wireless router vulnerability makes your home network a part of new botnet

On: December 13, 2021

In: Vulnerabilities

Tagged: botnet, cybersecurity, Denial of Service (DDoS), Hacking, incidents, Information Security, malware, Manga botnet, Mirai botnet, remote code execution (RCE), Routers, security flaws, vulnerability

Cybersecurity specialists report the detection of Manga, a new variant of the Mirai botnet focused especially on the compromise of TP-Link routers using the CVE-2021-41653 vulnerability. The flaw affects TL-WE840NRead More →

Critical vulnerability in SanDisk Secure Access: Patch immediately

On: December 10, 2021

In: Vulnerabilities

Tagged: Common Vulnerability Scoring System (CVSS), Cyberattack, cybercr, cybersecurity, Hacking, incidents, International Institute of Cyber Security (IICS), SanDisk, SanDisk Secure Access, vulnerability, Western Digital

Western Digital announced an update to its SanDisk SecureAccess/PrivateAccess product, hoping to address a vulnerability that would allow its users’ data to be accessed through brute force and dictionary attacks.Read More →

Two unpatched vulnerabilities in SolarWinds Serv-U

On: December 9, 2021

In: Vulnerabilities

Tagged: Common Vulnerability Scoring System (CVSS), cross-site request forgery (CSRF) attack, cybersecurity, Hacking, incidents, Information Security, security flaws, SolarWinds, vulnerability

Information security specialists reported the finding of two critical vulnerabilities affecting SolarWinds Serv-U. According to the report, successful exploitation of these flaws would allow the deployment of multiple attack scenarios.Read More →