1 Match 2021 Weekly Newsletter

Stripe - Header
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
Structure
 
 
 
 
 
Container
 
 
 
 
 
 
 
 
 
BOCRA website
Container
 
 
 
 
 
 
 
 
 
Stripe - Content
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
Structure
 
 
 
 
 
Container
 
 
 
 
 
 
 
 
 

     

NEWSLETTER

 

Container
 
 
 
 
 
 
 
 
 
Cisco fixes maximum severity MSO auth bypass vulnerability null 600x300 https://www.bleepstatic.com/content/hl-images/2020/10/20/Cisco.jpg blur(2px) 2
Container
 
 
 
 
 
 
 
 
 


                                                     LATEST CYBER HACKS 

Stripe - Content
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
Structure
 
 
 
 
 
Container
 
 
 
 
 
 
 
 
 
 
Container
 
 
 
 
 
 
 
 
 
 
Structure
 
 
 
 
 
Container
 
 
 
 
 
 
 
 
 
icon
Container
 
 
 
 
 
 
 
 
 

Jamaica’s immigration website exposed thousands of travelers’ data

 
 
 
 

Immigration documents and COVID-19 lab results were left unprotected

 

Structure
 
 
 
 
 
Container
 
 
 
 
 
 
 
 
 
Container
 
 
 
 
 
 
 
 
 

Credential-Stuffing Attack Targets Regional Internet Registry

 
 
 
 

RIPE NCC, the regional Internet registry for Europe, West Asia, and the former Soviet Union, said attackers attempted a credential-stuffing attack against its single-sign on service.

Structure
 
 
 
 
 
Container
 
 
 
 
 
 
 
 
 


                                                      VULNERABILITIES

Structure
 
 
 
 
 
Container
 
 
 
 
 
 
 
 
 
 
Container
 
 
 
 
 
 
 
 
 
 
Structure
 
 
 
 
 
Container
 
 
 
 
 
 
 
 
 
icon
Container
 
 
 
 
 
 
 
 
 

Chinese Hackers Using Firefox Extension to Spy On Tibetan Organizations

 
 
 
 

Cybersecurity researchers today unwrapped a new campaign aimed at spying on vulnerable Tibetan communities globally by deploying a malicious Firefox extension on target systems.

Structure
 
 
 
 
 
Container
 
 
 
 
 
 
 
 
 
icon
Container
 
 
 
 
 
 
 
 
 

Attackers scan for vulnerable VMware servers after PoC exploit release

 
 
 
 

After security researchers have developed and published proof-of-concept (PoC) exploit code targeting a critical vCenter remote code execution (RCE) vulnerability, attackers are now actively scanning for vulnerable Internet-exposed VMware servers.

Structure
 
 
 
 
 
Container
 
 
 
 
 
 
 
 
 
icon
Container
 
 
 
 
 
 
 
 
 

Google Discloses Details of Remote Code Execution Vulnerability in Windows

 
 
 
 

Google’s cybersecurity research unit Project Zero on Wednesday disclosed the details of a recently patched Windows vulnerability that can be exploited for remote code execution

Structure
 
 
 
 
 
Container
 
 
 
 
 
 
 
 
 
icon
Container
 
 
 
 
 
 
 
 
 

Nginx: Server misconfigurations found in the wild that expose websites to attacks

 
 
 
 

Security researchers at Detectify have discovered a series of middleware misconfigurations in Nginx that could leave web applications vulnerable to attack.

 
 
 
 


                                     MALWARES

Structure
 
 
 
 
 
Container
 
 
 
 
 
 
 
 
 
 
Container
 
 
 
 
 
 
 
 
 
 
Structure
 
 
 
 
 
Container
 
 
 
 
 
 
 
 
 
icon
Container
 
 
 
 
 
 
 
 
 

Flash version distributed in China after EOL is installing adware

 
 
 
 

Security researchers say the Chinese Flash app is behaving lide adware and opening browser windows to show ads.

Structure
 
 
 
 
 
Container
 
 
 
 
 
 
 
 
 
icon
Container
 
 
 
 
 
 
 
 
 

Powerhouse VPN products can be abused for large-scale DDoS attacks

 
 
 
 

Botnet operators are abusing VPN servers from VPN provider Powerhouse Management as a way to bounce and amplify junk traffic part of DDoS attacks.

Structure
 
 
 
 
 
Container
 
 
 
 
 
 
 
 
 
icon
Container
 
 
 
 
 
 
 
 
 

Warning: Google Alerts abused to push fake Adobe Flash updater

 
 
 
 

Threat actors are using Google Alerts to promote a fake Adobe Flash Player updater that installs other unwanted programs on unsuspecting users' computers.

 
 
 
 


                               GENERAL NEWS

Stripe - Content
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
Structure
 
 
 
 
 
Container
 
 
 
 
 
 
 
 
 
 
Container
 
 
 
 
 
 
 
 
 
 
Structure
 
 
 
 
 
Container
 
 
 
 
 
 
 
 
 
icon
Container
 
 
 
 
 
 
 
 
 

Microsoft: We've open-sourced this tool we used to hunt for code by SolarWinds hackers

 
 
 
 

Microsoft tapped GitHub's CodeQL to discover whether its source code had been modified in the SolarWinds supply chain attack.

Structure
 
 
 
 
 
Container
 
 
 
 
 
 
 
 
 
icon
Container
 
 
 
 
 
 
 
 
 

Facebook bans Myanmar military-controlled accounts from its platforms

 
 
 
 

Facebook announced on Wednesday it has banned almost all Myanmar military-controlled state and media accounts from its platforms, Facebook and Instagram.