CVE-2021-35392
CVE-2021-35392
Similar Posts
China-Linked Cyberespionage Operation Suggests Interest in SCADA Systems
A cyberespionage group that appears to be based in China has been seen targeting critical infrastructure organizations in Southeast Asia, and the attackers may be interested in industrial control systems (ICS). It’s not uncommon for Chinese threat actors to target Southeast Asia. Over the past years, they have been observed targeting organizations in the military,…
Facebook Catches Iranian Spies Catfishing US Military Targets
If you’re a member of the US military who’s gotten friendly Facebook messages from private-sector recruiters for months on end, suggesting a lucrative future in the aerospace or defense contractor industry, Facebook may have some bad news. On Thursday, the social media giant revealed that it has tracked and at least partially disrupted a long-running…
BadAlloc Flaw Impacts Many Systems Running BlackBerry’s QNX Embedded OS
BlackBerry this week informed customers that the QNX embedded operating system is affected by a BadAlloc vulnerability leading to arbitrary code execution or denial of service. Publicly disclosed in April, BadAlloc is a collection of 25 vulnerabilities impacting many Internet of Things (IoT) and operational technology (OT) devices. The flaws can allow malicious attackers to…
Vigilante Malware Blocks Access To The Pirate Bay & Other Torrent Sites
A new type of malware campaign has been discovered that apparently blocks access to the most popular torrent site, The Pirate Bay, and a number of other sites known for redistributing pirated content. According to a recent report published by the cybersecurity firm SophosLabs, the malware dubbed as “vigilante” instead of stealing passwords or extorting…
Australian businesses stop reporting ransomware attacks over exfiltration doubts – Security
Australian businesses are incorrectly relying on what they think is a loophole in notifiable data breach laws to avoid reporting ransomware infections. The Office of the Australian Information Commissioner (OAIC) warned that “a number of entities” in the six months to June 2021 didn’t report ransomware attacks because they could not prove whether or not…
Hackers Exploit SonicWall Zero-Day Bug in FiveHands Ransomware Attacks – KK Hack Labs
An “aggressive” financially motivated threat group tapped into a zero-day flaw in SonicWall VPN appliances prior to it being patched by the company to deploy a new strain of ransomware called FIVEHANDS.The group, tracked by cybersecurity firm Mandiant as UNC2447, took advantage of an “improper SQL command neutralization” flaw in the SSL-VPN SMA100 product (CVE-2021-20016,…