Cybersecurity News - Page 401

The flaw resides in the Tomcat AJP protocol and allows an attacker to read or include any files in the webapp directories of Tomcat.

This technique will work only on Windows 10 devices.

Exchange servers admins are urged to patch their servers before hackers could get to them.

Devices from Amazon, Apple, Google, and Samsung as well as some access points by Asus and Huawei, are found to be vulnerable to Kr00k.

The attack involves piggybacking C2 traffic on a legitimate traffic, thus allowing to bypass firewalls.

It's not clear what vulnerability is being exploited, but the issue may be related to a bug reported to PayPal a year ago.

The CLOP ransomware family is suspected to be involved in the attack.

The flaw in the ThemeREX Addons plugin can be used to remotely execute code on websites.

DRBControl group's malware and operational tactics overlap with similar tools and tactics used by Winnti and Emissary Panda hackers.

The campaign is believed to be the effort of three Iran-linked APT groups - APT33, APT34 and APT39.