Russian National Sentenced for Role in Kelihos Botnet
Russian national Oleg Koshkin has been sentenced to 48 months in prison for operating a "crypting" service used to conceal the Kelihos botnet from antivirus software, enabling attackers to...
Security Experts Sound Alarm on Zero-Day in Widely Used Log4j Tool
Security experts are sounding the equivalent of a five-alarm fire on a critical new zero-day vulnerability in Log4j, a logging framework that is ubiquitously present in Java software.
The flaw...
Emotet Is Back and More Dangerous Than Before
Like Arnold Schwarzenegger's Terminator, the dreaded Emotet malware is back infecting computers worldwide and once again putting organizations at heightened risk of subsequent ransomware attacks.
Researchers from Check Point this...
Dark Reading Reflects on a Legacy and Life Well-Written: Tim Wilson
Tim Wilson, Dark Reading's co-founder and editor-in-chief, passed away on Nov. 23, 2021, after a courageous battle with cancer. His death is a tremendous loss — not only for...
Zero Day in Ubiquitous Apache Log4j Tool Under Active Attack
The Log4Shell vulnerability critically threatens anybody using the popular open-source Apache Struts framework and could lead to a “Mini internet meltdown soonish.”
An excruciating, easily exploited flaw in the ubiquitous...
1.6 Million WordPress Sites Under Cyberattack From Over 16,000 IP Addresses
By: Ravie Lakshmanan
As many as 1.6 million WordPress sites have been targeted by an active large-scale attack campaign originating from 16,000 IP addresses by exploiting weaknesses in four plugins...
Next-Gen Maldocs & How to Solve the Human Vulnerability
Malicious email attachments with macros are one of the most common ways hackers get in through the door. Huntress security researcher John Hammond discusses how threat hunters can fight...
Technical Advisory – SonicWall SMA 100 Series – Unauthenticated Stored XSS
Vendor: SonicWall
Vendor URL: https://www.sonicwall.com/
Versions affected: 10.2.0.8-37sv, 10.2.1.1-19sv
Systems Affected: SMA 100 Series (SMA 200, 210, 400, 410, 500v)
Author: Richard Warren
Risk: CVSS 8.2 (High)
Summary
SonicWall SMA 100 Series appliances running firmware...
Technical Advisory – SonicWall SMA 100 Series – Unauthenticated Arbitrary File Deletion
Vendor: SonicWall
Vendor URL: https://www.sonicwall.com/
Versions affected: 10.2.0.8-37sv, 10.2.1.1-19sv
Systems Affected: SMA 100 Series (SMA 200, 210, 400, 410, 500v)
Author: Richard Warren
Risk: CVSS 9.1 (Critical)
Summary
SonicWall SMA 100 Series appliances running firmware...
