CyberConvoy Blog

Experts created a technique to bypass web application firewalls (WAF) of several major vendors

Researchers have verified that the bypass attack technique has worked against firewalls from multiple vendors, including Cloudflare, F5, Imperva, and Palo Alto Networks

9 December

Cisco discloses high-severity IP phone bug with exploit code

Cisco has disclosed today a high-severity vulnerability affecting the latest generation of its IP phones and exposing them to remote code execution and denial of service (DoS) attacks

8 December

Automated dark web markets sell corporate email accounts for $2

Security researchers who followed this trend have reported at least 225,000 email accounts for sale on underground markets

8 December

Sophos fixed a critical flaw in its Sophos Firewall version 19.5

Sophos addressed several vulnerabilities affecting its Sophos Firewall version 19.5, including arbitrary code execution issues

7 December

Dell, HP, and Lenovo Devices Found Using Outdated OpenSSL Versions

12/03/2022
Cyber News
Hardening, PrivEsc, Security, SupplyChain

An analysis of firmware images across devices from Dell, HP, and Lenovo has revealed the presence of outdated versions of the OpenSSL cryptographic library, underscoring a supply chain risk

3 December