Cybersecurity News - Page 377

The flaw allows a remote, unauthenticated attacker create a new SAP user with the highest privileges, and thus fully compromise vulnerable SAP installations.

A short overview of last week's top stories in the world of cyber security.

Citrix downplayed the impact of the vulnerabilities and said they are less likely to be exploited compared to CVE-2019-19781.

The company has also released a planned update for Phone and Web users, which brings AES-256 bit encryption.

Weekly vulnerability digest.

The Evilnum group’s toolset and infrastructure have evolved and now include custom malware as well as tools bought from a MaaS provider called Golden Chickens.

The flaw is only exploitable on systems running Windows 7 and older Windows versions.

Since October 2017, Turchin and his accomplices targeted hundreds of organizations across six continents, including more than 30 in the United States.

Active since 2017, the Keeper group operates an interconnected network of 64 attacker domains and 73 exfiltration domains.

The flaw allows to execute arbitrary OS commands with root privileges.