Technical Advisory: containerd – containerd-shim API Exposed to Host Network Containers (CVE-2020-15257)
Vendor: containerd Project
Vendor URL: https://containerd.io/
Versions affected: 1.3.x, 1.2.x, 1.4.x, others likely
Systems Affected: Linux
Author: Jeff Dileo
CVE Identifier: CVE-2020-15257
Advisory URL: https://github.com/containerd/containerd/security/advisories/GHSA-36xw-fx78-c5r4
Risk: High (full root container escape for a common container configuration)
containerd...
Industrial Computer Maker Confirms Ransomware, Data Theft
Enterprise VulnerabilitiesFrom DHS/US-CERT's National Vulnerability Database
CVE-2020-29440PUBLISHED: 2020-11-30
Tesla Model X vehicles before 2020-11-23 do not perform certificate validation during an attempt to pair a new key fob with the body...
Baltimore County Public Schools Closed Due to Ransomware Attack
The incident struck the day before Thanksgiving and interfered with online classes for some 115,000 students, officials report.Schools in the Baltimore County Public Schools (BCPS) system are closed Nov....
Britain bans new Huawei 5G kit installation from September 2021
British telecommunications firms must not install new Huawei 5G kit after September 2021, the government said on Monday, as part of a plan to purge the Chinese firm’s equipment...
Italy’s antitrust fines Apple 10 million euros for misleading commercial practices
Italy's antitrust fines Apple 10 million euros | CyberNewsHome » News » Italy’s antitrust fines Apple 10 million euros for misleading commercial practicesItaly's antitrust fines Apple 10 million eurosItaly’s...
Pandemic, A Driving Force in 2021 Financial Crime
Ransomware gangs with zero-days and more players overall will characterize financially motivated cyberattacks next year.
Financial cybercrime in 2021 is set to evolve, researchers say, with extortion practices becoming more...
Digitally Signed Bandook Trojan Reemerges in Global Spy Campaign
A strain of the 13-year old backdoor Bandook trojan has been spotted in an espionage campaign.
A wave of targeted cyberattack campaigns bent on espionage is cresting around the globe,...
Post-Cyberattack, UVM Health Network Still Picking Up Pieces
More than a month after the cyberattack first hit, the UVM health network is still grappling with delayed payment processing and other issues.
More than a month after a cyberattack...
