CVE-2021-32713 – Alert Detail – Security Database

CVE-2021-32713 – Alert Detail – Security Database

Executive Summary Informations Name CVE-2021-32713 First vendor Publication 2021-06-24 Vendor Cve Last vendor Modification 2021-06-25 Security-Database Scoring CVSS v3 Cvss vector : N/A Overall CVSS Score NA Base Score NA Environmental Score NA impact SubScore NA Temporal Score NA Exploitabality Sub Score NA   Calculate full CVSS 3.0 Vectors scores Security-Database Scoring CVSS v2 Cvss…

ISMG Editors’ Panel: Examining Open-Source Software Security

ISMG Editors’ Panel: Examining Open-Source Software Security

Application Security , Leadership & Executive Communication , Next-Generation Technologies & Secure Development Also: Updating SOCs, Communicating With the Board Anna Delaney (annamadeline) • June 25, 2021     Clockwise, from top left: Suparna Goswami, Anna Delaney, Tom Field and Tony Morbin In the latest weekly update, a panel of…

Newly Discovered Dell Bugs Impact 30 Million PCs

Newly Discovered Dell Bugs Impact 30 Million PCs

Security researchers have warned that at least 30 million Dell computers may be at risk after discovering multiple vulnerabilities that could allow attackers to execute arbitrary code within the machines’ BIOS. Security vendor Eclypsium said 129 Dell models were affected by the chain of four bugs, which have a cumulative CVSS score of 8.4 (high). “These…

Marketplace platform has critical vulnerabilities • The Register

Marketplace platform has critical vulnerabilities • The Register

A Berlin startup has disclosed a remote-code-execution (RCE) vulnerability and a wormable cross-site-scripting (XSS) flaw in Pling, which is used by various Linux desktop theme marketplaces. Positive Security, which found the holes and is not to be confused with Russia’s Positive Technologies, said the bugs are still present in the Pling code and its maintainers…

Repurposed REvil Ransomware Used in Attacks

Repurposed REvil Ransomware Used in Attacks

Cybercrime as-a-service , Fraud Management & Cybercrime , Next-Generation Technologies & Secure Development Secureworks: New Group Apparently Waging Attacks Using Same Code Prajeet Nair (@prajeetspeaks) • June 24, 2021     Ransom note from attackers using LV malware (Source: Secureworks) A newly identified threat group is using a repurposed version of REvil ransomware to wage…

Irish Ransomware Attack Recovery Cost Estimate: $600 million

Irish Ransomware Attack Recovery Cost Estimate: $600 million

Business Continuity Management / Disaster Recovery , Fraud Management & Cybercrime , Governance & Risk Management Director of HSE, Nation’s Healthcare System, Describes the Costs Akshaya Asokan (asokan_akshaya) • June 24, 2021     The recovery costs for the May ransomware attack on Health Service Executive, Ireland’s publicly funded healthcare system, is likely to total…