SAP Stomps Out Critical RCE Flaw in Manufacturing Software
The remote code execution flaw could allow attackers to deploy malware, modify network configurations and view databases.
Lindsey O'Donnell
Nim-Based Malware Loader Spreads Via Spear-Phishing Emails
Spear-phishing emails are spreading the NimzaLoader malware loader, which some say may be used to download Cobalt Strike.
Microsoft Patch Tuesday Updates Fix 14 Critical Bugs
Microsoft’s regularly scheduled March Patch Tuesday updates address 89 CVEs overall.
The critical flaws exist in Adobe Framemaker, Connect and the Creative Cloud desktop application for Windows.
Apple pushed out security updates for a memory-corruption bug to devices running on iOS, macOS, watchOS and for Safari.
A new side-channel attack takes aim at Intel’s CPU ring interconnect in order to glean sensitive data.
A phishing attack targeting Microsoft users leverages a bogus Google reCAPTCHA system.
The lack of cybersecurity requirements in weapons contracts from the Department of Defense opens the door for dangerous cyberattacks.
A new variant of the Gafgyt botnet – that’s actively targeting vulnerable D-Link and Internet of Things devices – is the first variant of the malware to rely on Tor communications, researchers say.
Researchers with Microsoft and FireEye found three new malware families, which they said are used by the threat group behind the SolarWinds attack.
