Jenkins, a popular open source automation server software, has patched a Critical buffer corruption vulnerability CVE-2019-17638 in bundled Jetty.
Jenkins patches Critical vulnerability (CVE-2019-17638) Read More »
Security researchers have discovered a new mac malware dubbed XCSSET. The malware not only inserts malicious code into XCode projects, but also leverages two zero-days to exploit a flaw in Data Vaults and plant a JavaScript backdoor in Safari.
XCSSET mac malware targets Xcode projects to deliver malicious payloads Read More »
The National Security Agency (NSA) and the Federal Bureau of Investigation (FBI) have released a joint cybersecurity alert for a new Russian malware dubbed Drovorub.
NSA and FBI: watch out for Russian malware Drovorub Read More »
The Apache Software Foundation has patched two vulnerabilities in Apache Struts 2 that could result in remote code execution (RCE) or Denial of Service (DoS). An attacker could exploit one of these vulnerabilities to take control of impacted systems. According to Apache, the two vulnerabilities affect Struts versions 2.0.0 – 2.5.20 and are described in
Apache patches two Struts 2 vulnerabilities Read More »
Microsoft has released August 2020 Security updates, that includes a patch for an actively attacked memory corruption vulnerability (CVE-2020-1380) in the Scripting Engine. Adobe also released updates for Adobe Acrobat and Reader, as well as Lightroom.
Microsoft August 2020 Security and Adobe Updates Read More »
WordPress has released WordPress 5.5 “Eckstine” version that includes improvements in three major areas: speed, search and security.
WordPress 5.5 adds new speed, search and security features Read More »
Google has released Chrome 84.0.4147.125 security update for Windows, Mac and Linux.
Google releases Chrome security update (84.0.4147.125) Read More »
Hackers are using thousands of legitimate emails accounts to launch impersonation and business email compromise (BEC) attacks against thousands of organizations.
Malicious accounts used in BEC attacks against 6,600 organizations Read More »
Security experts from Check Point Research have observed a sharp increase in Emotet botnet activity used to spread spam campaigns and steal banking credentials.
Security experts see sharp increase in the Emotet botnet activity Read More »
An internal employee memo revealed Canon has suffered from a ransomware attack that affected their U.S. website and multiple internal services.
Canon suffers Maze ransomware attack Read More »
