Technical Advisory: PDFTron JavaScript URLs Allowed in WebViewer UI (CVE-2021-39307)
Vendor: PDFTron
Vendor URL: https://www.pdftron.com/
Versions affected: WebViewer UI 8.0 or below
Systems Affected: Web applications hosting the affected software
Author: Liyun Li
CVE Identifier: CVE-2021-39307
Summary
PDFTron’s WebViewer UI 8.0 or below renders dangerous...
Apple Patches Zero-Days in iOS 14.8 Update
Apple today released security updates for iOS, iPadOS, macOS, and watchOS to deliver an important security update to fix two vulnerabilities that the company says "may have been actively...
Brute-Force Attacks, Vulnerability Exploits Top Initial Attack Vectors
The more things change, the more they appear to remain the same — at least as far as some enterprise cybersecurity practices go.
A new analysis of data from security...
Honing Cybersecurity Strategy When Everyone’s a Target for Ransomware
Aamir Lakhani, researcher at FortiGuard Labs, explains why organizations must extend cyber-awareness training across the entire enterprise, from Luddites to the C-suite.
These days, ransomware is seemingly ubiquitous. No longer...
REvil’s Back; Coder Fat-Fingered Away Its Decryptor Key?
How did Kaseya get a universal decryptor after a mind-bogglingly big ransomware attack? A REvil coder misclicked, generated & issued it, and “That’s how we sh*t ourselves.”
UPDATE
The REvil ransomware...
Linux Implementation of Cobalt Strike Beacon Targeting Organizations Worldwide
By: Ravie Lakshmanan
Researchers on Monday took the wraps off a newly discovered Linux and Windows re-implementation of Cobalt Strike Beacon that's actively set its sights on government, telecommunications, information...
WooCommerce Multi Currency Bug Allows Shoppers to Change eCommerce Pricing
The security vulnerability can be exploited with a malicious CSV file.
A security vulnerability in the WooCommerce Multi Currency plugin could allow any customer to change the pricing for products...
