Cisco released security updates to patch critical vulnerabilities in multiple Cisco IOS products as well as high severity bugs in Cisco Wireless LAN, IOS, and other products. Two advisories have been updated with known public vulnerability exploits as recently evealed in Sea Turtle DNS hijacking campaign.
Cisco patches Critical Vulnerability, warns of known public exploits Read More »
A former student at the College of St. Rose, in New York used a weaponized USB stick dubbed “USB Killer” to destroy 59 university computers and seven monitors that had open USB slots.
Former student uses “USB Killer” device to destroy university computers Read More »
Security experts warn of a new cyber threat campaign dubbed “Sea Turtle” that targets public and private organizations in the Middle East and North Africa. The ongoing operation likely lasted from January 2017 through the first quarter of this year.
“Sea Turtle” DNS hijacking campaign Read More »
The CERT Coordination Center (CERT/CC) has released a security advisory describing multiple vulnerabilities that impact Broadcom WiFi chipset drivers. Four vendors have confirmed they are impacted at the time of the latest published advisory on Wednesday.
Broadcom WiFi chipset driver vulnerabilities Read More »
Oracle has released its Critical Patch Update for April 2019 to include 297 vulnerability fixes across multiple products. Oracle continues to receive reports of remote attackers attempting to maliciously exploit unpatched vulnerabilities.
Oracle Critical Patch Update for April 2019 Read More »
Cybercrime investigative journalist Brian Krebs reports the Indian IT outsourcing and consulting company Wipro has been hacked. Multiple sources had informed Krebs that attackers breached Wipro’s internal IT systems and then used those systems to then launch attacks against Wipro’s customers.
Wipro data breach Read More »
Cisco’s Talos security team has observed ongoing malware distribution campaigns that use a new version of a keylogger and password stealer “HawkEye Reborn v9.”
HawkEye Reborn: Password Stealer and Keylogger threat Read More »
The Apache Software Foundation has released new Apache Tomcat versions and mitigations to address a remote code execution (RCE) vulnerability.
Apache patches Tomcat RCE vulnerability Read More »
Multiple VPN applications are vulnerable to not properly encrypting sensitive data and insecurely storing session cookies.
VPN applications exposed to critical vulnerability Read More »
The Wi-Fi Alliance® issued a security update confirming the discovery of vulnerabilities in WPA3-Personal by security researchers. The vulnerabilities collectively dubbed “DragonBlood” is based on the underlying Dragonfly handshake used by WPA3.
DragonBlood WPA3 vulnerabilities discovered Read More »
