Page 7 - Code Execution News Today

The Log4j problem is going to be a threat that will likely linger for a long time.

Millions of IoT devices that use ThroughTek’s Kalay network are exposed to remote attacks due to a critical vulnerability.

Check Point Research (CPR), the Threat Intelligence arm of Check Point® Software Technologies Ltd., a provider of cybersecurity solutions globally, has published its latest Global Threat Index for...

The new attack, dubbed ALPACA, has been described as an “application layer protocol content confusion attack.” “TLS is widely used to add confidentiality, authenticity and integrity to application layer protocols such as HTTP, SMTP, IMAP, POP3, and FTP. However, TLS does not bind a TCP connection to the intended application layer protocol. This allows a man-in-the-middle attacker to redirect TLS traffic to a different TLS service endpoint on another IP address and/or port,” the research...

By Eduard Kovacs on May 27, 2021 Siemens on Tuesday released an advisory to inform customers about several high-severity vulnerabilities affecting its Solid Edge product. The flaws are introduced by fourth-party software that is also used by many other organizations. The vulnerabilities were discovered in Siemens Solid Edge last year by security researcher Andrea Micalizzi (aka rgod), who has identified many vulnerabilities in industrial systems over the past years. The security holes were rep...

Work from Home Modifies the Endpoint Security Equation, Cisco Says SPONSORED CONTENT: As customers get to grips with this new WFH reality, theyll need to simplify their implementations and make more use of automation, says Cisco Secures Al Huger. The work-from-home trend is here to stay and has forever altered how enterprises handle endpoint security, says Cisco Secures Al Huger. Its also created new challenges for operations and security management, he adds. And as customers get to grips with...

May 14, 2021 For the first time, AgentTesla has ranked second in the Check Point Research (CPR) Global Threat Index, while the established Dridex trojan is still the most prevalent malware, having risen to the top spot in March after being seventh in February. This month, Dridex, a Trojan that targets the Windows platform, spread via QuickBooks Malspam Campaign. The phishing emails used QuickBooks’s branding and were trying to lure the user with fake payment notifications and invoices. The em...

By Ionut Arghire on April 22, 2021 Cellebrite’s forensic applications do not include the type of security protections one would expect from a parsing software, which renders them susceptible to attacks, according to privacy-focused messaging service Signal. The Israel-based mobile forensics company offers data extraction and analysis services to intelligence organizations and public safety entities, but also to military and enterprise sectors. Cellebrite claims to have thousands of customers...

Apr 14, 2021 The IcedID banking trojan has entered Check Point Research’s Global Threat Index for the first time, taking second place, while the established Dridex trojan was the most prevalent malware during March, up from seventh in February. First seen in 2017, IcedID has been spreading rapidly in March via several spam campaigns, affecting 11% of organisations globally. One widespread campaign used a Covid-19 theme to entice new victims into opening malicious email attachments; the majori...

Feb 15, 2021 Check Point Research’s latest Global Threat Index for January 2021 has revealed the Emotet trojan has remained in first place in the top malware list for the second month running, impacting 6% of organisations globally, despite an international police operation which took control of the botnet on 27 January. The police takedown caused a 14% decrease in the number of organizations that were impacted by Emotet activity, and law enforcement agencies plan to mass-uninstall Emotet fro...