Critical F5 BIG-IP Flaw Now Under Active Attack
Researchers are reporting mass scanning for – and in-the-wild exploitation of – a critical-severity flaw in the F5 BIG-IP and BIG-IQ enterprise networking infrastructure.
Vulnerabilities
CopperStealer Malware Targets Facebook and Instagram Business Accounts
A previously undocumented password and cookie stealer has been compromising accounts of big guns like Facebook, Apple, Amazon and Google since 2019 and then using them for cybercriminal activity.
Fiserv Forgets to Buy Domain It Used as System Default
Fintech security provider Fiserv acknowledges it used unregistered domain as default email.
A glitch in Zoom’s screen-sharing feature shows parts of presenters’ screens that they did not intend to share – potentially leaking emails or passwords.
The popular learning-management system for teacher-student communication is rife with SQL-injection vulnerabilities.
The Cisco security vulnerability exists in the RV132W ADSL2+ Wireless-N VPN Routers and RV134W VDSL2 Wireless-AC VPN Routers.
A new Mirai variant is targeting known flaws in D-Link, Netgear and SonicWall devices, as well as newly-discovered flaws in unknown IoT devices.
Public proof-of-concept (PoC) exploits for ProxyLogon could be fanning a feeding frenzy of attacks even as patching makes progress.
Google has released the side-channel exploit in hopes of motivating web-application developers to protect their sites.
A survey from Intel shows that most organizations prefer tech providers to have proactive security, but few meet security expectations.
