December’s Patch Tuesday comes with numerous security fixes and improvements, including two actively exploited zero-day vulnerabilities. The list features spoofing, denial of service, remote code execution, elevation of privilege, and…
Tag: Remote Code Execution Vulnerability
CISA orders federal civilian agencies to patch Log4j vulnerability and 12 others by December 24
The US Cybersecurity and Infrastructure Security Agency has ordered all civilian federal agencies to patch the Log4j vulnerability and three others by December 24, adding it to the organization’s Known…
Security Advisory: Bitdefender Response to Critical Zero-Day Apache Log4j2 Vulnerability
On December 9, 2021, Apache disclosed CVE-2021-44228, a remote code execution vulnerability – assigned with a severity of 10 (the highest possible risk score) – affecting Apache Log4j2, a Java-based…
The In-house Zoho ServiceDesk Exploit Used to Drop Webshells
You may recall that we reported a while ago that state-backed advanced persistent threat (APT) organizations had been actively exploiting a significant hole in a Zoho single sign-on and password…
Vulnerabilities Exploited for Monero Mining Malware Delivered via GitHub, Netlify
Trend Micro – Trend Micro – Vulnerabilities Exploited for Monero Mining Malware Delivered via GitHub, Netlify We looked into exploitation attempts we observed in the wild and the abuse of…
Files Within Password-Protected WinRAR Archives Locked by New Memento Ransomware Group
Memento ransomware group makes its way on the threat landscape scene. Their approach seems to be quite uncommon, as the threat actor group locks files in WinRAR archives protected by…
Magniber Ransomware Shifts Attention Now to Internet Explorer Vulnerabilities
A change of focus took place in the Magniber ransomware’s gang attack method arsenal, as now the threat actor group started to propagate the ransomware and encrypt users’ devices by…
Palo Alto Networks patches zero-day affecting firewalls using GlobalProtect Portal VPN
Researchers with cybersecurity firm Randori have discovered a remote code execution vulnerability in Palo Alto Networks firewalls using the GlobalProtect Portal VPN. ZDNet Recommends The zero-day — which has a…