Microsoft Blacklists Dozens of New File Extensions in Outlook
In total, Microsoft has now blocked 142 file extensions that it deems as at risk or that are typically sent as malicious attachments in emails.
Vulnerabilities
Thousands of PCs Affected by Nodersok/Divergent Malware
Fileless threat leverages widely used Node.js framework and WinDivert packet-capture utility to turn infected machines into proxies for malicious behavior.
Rash of Exploits Targets Critical vBulletin RCE Bug
After someone dropped a zero-day exploit on Securelist this week, the platform rushed out a fix — time to apply it.
Experts from Nokia, iboss and Sectigo talk 5G mobile security for internet of things (IoT) devices in this webinar YouTube video (transcript included).
One Cisco bug impacting its 800 and 1000 series routers had a CVSS severity score of 9.9.
Despite CISOs’ apprehension about increasing dependence on SaaS applications and the security risks the cloud represents, adoption isn’t slowing down.
Users scrambled to find a fix for the problem and eventually Google took responsibility for the issue.
Magecart Group 5 has been spotted testing and preparing code to be injected onto commercial routers – potentially opening up guests connecting to Wi-Fi networks to payment data theft.
The issue in the Rich Reviews plugin is being actively exploited.
A known threat actor, Tortoiseshell, is targeting U.S. military veterans with a fake veteran hiring website that hosts malware.
