Technology Archives - CyberConvoy Blog

Parental control app with 5 million downloads vulnerable to attacks

Impacted by multiple vulnerabilities that could enable attackers to upload arbitrary files on protected devices, steal user credentials, and allow children to bypass restrictions without the parents noticing

17 May

CISA Warns of Active Attacks Exploiting Fortra MFT, TerraMaster NAS, and Intel Driver Flaws

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added three flaws to its Known Exploited Vulnerabilities

11 February

SonicWall warns web content filtering is broken on Windows 11 22H2

This results in Web Content Filtering (WCF) policies that enforce blocked categories to be no longer effective on impacted endpoints

9 February

Microsoft fixes TLS handshake failures in Windows Server 2019

On affected devices, users see SEC_E_ILLEGAL_MESSAGE errors in applications when connections to servers experience issues

18 October

How to protect your Mac against ransomware and other cyberthreats

10/01/2022
Cyber News
Exploit, Hacking, Malware, Ransomware, Technology

Think "Macs don't get viruses"? Think again!

1 October

Google, Microsoft can get your passwords via web browser’s spellcheck

09/19/2022
Cyber News
Breach, Exploit, Hacking, Hardening, PrivEsc, Security, Technology

Depending on the website you visit, the form data may itself include PII—including but not limited to Social Security Numbers (SSNs)/Social Insurance Numbers (SINs), name, address, email, date of birth (DOB), contact information, bank and payment information, etc

19 September

CISA orders agencies to patch Windows, iOS bugs used in attacks

09/19/2022
Cyber News
0day, Hacking, Patching, PrivEsc, Technology

The elevation of privileges bug in the Windows Common Log File System Driver is tracked as CVE-2022-37969, enabling local attackers to gain SYSTEM privileges following successful exploitation.

19 September

Microsoft, Cloud Providers Move to Ban Basic Authentication

09/10/2022
Cyber News
Technology

The deadlines are a warning to companies that efforts to secure their access to cloud services can no longer be put off

10 September

Newly Uncovered PyPI Package Drops Fileless Cryptominer to Linux Systems

The module, named "secretslib" and downloaded 93 times before its deletion, was released to the Python Package Index (PyPI) on August 6, 2022, and is described as "secrets matching and verification made easy."

16 August