Cybersecurity News - Page 380

Users are recommended to update their systems as soon as possible.

Hackers are using “coronavirus maps” to spread AZORult data-stealing malware.

The vulnerability remains unpatched, but the company provided a workaround to protect servers against exploitation attempts.

The flaw allows a remote, authenticated attacker to execute arbitrary code with SYSTEM privileges on a server and fully compromise it.

Pppd versions 2.4.2 through 2.4.8 are vulnerable to buffer overflow due to a flaw in Extensible Authentication Protocol packet parcer.

The bug affected the software that Let’s Encrypt uses when checking CAA records to validate a subscriber’s control of a domain name.

Chinese security vendor Qihoo 360 says it found the connection between the malware used in the APT-C-39’s hacking campaigns and the 'Vault 7' hacking tools developed by the CIA.

The flaw resides in the Tomcat AJP protocol and allows an attacker to read or include any files in the webapp directories of Tomcat.

This technique will work only on Windows 10 devices.

Exchange servers admins are urged to patch their servers before hackers could get to them.