SQL Server malware “MrbMiner” attacks
Security researchers have identified the source of a SQL Server malware “MrbMiner” attacks allegedly tied to an Iranian software firm.
Network Security
Securezoo Cybersecurity Threat Center blog posts regarding Network Security.
Cisco patches 8 Critical SD-WAN vulnerabilities and flaws in other network products
Cisco has patched eight Critical vulnerabilities in SD-WAN products, as well as fixes for multiple other network products.
DNSpooq: Dnsmasq vulnerabilities open up network and Linux devices to attack
Security researchers have discovered seven Dnsmasq vulnerabilities that open up many network and Linux devices to DNS cache poisoning attacks or remote code execution.
NSA issues new guidance on encrypted DNS
The National Security Agency (NSA) has issued new guidance for adopting encrypted DNS over HTTPS dubbed “DoH.”
Cisco patches High risk vulnerabilities in Small Business routers and other products
Cisco has patched multiple vulnerabilities in Small Business routers, Cisco Connected Mobile Experiences (CMX) and AnyConnect products.
High risk vulnerability in Zyxel firewalls and AP controllers exploited in the wild
Security experts have warned about a high risk hardcoded credential vulnerability in Zyxel firewalls and AP controllers. Some sources have confirmed that bad actors have already ramped up exploits against the vulnerability.
QNAP fixes Command Injection vulnerability in QTS and QuTS hero
QNAP has fixed a High severity Command Injection vulnerability CVE-2020-25847 in QTS and QuTS hero.
Hackers target 50K vulnerable Fortinet devices to steal passwords
Cybersecurity experts are warning hackers are targeting nearly 50,000 vulnerable unpatched Fortinet VPNs to steal passwords.
Cisco patches 3 Critical vulnerabilities in IMC, DNA Spaces Connector and IoT products
Cisco has patched three Critical vulnerabilities in Cisco Integrated Management Controller (IMC), DNA Spaces Connector and IoT Field Network Director (FND) products.
Cisco patches 3 Security Manager vulnerabilities
Cisco has patched three Cisco Security Manager vulnerabilities, one rated Critical and two High severity, that could allow a remote attacker to exploit and obtain sensitive information.