Security

QNAP users are recommended to disable UPnP port forwarding on routers

QNAP urges customers to disable Universal Plug and Play (UPnP) port forwarding on their routers to secure their NAS devices.…

4 years ago

ESET warns of three flaws that affect over 100 Lenovo notebook models

Lenovo warns of vulnerabilities in its Unified Extensible Firmware Interface (UEFI) shipped with at least 100 notebook models. Lenovo has…

4 years ago

CISA adds VMware, Chrome flaws to its Known Exploited Vulnerabilities Catalog

US CISA adds a VMware privilege escalation flaw and a Google Chrome type confusion issue to its Known Exploited Vulnerabilities…

4 years ago

Threat actors use Zimbra exploits to target organizations in Ukraine

Threat actors are targeting Ukrainian government organizations with exploits for XSS vulnerabilities in Zimbra Collaboration Suite (CVE-2018-6882). Ukraine's CERT (CERT-UA)…

4 years ago

Conti Ransomware Gang claims responsibility for the Nordex hack

The Conti ransomware gang has claimed responsibility for the recent attack against Nordex, one of the largest manufacturers of wind…

4 years ago

Auth bypass flaw in Cisco Wireless LAN Controller Software allows device takeover

Cisco fixed a critical flaw in Cisco Wireless LAN Controller (WLC) that could allow an unauthenticated, remote attacker to take…

4 years ago

Google fixed third zero-day in Chrome since the start of 2022

Google Chrome 100.0.4896.127 addresses a new high-severity zero-day vulnerability tracked as CVE-2022-1364, actively exploited by threat actors in the wild.…

4 years ago

Ways to Develop a Cybersecurity Training Program for Employees

Cybersecurity experts would have you believe that your organization’s employees have a crucial role in bolstering or damaging your company's…

4 years ago

CISA adds Windows CLFS Driver Privilege Escalation flaw to its Known Exploited Vulnerabilities Catalog

The U.S. CISA added the CVE-2022-24521 Microsoft Windows CLFS Driver Privilege Escalation Vulnerability to its Known Exploited Vulnerabilities Catalog. The U.S. Cybersecurity…

4 years ago

CVE-2021-31805 RCE bug in Apache Struts was finally patched

Apache addressed a critical flaw in Apache Struts RCE that was linked to a previous issue that was not properly…

4 years ago

This website uses cookies.