Sign Up – No Cost!

Category: alerts

Cyber Security Monitor Alerts News Notifications. We monitor and send notifications on the latest Cyber Security alerts, blogs, news on data breaches and emerging cyber threats.

  • CISA, FBI, and NSA Release Joint Cybersecurity Advisory on Conti Ransomware 

    DEFENDEDGE

    Original release date: September 22, 2021 CISA, the Federal Bureau of Investigation (FBI), and the National Security Agency (NSA) have released a joint Cybersecurity Advisory (CSA) alerting organizations of increased Conti ransomware attacks. Malicious cyber actors use Conti ransomware to steal sensitive files from domestic and international organizations, encrypt the targeted organizations’ servers and workstations,… Read more

  • TikTok, GitHub, Facebook Join Open-Source Bug Bounty

    DEFENDEDGE

    The initiative, run by HackerOne, aims to uncover dangerous code repository bugs that end up going viral across the application supply-chain. Read more

  • NETGEAR Releases Security Updates for RCE Vulnerability

    DEFENDEDGE

    Original release date: September 21, 2021 NETGEAR has released security updates to address a remote code execution vulnerability—CVE-2021-40847—in multiple NETGEAR routers. A remote attacker could exploit this vulnerability to take control of an affected system. CISA encourages users and administrators to review NETGEAR’s Security Advisory and update to the latest firmware. Given the increase in telework,… Read more

  • Payment API Bungling Exposes Millions of Users’ Payment Data

    DEFENDEDGE

    Misconfigured APIs make any app risky, but when you’re talking about financial apps, you’re talking about handing ne’er-do-wells the power to turn your pockets inside-out. Read more

  • Vulnerability Summary for the Week of September 13, 2021

    DEFENDEDGE

    Original release date: September 20, 2021   High Vulnerabilities Primary Vendor — Product Description Published CVSS Score Source & Patch Info zohocorp — manageengine_adselfservice_plus Zoho ManageEngine ADSelfService Plus 6111 and prior is vulnerable to SQL Injection while linking the databases. 2021-09-10 7.5 CVE-2021-37422 MISC zohocorp — manageengine_adselfservice_plus Zoho ManageEngine ADSelfService Plus 6111 and prior is… Read more

  • Porn Problem: Adult Ads Persist on US Gov’t, Military Sites

    DEFENDEDGE

    Cities, states, federal and military agencies should patch the Laserfiche CMS post-haste, said the security researcher whose jaw dropped at 50 sites hosting porn and Viagra spam. Read more

  • Microsoft MSHTML Flaw Exploited by Ryuk Ransomware Gang

    DEFENDEDGE

    Microsoft and RiskIQ researchers have identified several campaigns using the recently patched zero-day, reiterating a call for organizations to update affected systems. Read more

  • CISA, FBI: State-Backed APTs May Be Exploiting Critical Zoho Bug

    DEFENDEDGE

    The newly identified bug in a Zoho single sign-on and password management tool has been under active attack since early August. Read more

  • ACSC Releases Annual Cyber Threat Report

    DEFENDEDGE

    Original release date: September 16, 2021 The Australian Cyber Security Centre (ACSC) has released its annual report on key cyber security threats and trends for the 2020–21 financial year.     The report lists the exploitation of the pandemic environment, the disruption of essential services and critical infrastructure, ransomware, the rapid exploitation of security vulnerabilities,… Read more

  • FBI-CISA-CGCYBER Advisory on APT Exploitation of ManageEngine ADSelfService Plus Vulnerability

    DEFENDEDGE

    Original release date: September 16, 2021 The Federal Bureau of Investigation (FBI), CISA, and Coast Guard Cyber Command (CGCYBER) have released a Joint Cybersecurity Advisory (CSA) detailing the active exploitation of an authentication bypass vulnerability (CVE-2021-40539) in Zoho ManageEngine ADSelfService Plus—a self-service password management and single sign-on solution. The FBI, CISA, and CGCYBER assess that… Read more