+84949482065
Due to improper sanitization iPack SCADA Automation software suffers from a remote SQL injection vulnerability. An unauthenticated attacker with the web access is able to extract critical information from the…
The NetConfig UI administrative interface in Extreme Networks Extreme Wireless Aerohive HiveOS and IQ Engine through 10.0r8a allows attackers to execute PHP code as the root user via remote HTTP…
Adobe After Effects version 18.4.1 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious .m4a file, potentially resulting in arbitrary code execution in…
A public interest researcher who conducts investigations on the security of the critical electric sector said that the presence of Chinese transformer threats has now been confirmed by the administrations…
Researchers at ESET have detected a watering hole attack that targeted several websites, including the Middle East Eye news site. The campaign was active between March 2020 and August 2021.…
The US Cybersecurity and Infrastructure Security Agency (CISA) has published incident and vulnerability response handbooks for Federal Civilian Executive Branch (FCEB) agencies. CISA writes that the “playbooks provide FCEB agencies…
In a joint alert, law enforcement and cybersecurity agencies in the US, the UK, and Australia warn that cyberthreat actors with ties to Iran are targeting organizations in the healthcare…
Microsoft released an out-of-band security update for some Windows Server systems, fixing a vulnerability that was causing some servers to fail to authenticate users that relied on single sign-on tokens…
China is considering implementing cybersecurity reviews to assess the national security threat posed companies that wish to be listed on the Hong Kong stock exchange. More https://www.bloomberg.com/news/articles/2021-11-14/china-may-seek-cyber-check-for-hk-listings-of-firms-holding-data
U.S. President Joe Biden signed a massive infrastructure bill that includes nearly $2 billion for cybersecurity improvements, including large grants for local and state governments to improve critical infrastructure security.…
