CVE-2021-1078

CVE-2021-1522

Application Security , Cybercrime , Fraud Management & Cybercrime Intel, Adobe Roll Out Security Fixes Doug Olenick (DougOlenick) • August 11, 2021     Microsoft’s Patch Tuesday rollout addressed two additional security issues within Windows Print Spooler, including one zero day, . See Also: Automating Security Operations Microsoft’s August security update covers 44 vulnerabilities,…

Three new Kaseya zero-day vulnerabilities were just disclosed in Kaseya Unitrends, including an RCE and an authenticated privilege escalation on the client-side. According to a recently released public advisory warning, the Kaseya serice should be kept off the internet until a patch is made available. “Do not expose this service or the clients directly to…

Cybercrime , Fraud Management & Cybercrime , Fraud Risk Management Report: Pen Testing Tool a Favorite Among Lower-Level Threat Groups Doug Olenick (DougOlenick) • June 30, 2021     The solid blue line tracks the number of organizations Proofpoint saw being targeted by attackers using Cobalt Strike. (Source: Proofpoint) The legitimate security penetration testing tool…

Although Facebook has been banned in China, the company recently exposed hackers who used the social media platform to lure Uyghurs into downloading malicious software used for surveillance. According to Facebook’s Mike Dvilyanski, Head of Cyber Espionage Investigations, and Nathaniel Gleicher, Head of Security Policy, hackers “targeted activists, journalists and dissidents predominantly among Uyghurs from…

SolarWinds told Congress that using the password ‘solarwinds123’ was an intern’s mistake. A key researcher told Insider the log-in information was posted publicly on GitHub for years. Cybersecurity experts say the issue appears to represent more than an intern’s weak password.  Visit the Business section of Insider for more stories. Two SolarWinds CEOs told the…