SolarWinds RCE …Again !
IT infrastructure management provider SolarWinds released a new update to its Orion networking monitoring tool with fixes for four security vulnerabilities, counting two weaknesses that could be exploited by an…
Easter Egg in Windows 95
Windows 95 was Microsoft’s breakout consumer product, with regular people literally waiting in line to purchase the software. The developers working on the operating system and its applications had a…
Open SSL Vulnerability
The maintainers of OpenSSL have released a fix for two high-severity security flaws in its software that could be exploited to carry out denial-of-service (DoS) attacks and bypass certificate verification.…
PSExec Privilege Escalation
PsExec is a Sysinternals utility designed to allow administrators to perform various activities on remote computers, such as launching executables and displaying the output on the local computer or creating…
Teams Bug Bounty Program
Microsoft has launched a bug bounty program for 365 applications, with Microsoft Teams’ desktop client the sole in-scope target for now. The Microsoft Applications Bounty Program will pay out bounty…
Posted incloudsecurity
CLOUDEFENDER
Tech Mahindra announced the launch of a new cloud security offering called ‘CLOUDEFENDER.’ cloud based mitigation service The solution is powered by cybersecurity and application delivery solutions provider Radware and…
PurpleFox 2.0
An upgraded variant of Purple Fox malware with worm capabilities is being deployed in an attack campaign that is rapidly expanding.Purple Fox is now being spread through "indiscriminate port scanning…
Gartner 2021 Risk & Sec 📊📈
1. Cybersecurity mesh Deploying controls is essential for cybersecurity mesh when it required, a modern security approach that enables tools to interoperate by providing foundational security services and centralized policy…