Month: May 2021

  • iPhone Hack Allegedly Used to Spy on China’s Uyghurs

    DEFENDEDGE

    U.S. intelligence said that the Chaos iPhone remote takeover exploit was used against the minority ethnic group before Apple could patch the problem. Read more

  • Qualcomm Chip Bug Opens Android Fans to Eavesdropping

    DEFENDEDGE

    A malicious app can exploit the issue, which could affect up to 30 percent of Android phones. Read more

  • Exim Releases Security Update

    DEFENDEDGE

    Original release date: May 7, 2021 Exim has released a security update to address multiple vulnerabilities in Exim versions prior to 4.94.2. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the Exim 4.94.2 update page and apply the necessary update.… Read more

  • Joint NCSC-CISA-FBI-NSA Cybersecurity Advisory on Russian SVR Activity

    DEFENDEDGE

    Original release date: May 7, 2021 CISA has joined with the United Kingdom’s National Cyber Security Centre (NCSC), the Federal Bureau of Investigation (FBI), and the National Security Agency (NSA), in releasing a Joint Cybersecurity Advisory on Russian Foreign Intelligence Service (SVR) tactics, techniques, and procedures. Further TTPs associated with SVR cyber actors provides additional… Read more

  • Critical Cisco SD-WAN, HyperFlex Bugs Threaten Corporate Networks

    DEFENDEDGE

    The networking giant has rolled out patches for remote code-execution and command-injection security holes that could give attackers keys to the kingdom. Read more

  • Mozilla Releases Security Updates for Firefox

    DEFENDEDGE

    Original release date: May 6, 2021 Mozilla has released security updates to address vulnerabilities in Firefox. An attacker could exploit these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the Mozilla Security Advisory for Firefox 88.0.1 and apply the necessary updates. This product is provided subject to this… Read more

  • CISA Releases Analysis Reports on New FiveHands Ransomware

    DEFENDEDGE

    Original release date: May 6, 2021 CISA is aware of a recent, successful cyberattack against an organization using a new ransomware variant, known as FiveHands, that has been used to successfully conduct a cyberattack against an organization.   CISA has released AR21-126A: FiveHands Ransomware and MAR-10324784-1.v1: FiveHands Ransomware to provide analysis of the threat actor’s tactics, techniques,… Read more

  • What is Web Application Pen Testing? How is it done?

    DEFENDEDGE

    What is Web Application Pen Testing? How is it done?  Web Application Pen Testing is done to find vulnerabilities in the web application using different types of Pen Testing tools, which are later exploited by an attacker. According to SiteLock data, websites experience an average of 22 attacks per day. Most common vulnerabilities that are exploited are Cross Site Scripting (XSS), Broken Access Control and even Security Misconfigurations. The… Read more

  • Anti-Spam WordPress Plugin Could Expose Website User Data

    DEFENDEDGE

    ‘Spam protection, AntiSpam, FireWall by CleanTalk’ is installed on more than 100,000 sites — and could offer up sensitive info to attackers that aren’t even logged in. Read more

  • Raft of Exim Security Holes Allow Linux Mail Server Takeovers

    DEFENDEDGE

    Remote code execution, privilege escalation to root and lateral movement through a victim’s environment are all on offer for the unpatched or unaware. Read more