Attackers are looking to exploit critical VMware vCenter Server RCE flaw, patch ASAP!

ByPR 24
Attackers are looking to exploit critical VMware vCenter Server RCE flaw, patch ASAP! | IT Security News

The day after VMware released fixes for a critical RCE flaw (CVE-2021-21972) found in a default vCenter Server plugin, opportunistic attackers began searching for publicly accessible vulnerable systems. We’ve detected mass scanning activity targeting vulnerable VMware vCenter servers (https://t.co/t3Gv2ZgTdt). Query our API for “tags=CVE-2021-21972” for relevant indicators and source IP addresses. #threatintel https://t.co/AcSZ40U5Gp — Bad Packets (@bad_packets) February 24, 2021 “In our opinion, the RCE vulnerability in the vCenter Server can pose no less a … More →

The post Attackers are looking to exploit critical VMware vCenter Server RCE flaw, patch ASAP! appeared first on Help Net Security.

By continuing to use the site, you agree to the use of cookies. more information

The cookie settings on this website are set to “allow cookies” to give you the best browsing experience possible. If you continue to use this website without changing your cookie settings or you click “Accept” below then you are consenting to this.

Close


Similar Posts

‘Black Kingdom’ Ransomware Hits Unpatched Exchange Servers

‘Black Kingdom’ Ransomware Hits Unpatched Exchange Servers

ByPR 24

Email Security & Protection , Endpoint Security , Fraud Management & Cybercrime Attack Code ‘Rudimentary and Amateurish’ But Still a Threat Mathew J. Schwartz (euroinfosec) • March 24, 2021     Ransom note left by Black Kingdom (Source: MalwareTech) Attackers gunning for an easy pay day are continuing to target Microsoft Exchange servers that have…

No, I Did Not Hack Your MS Exchange Server – KK Hack Labs

No, I Did Not Hack Your MS Exchange Server – KK Hack Labs

ByPR 24

New data suggests someone has compromised more than 21,000 Microsoft Exchange Server email systems worldwide and infected them with malware that invokes both KrebsOnSecurity and Yours Truly by name. Let’s just get this out of the way right now: It wasn’t me. The Shadowserver Foundation, a nonprofit that helps network owners identify and fix security…

Microsoft Finds ‘BadAlloc’ Flaws Affecting Wide-Range of IoT and OT Devices

Microsoft Finds ‘BadAlloc’ Flaws Affecting Wide-Range of IoT and OT Devices

ByPR 24

Microsoft researchers on Thursday disclosed two dozen vulnerabilities affecting a wide range of Internet of Things (IoT) and Operational Technology (OT) devices used in industrial, medical, and enterprise networks that could be abused by adversaries to execute arbitrary code and even cause critical systems to crash. “These remote code execution (RCE) vulnerabilities cover more than…

US Signs Cybersecurity Agreements with Singapore

US Signs Cybersecurity Agreements with Singapore

ByPR 24

The United States and Singapore have agreed to cooperate on cybersecurity and climate change issues. On August 23, Singapore’s prime minister, Lee Hsien Loong, announced that three cybersecurity agreements had been signed by the cyber, defense, and finance agencies of both countries.  The announcement was made during a visit to Singapore by US vice president…

APT Group Using Backdoor for Espionage

APT Group Using Backdoor for Espionage

ByPR 24

Cybercrime , Cyberwarfare / Nation-State Attacks , Fraud Management & Cybercrime Kaspersky Describes ‘Operation TunnelSnake’ That Appears to Have China Connection Prajeet Nair (@prajeetspeaks) • May 12, 2021     Architecture of the Moriya rootkit (Source: Kaspersky) An ongoing advanced persistent threat campaign dubbed “Operation TunnelSnake” has been using a Windows rootkit named Moriya to…