A new critical vulnerability affecting the SAP Commerce platform was reported yesterday. CVE-2021-21477 in SAP Commerce Platform CVE-2021-21477 could allow threat actors take advantage of the SAP application used by e-commerce businesses, leading to remote code execution. The flaw affects…
Remember CVE-2021-3156, the vulnerability affecting the entire Linux ecosystem and macOS? Apple Just Released a Fix for CVE-2021-3156 A successful exploit scenario could allow unprivileged users to obtain root privileges on the vulnerable host. Qualys, the company that reported the…
Cyberattacks can compromise the systems of crucial facilities, thus endangering the lives of people. This is what happened in Florida, USA recently, when a malicious intruder remotely accessed the IT system of the water treatment facility. The incident took place…
Phishing operators have created a new obfuscation technique that uses Morse code to conceal malicious URLs within an email attachment. This is perhaps the first case of threat actors utilizing Morse code in such a way. Threat Actors Using Morse…
Have you been using The Great Suspender Chrome extension? If so, you should beware that the extension was found to contain malware. Google already removed the popular add-on and even deactivated it on users’ computers. The Malicious Capabilities of The…
Remember CVE-2021-3156, also known as Baron Samedit? It is a recently disclosed vulnerability affecting nearly the entire Linux ecosystem. CVE-2021-3156 Also Affects macOS According to the latest research, Linux is not the only environment that the vulnerability affects. Researcher Matthew…
According to Google security researcher Maddie Stone, software developers should stop delivering faulty zero-day patches. In a presentation during the USENIX’s Enigma 2021 virtual conference, the researcher shared an overview of the zero-day exploits detected last year. Zero-Day Flaws Not…
Ransomware operators are known to exploit various vulnerabilities, especially in campaigns against enterprises and organizations. Such is the case with two vulnerabilities in the VMWare ESXi product, included in the attacks of at least one prominent ransomware gang. These attacks…
Security researchers just released an alert about a new SonicWall zero-day vulnerability. NCC Group said that it detected active exploit attempts against the flaw and notified SonicWall. SonicWall Zero-Day Exploited in the Wild The firm has analyzed reports from their…
CVE-2021-3156 is a recently disclosed vulnerability that affects almost the entire Linux ecosystem. Security researchers from Qualys named the major flaw “Baron Samedit,” as it affects “sudoedit -s”. According to the official description, the vulnerability is a heap-based buffer overflow,…
Apple recently addressed three zero-day vulnerabilities in iOS, iPadOS. CVE-2021-1782, CVE-2021-1870, and CVE-2021-1871 could allow threat actors to perform privilege escalation and remote code execution attacks. The company says the vulnerabilities were likely exploited in the wild, without specifying the…
Security researchers discovered a new threat endangering Linux servers. Called DreamBus, the botnet is a new variant of a previously known malware known as SystemdMiner. It is noteworthy that DreamBus is more evolved when compared to SystemdMiner. Zscaler researchers warn…
This article will reveal the ten techniques used ever more frequently for committing digital advertisement fraud. From hijacking adverts to using bots, cybercriminals make money off the backs of ad publishers and the advertising industry. The attacks are increasing both…
Security researcher Pierre Kim reported at least 28 security vulnerabilities and backdoors in the firmware of the FiberHome Technologies’ FTTH ONT router. According to Shodan data, the router is commonly used in South America and Southeast Asia. “FiberHome Technologies is…
Cisco’s Small Business RV110W, RV130, RV130W, and RV215W routers contain 68 vulnerabilities. However, the company doesn’t plan on fixing them. Instead, “customers are advised to refer to the end-of-life notices for these products,” the advisory explained. What is causing the…
Security researchers recently uncovered a Russian scam operation that made more than $6.5 million from victims across the United States, Europe, and former Soviet countries. The so-called Classiscam scheme was discovered by Group-IB researchers who came across an automated scam-as-a-service…
Cybersecurity experts have been looking into ways to improve anti-ransomware protection. The latest enhancement in the field is already a fact. 11th Generation of Intel Core vPro Business-Class Processors Intel and Cybereason have combined their efforts to add anti-ransomware defenses…
For Microsoft and Windows users, 2021 starts off with a heavy Patch Tuesday, addressing a total of 83 security vulnerabilities. Microsoft fixed bugs in the Windows operating system and some issues in cloud-based products, enterprise servers, and developer tools. However,…
David Schütz, a security researcher, just published a report detailing a YouTube security vulnerability that could make private videos visible at reduced resolution. To exploit the flaw, an attacker would need to know (or guess) the video identifier. Of course,…
Sixteen vulnerabilities were discovered in the Nvidia GPU display driver and vGPU software, some of which severe. The vulnerabilities could lead to denial of service, escalation of privileges, data tampering, and information disclosure attacks. The Nvidia GPU display driver supports…
