Ransomware operators exploit VMWare ESXi flaws to encrypt disks of VMs

6 years ago

Ransomware operators are exploiting two VMWare ESXi vulnerabilities, CVE-2019-5544 and CVE-2020-3992, to encrypt virtual hard disks. Security experts are warning…

CISA: Many victims of SolarWinds hackers had no direct connection to SolarWinds

6 years ago

The U.S. CISA reveals that many of the victims of the SolarWinds hackers had no direct connection to SolarWinds. The…

Experts discovered a new Trickbot module used for lateral movement

6 years ago

Experts spotted a new Trickbot module that is used to scan local networks and make lateral movement inside the target…

Operation NightScout: supply chain attack on NoxPlayer Android emulator

6 years ago

Experts uncovered a new supply chain attack leveraging the update process of NoxPlayer, a free Android emulator for PCs and…

Experts warn of active exploitation of SonicWall zero-day in the wild

6 years ago

Researchers from the security firm NCC Group warn of the exploitation in the wild of a SonicWall zero-day vulnerability. Security…

Google discloses a severe flaw in widely used Libgcrypt encryption library

6 years ago

Google discovered a flaw in GNU Privacy Guard (GnuPG)'s Libgcrypt encryption library that could be exploited to get remote code…

Exploiting a bug in Azure Functions to escape Docker

6 years ago

Expert disclosed an unpatched vulnerability in Microsoft Azure Functions that could be exploited to escape the Docker container hosting them.…

Experts explain how to bypass recent improvement of China’s Great Firewall

6 years ago

Experts from Great Firewall Report analyzed recent upgrades to China's Great Firewall and revealed that it can be circumvented. Members…

Security Affairs newsletter Round 299

6 years ago

A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs free for…

New Pro-Ocean crypto-miner targets Apache ActiveMQ, Oracle WebLogic, and Redis installs

6 years ago

The Rocke group is using a new piece of cryptojacking malware dubbed Pro-Ocean to target Apache ActiveMQ, Oracle WebLogic, and…

This website uses cookies.