CVE-2021-37708
CVE-2021-37708
Similar Posts
Australian businesses stop reporting ransomware attacks over exfiltration doubts – Security
Australian businesses are incorrectly relying on what they think is a loophole in notifiable data breach laws to avoid reporting ransomware infections. The Office of the Australian Information Commissioner (OAIC) warned that “a number of entities” in the six months to June 2021 didn’t report ransomware attacks because they could not prove whether or not…
House SolarWinds Hearing Focuses on Updating Cyber Laws
Lawmakers and Witnesses See Expanded Role for CISA Following Attack Scott Ferguson (Ferguson_Writes) • February 26, 2021 (Clockwise from top left): Reps. James Comer, Bennie G. Thompson, John Katko and Carolyn Maloney led the joint committee hearing on Friday examining the supply chain attack that targeted SolarWinds. A pair of U.S. House committees…
Israeli firm used Windows zero-days to deploy spyware
Microsoft and Citizen Lab have linked Israeli spyware company Candiru (also tracked as Sourgum) to new Windows spyware dubbed DevilsTongue deployed using now patched Windows zero-day vulnerabilities. “Candiru is a secretive Israel-based company that sells spyware exclusively to governments,” Citizen Lab explained in a report published today. “Reportedly, their spyware can infect and monitor iPhones,…
Experts Reveal Over 150 Ways to Steal Control of 58 Android Stalkerware Apps
A total of 158 privacy and security issues have been identified in 58 Android stalkware apps from various vendors that could enable a malicious actor to take control of a victim’s device, hijack a stalker’s account, intercept data, achieve remote code execution, and even frame the victim by uploading fabricated evidence. The new findings, which…
SonicWall warns customers to patch 3 zero-days exploited in the wild
Security hardware manufacturer SonicWall is urging customers to patch a set of three zero-day vulnerabilities affecting both its on-premises and hosted Email Security products. “In at least one known case, these vulnerabilities have been observed to be exploited ‘in the wild,’” SonicWall said in a security advisory published earlier today. The company said it’s “imperative” that organizations using…
Scale, details of massive Kaseya ransomware attack emerge
Cybersecurity teams worked feverishly Sunday to stem the impact of the single biggest global ransomware attack on record, with some details emerging about how the Russia-linked gang responsible breached the company whose software was the conduit. An affiliate of the notorious REvil gang, best known for extorting $11 million from the meat-processor JBS after a…