How to Build an Incident-Response Plan, Before Security Disaster Strikes
Joseph Carson, Chief Security Scientist at ThycoticCentrify, offers a 7-step practical IR checklist for ensuring a swift recovery from a cyberattack.
In a startling discovery, a recent report found that...
Iranian Hackers Abuse Dropbox in Cyberattacks Against Aerospace and Telecom Firms
By: Ravie Lakshmanan
Details have emerged about a new cyber espionage campaign directed against the aerospace and telecommunications industries, primarily in the Middle East, with the goal of stealing sensitive...
IP Surveillance Bugs in Axis Gear Allow RCE, Data Theft
Three security vulnerabilities in Axis video products could open up the door to a bevy of different cyberattacks on businesses.
Three vulnerabilities in the IP video-surveillance systems created by Axis...
Technical Advisory – Open5GS Stack Buffer Overflow During PFCP Session Establishment on UPF (CVE-2021-41794)
Vendor: Open5GS
Vendor URL: https://github.com/open5gs/open5gs
Versions affected: 1.0.0 to 2.3.3
Systems Affected: Linux
Author: mark.tedmannccgroupcom
Advisory URL / CVE Identifier: CVE-2021-41794
Risk: CVSSv3.1: 8.2 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H)
Summary
When connecting to the UPF port for the PFCP protocol (8805)...
Best VPN for Chrome and Chromebooks 2021
You would think that the method of protecting Chrome...
Encrypted & Fileless Malware Sees Big Growth
An analysis of second-quarter malware trends shows that threats are becoming stealthier.
A full 91.5 percent of malware was delivered using HTTPS-encrypted connections in the second quarter, researchers said, making...
New Study Links Seemingly Disparate Malware Attacks to Chinese Hackers
By: Ravie Lakshmanan
Chinese cyber espionage group APT41 has been linked to seemingly disparate malware campaigns, according to fresh research that has mapped together additional parts of the group's network...
Apache Web Server Zero-Day Exposes Sensitive Data
The open-source project has rolled out a security fix for CVE-2021-41773, for which public cyberattack exploit code is circulating.
Apache Software has quickly issued a fix for a zero-day security...
