Cybersecurity News - Page 392

The attack reportedly was aimed at slowing down HHS computer systems and undermining the response to the coronavirus pandemic.

It is unclear, if the hospital's coronavirus testing capability was affected by the cyber attack.

Users are recommended to update their systems as soon as possible.

Hackers are using “coronavirus maps” to spread AZORult data-stealing malware.

The vulnerability remains unpatched, but the company provided a workaround to protect servers against exploitation attempts.

The flaw allows a remote, authenticated attacker to execute arbitrary code with SYSTEM privileges on a server and fully compromise it.

Pppd versions 2.4.2 through 2.4.8 are vulnerable to buffer overflow due to a flaw in Extensible Authentication Protocol packet parcer.

The bug affected the software that Let’s Encrypt uses when checking CAA records to validate a subscriber’s control of a domain name.

Chinese security vendor Qihoo 360 says it found the connection between the malware used in the APT-C-39’s hacking campaigns and the 'Vault 7' hacking tools developed by the CIA.

The flaw resides in the Tomcat AJP protocol and allows an attacker to read or include any files in the webapp directories of Tomcat.