Rapid7 Releases New Industry Cyber-Exposure Report (ICER): Fortune 500
Today, Rapid7 just released the first in our all-new Industry Cyber-Exposure Report (ICER) series. For those of you who have...
Month: April 2021
Chinese Cycldek APT targets Vietnamese Military and Government in sophisticated attacks
China-linked APT group Cycldek is behind an advanced cyberespionage campaign targeting entities in the government and military sector in Vietnam....
This service allows checking if your mobile is included in the Facebook leak
Security researcher implemented a service to verify if your mobile number is included in the recent Facebook data leak. Security...
Experts discovered a privilege escalation issue in popular Umbraco CMS
Experts discovered a vulnerability in the popular CMS Umbraco that could allow low privileged users to escalate privileges to “admin.”...
Experts found critical flaws in Rockwell FactoryTalk AssetCentre
Rockwell Automation has recently addressed nine critical vulnerabilities in its FactoryTalk AssetCentre product with the release of version v11. The...
CVE-2021-29930
Summary: An issue was discovered in the arenavec crate through 2021-01-12 for Rust. A drop of uninitialized memory can sometimes...
CVE-2021-29942
Summary: An issue was discovered in the reorder crate through 2021-02-24 for Rust. swap_index can return uninitialized values if an...
CVE-2021-29941
Summary: An issue was discovered in the reorder crate through 2021-02-24 for Rust. swap_index has an out-of-bounds write if an...
CVE-2021-29938
Summary: An issue was discovered in the slice-deque crate through 2021-02-19 for Rust. A double drop can occur in SliceDeque::drain_filter...
CVE-2021-29931
Summary: An issue was discovered in the arenavec crate through 2021-01-12 for Rust. A double drop can sometimes occur upon...
A week in security (March 29 – April 4)
Last week on Malwarebytes Labs, our podcast featured Malwarebytes senior security researcher JP Taggart, who talked to us about why you need...
BIG-IP Vulnerability – CVE-2021-22986 – PoC
Vuln Impact This vulnerability allows for unauthenticated attackers with network access to the iControl REST interface, through the BIG-IP management...
BCPS hit by Conti Ransomware Gang, Hackers Demanded $40 Million Ransom
Several weeks ago, the Conti ransomware gang encrypted the systems at Broward County Public Schools and took steps to release...
Hackers Exploit Windows BITS Feature To Launch Malware Attack
Microsoft released the BITS (Background Intelligent Transfer Service) in Windows XP to coordinate and ease uploading and downloading files with...
Child Tweets Gibberish from US Nuclear Agency Account
An unintelligible tweet sent out from the official account of U.S. Strategic Command in charge of the nation’s nuclear arsenal...
Molson Coors “Cyberattack Incident” Could Cost Company $140 Million
The popular beer brands producers in the United States such as Molson Canadian, Coors Light, Miller Lite, Carling, Blue Moon,...
Data Breach at Facebook Leaks Information of 533 Million Users
A major privacy violation by hackers allegedly took the data of almost 533 million users of Facebook from 106 countries...
The leap of a Cycldek-related threat actor
Introduction In the nebula of Chinese-speaking threat actors, it is quite common to see tools and methodologies being shared. One...
UAC – Unix-like Artifacts Collector
UAC is a Live Response collection tool for Incident Response that makes use of built-in tools to automate the collection...
Maigret – OSINT Username Checker. Collect A Dossier On A Person By Username From A Huge Number Of Sites
The Commissioner Jules Maigret is a fictional French police detective, created by Georges Simenon. His investigation method is based on...
A Quick Look Into Cloud Security Posture Management (CSPM)
The cloud security solutions market is growing rapidly, and there are many types of solutions to support your specific business...
InsightIDR’s Log Search: Recent Enhancements and Upcoming Investments
Log data is critical to ensuring that you have full visibility into what’s going on across your environment. Alongside endpoint...
What’s New in InsightAppSec and tCell: Q1 2021 in Review
2021 is off and running! The big question on the corporate world’s mind is, of course, “What will work life...
2,5M+ users can check whether their data were exposed in Facebook data leak
You can check if your personal information is included in the Facebook data leak by querying the data breach notification...
