Hardening Archives - Page 3 of 8

Akira ransomware targets Cisco VPNs to breach organizations

Akira has been using compromised Cisco VPN accounts to breach corporate networks without needing to drop additional backdoors

26 August

Microsoft August 2023 Patch Tuesday warns of 2 zero-days, 87 flaws

This month's Patch Tuesday fixes two zero-day vulnerabilities, with both exploited in attacks and one of them publicly disclosed

8 August

Malicious npm Packages Found Exfiltrating Sensitive Data from Developers

The harvested data, which could also contain credentials and valuable intellectual property, is ultimately transmitted to the server in the form of a ZIP archive file

4 August

Almost 40% of Ubuntu users vulnerable to new privilege elevation flaws

CVE-2023-2640 is a high-severity (CVSS v3 score: 7.8) vulnerability in the Ubuntu Linux kernel caused by inadequate permission checks allowing a local attacker to gain elevated privileges

29 July

Atlassian Releases Patches for Critical Flaws in Confluence and Bamboo

If successfully exploited, could result in remote code execution on susceptible systems

29 July

Apple fixes new zero-day used in attacks against iPhones, Macs

Attackers could exploit it on unpatched devices to modify sensitive kernel states

25 July

Ivanti patches MobileIron zero-day bug exploited in attacks

An authentication bypass vulnerability in Ivanti EPMM allows unauthorized users to access restricted functionality or resources of the application without proper authentication

25 July