Cyber Security Alerts & Threat Intelligence

Company urges iPhone, iPad and Mac users to install updates to fix a critical memory corruption flaw that can allow for attackers to take over a system.

Microsoft releases mitigations for a Windows NT LAN Manager exploit that forces remote Windows systems to reveal password hashes that can be easily cracked.

Sprechen Sie Rust? Polyglot malware authors are increasingly using obscure programming languages to evade detection.

Original release date: July 26, 2021   High Vulnerabilities Primary Vendor — Product Description Published CVSS Score Source & Patch Info dlink — dir-3040_firmware A hard-coded password vulnerability exists in the Libcli Test Environment functionality of D-LINK DIR-3040 1.13B03. A specially crafted network request can lead to code execution. An attacker can send a sequence of requests to trigger this vulnerability. 2021-07-16 7.5 CVE-2021-21820 MISC microsoft — malware_protection_engine Microsoft Defender Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-34522. 2021-07-16 9.3 CVE-2021-34464 MISC microsoft — windows_10 Microsoft Windows Media Foundation Remote Code Execution Vulnerability This CVE ID is…

The software-engineering platform is urging users to patch the critical flaw ASAP.

Critical ICS vulnerabilities can be exploited through leading cloud-management platforms.

A privilege elevation bug in Windows 10 opens all systems to attackers to access data and create new accounts on systems.

Update now: The ream of bugs includes some remotely exploitable code execution flaws. Still to come: a fix for what makes iPhones easy prey for Pegasus spyware.

Researchers are skeptical that much will come from calling out China for the Microsoft Exchange attacks and APT40 activity, but the move marks an important foreign-policy change.

Original release date: July 21, 2021 The Homeland Security Systems Engineering and Development Institute, sponsored by the Department of Homeland Security and operated by MITRE, has released the 2021 Common Weakness Enumeration (CWE) Top 25 Most Dangerous Software Weaknesses list. The Top 25 uses data from the National Vulnerability Database (NVD) to compile the most frequent and critical errors that can lead to serious vulnerabilities in software. An attacker can often exploit these vulnerabilities to take control of an affected system, obtain sensitive information, or cause a denial-of-service condition. CISA encourages users and administrators to review the Top 25 list and…

Misconfigured permissions for Argo’s web-facing dashboard allow unauthenticated attackers to run code on Kubernetes targets, including cryptomining containers.

Original release date: July 21, 2021 As part of CISA’s ongoing response to Pulse Secure compromises, CISA has analyzed 13 malware samples related to exploited Pulse Secure devices. CISA encourages users and administrators to review the following 13 malware analysis reports (MARs) for threat actor techniques, tactics, and procedures (TTPs) and indicators of compromise (IOCs) and to review CISA’s Alert Exploitation of Pulse Connect Secure Vulnerabilities for more information.  MARS: MAR-10333209-1.v1: Pulse Connect Secure MAR-10333243-1.v1: Pulse Connect Secure MAR-10334057-1.v1: Pulse Connect Secure MAR-10334057-2.v1: Pulse Connect Secure MAR-10334587-1.v1: Pulse Connect Secure MAR-10334587-2.v1: Pulse Connect Secure MAR-10335467-1.v1: Pulse Connect Secure MAR-10336161-1.v1: Pulse…