Author: DEFENDEDGE
-
Utilities ‘Concerningly’ at Risk from Active Exploits
Utilities’ vulnerability to application exploits goes from bad to worse in just weeks. Read more
-
Moobot Milks Tenda Router Bugs for Propagation
An analysis of the campaign revealed Cyberium, an active Mirai-variant malware hosting site. Read more
-
CISA Releases Advisory on ZOLL Defibrillator Dashboard
Original release date: June 14, 2021 CISA has released an Industrial Controls Systems (ICS) Medical Advisory on multiple vulnerabilities in the ZOLL Defibrillator Dashboard. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the ICS Medical Advisory ICSMA-21-161-01 and apply the recommended… Read more
-
Unpatched Bugs Found Lurking in Provisioning Platform Used with Cisco UC
A trio of security flaws open the door to remote-code execution and a malware tsunami. Read more
-
Critical Chrome Browser Bug Under Active Attack
Google has patched its Chrome browser, fixing one critical cache issue and a second bug being actively exploited in the wild. Read more
-
STEM Audio Table Rife with Business-Threatening Bugs
The desktop conferencing IoT gadget allows remote attackers to install all kinds of malware and move laterally to other parts of enterprise networks. Read more
-
JBS Paid $11M to REvil Gang Even After Restoring Operations
The decision to pay the ransom demanded by the cybercriminal group was to avoid any further issues or potential problems for its customers, according to the company’s CEO. Read more
-
Working from home is here to stay
Working from home is here to stay. One of many things made clear by the Covid-19 pandemic was that working from home can save businesses money and many employees prefer it. This new work from home culture has allowed a much bigger threat vector for businesses. Drive-By wireless attacks will continue to grow and be… Read more
-
CISA Addresses the Rise in Ransomware Targeting Operational Technology Assets
Original release date: June 9, 2021 CISA has published the Rising Ransomware Threat to OT Assets fact sheet in response to the recent increase in ransomware attacks targeting operational technology (OT) assets and control systems. The guidance: provides steps to prepare for, mitigate against, and respond to attacks; details how the dependencies between an entity’s… Read more
-
Intel Plugs 29 Holes in CPUs, Bluetooth, Security
The higher-rated advisories focus on privilege-escalation bugs in CPU firmware: Tough to patch, hard to exploit, tempting to a savvy attacker. Read more