• Search for:
    12 May, 2020
    Microsoft Patch Tuesday, May 2020 Edition
    Cybersecurity , , , , , , , , , , , , ,

    Microsoft today issued software updates to plug at least 111 security holes in Windows and Windows-based programs. None of the vulnerabilities were labeled as being publicly exploited or detailed prior to today, but as always if you’re running Windows on any of your machines it’s time once again to prepare to get your patches on. …

    Read MoreMicrosoft Patch Tuesday, May 2020 Edition

    14 Apr, 2020
    Microsoft Patch Tuesday, April 2020 Edition
    Cybersecurity , , , , , , ,

    Microsoft today released updates to fix 113 security vulnerabilities in its various Windows operating systems and related software. Those include at least three flaws that are actively being exploited, as well as two others which were publicly detailed prior to today, potentially giving attackers a head start in figuring out how to exploit the bugs. …

    Read MoreMicrosoft Patch Tuesday, April 2020 Edition

    2 Apr, 2020
    ‘War Dialing’ Tool Exposes Zoom’s Password Problems
    Cybersecurity , , , , , , , , , , ,

    As the Coronavirus pandemic continues to force people to work from home, countless companies are now holding daily meetings using videoconferencing services from Zoom. But without the protection of a password, there’s a decent chance your next Zoom meeting could be “Zoom bombed” — attended or disrupted by someone who doesn’t belong. And according to data gathered by a new automated Zoom meeting discovery tool dubbed “zWarDial,” a crazy number major corporations are setting up meetings without passwords enabled. …

    Read More‘War Dialing’ Tool Exposes Zoom’s Password Problems

    20 Mar, 2020
    Zyxel Flaw Powers New Mirai IoT Botnet Strain
    Cybersecurity , , , , , , ,

    In February, hardware maker Zyxel fixed a zero-day vulnerability in its routers and VPN firewall products after KrebsOnSecurity told the company the flaw was being abused by attackers to break into devices. This week, security researchers said they spotted that same vulnerability being exploited by a new variant of Mirai, a malware strain that targets vulnerable Internet of Things (IoT) devices for use in large-scale attacks and as proxies for other cybercrime activity. …

    Read MoreZyxel Flaw Powers New Mirai IoT Botnet Strain

    26 Feb, 2020
    Zyxel 0day Affects its Firewall Products, Too
    Cybersecurity , , , , ,

    On Monday, networking hardware maker Zyxel released security updates to plug a critical security hole in its network attached storage (NAS) devices that is being actively exploited by crooks who specialize in deploying ransomware. Today, Zyxel acknowledged the same flaw is present in many of its firewall products. …

    Read MoreZyxel 0day Affects its Firewall Products, Too

    24 Feb, 2020
    Zyxel Fixes 0day in Network Storage Devices
    Cybersecurity , , , , , , , , , , , , , ,

    Networking hardware vendor Zyxel today released an update to fix a critical flaw in many of its network attached storage (NAS) devices that can be used to remotely commandeer them. The patch comes 12 days after KrebsOnSecurity alerted the company that precise instructions for exploiting the vulnerability were being sold for $20,000 in the cybercrime underground. Based in Taiwan, Zyxel Communications Corp. (a.k.a “ZyXEL”) is a maker of networking devices, including Wi-Fi routers, NAS products and hardware firewalls. The company has roughly 1,500 employees and boasts some 100 million devices deployed worldwide. While in many respects the class of vulnerability addressed in this story is depressingly common among Internet of Things (IoT) devices, the flaw is notable because it has attracted the interest of groups specializing in deploying ransomware at scale. …

    Read MoreZyxel Fixes 0day in Network Storage Devices

    11 Feb, 2020
    Microsoft Patch Tuesday, February 2020 Edition
    Cybersecurity , , , , , , , , ,

    Microsoft today released updates to plug nearly 100 security holes in various versions of its Windows operating system and related software, including a zero-day vulnerability in Internet Explorer (IE) that is actively being exploited. Also, Adobe has issued a bevy of security updates for its various products, including Flash Player and Adobe Reader/Acrobat. …

    Read MoreMicrosoft Patch Tuesday, February 2020 Edition

    15 Jan, 2020
    Patch Tuesday, January 2020 Edition
    Cybersecurity , , , , , , ,

    Microsoft today released updates to plug 50 security holes in various flavors of Windows and related software. The patch batch includes a fix for a flaw in Windows 10 and server equivalents of this operating system that prompted an unprecedented public warning from the U.S. National Security Agency. This month also marks the end of mainstream support for Windows 7, a still broadly-used operating system that will no longer be supplied with security updates. …

    Read MorePatch Tuesday, January 2020 Edition