Yet Another Print Nightmare !
Merely days after Microsoft sounded the alarm on an unpatched security vulnerability in the Windows Print Spooler service, possibly yet another zero-day flaw in the same component has come to…
Posted incloudsecurity
Defender Identity Now Defends PrintNightmare
Microsoft has included assistance for Print Nightmare exploitation discovery to Microsoft Defender for Identity to aid Security Operations groups find aggressors’ efforts to abuse this vital susceptibility. This vital problem…
Lenovo Laptops BIOS Vulnerability
Tracked as CVE-2021-3452 and affecting tens of ThinkPad models, the first of the bugs impacts the system shutdown SMI callback function and could be abused by a local attacker that…
Unplug Sonicwall EOL
SonicWall has warned that its older Secure Mobile Access (SMA) 100 series and Secure Remote Access (SRA) gateways are being attacked in the wild by crooks to spread ransomware and…
iOS. Zero Day Actively Exploited
A zero-day exploit found in some versions of iOS 14 allowed SolarWinds hackers to redirect users to domains that ran malicious code on iPhones and iPads. The same hackers also…
Posted inC2C Cobalt Strike cybersecurity
Chinese Spies Government Entities
Kaspersky researchers have revealed an ongoing and large-scale APT campaign with hundreds of victims from Southeast Asia, including Myanmar and the Philippines government entities. Tracked as LuminousMoth linked with HoneyMyte…
Firefox Supports MetaData Headers
Firefox now supports Fetch Metadata request headers, Mozilla has announced, further protecting users from a number of high-impact web attacks.The new version of the popular browser,is the latest to include…
Posted inCyberAttack
Schneider Electric PLC Bug
A vulnerability discovered in Schneider Electric's Modicon PLC could allow a remote attacker to gain total and undetectable control over the chips, leading to remote code execution, malware installation and…