Page 17 - Software Vulnerability News Today : Breaking News, Live Updates & Top Stories | Vimarsana

Iranian Hackers Utilize ScreenConnect to Spy On UAE, Kuwait Government Agencies UAE and Kuwait government agencies are targets of a new cyberespionage campaign potentially carried out by Iranian threat actors, according to new research. Attributing the operation to be the work of Static Kitten (aka MERCURY or MuddyWater), Anomali said the "objective of this activity is to install a remote management tool called ScreenConnect (acquired by ConnectWise 2015) with unique launch parameters that have custom properties," with malware samples and URLs masquerading as the Ministry of Foreign Affairs ...

Poor Password Security and Outdated Systems Poor Password Security Lead to the Recent Water Treatment Facility Hack

Ukraine Law enforcement shut down U-Admin, one of the world's largest phishing services and arrested its author.

Top 5 Bug Bounty Platforms to Watch in 2021 While Gartner does not have a dedicated Magic Quadrant for Bug Bounties or Crowd Security Testing yet, Gartner Peer Insights already lists 24 vendors in the "Application Crowdtesting Services" category. We have compiled the top 5 most promising bug bounty platforms for those of you who are looking to enhance your existing software testing arsenal with knowledge and expertise from international security researchers: 1. HackerOne Being a unicorn backed by numerous reputable venture capitalists, HackerOne is probably the most well-known and recognized...

New Attack Could Let Remote Hackers Target Devices On Internal Networks A newly devised variant of the NAT Slipstreaming attack can be leveraged to compromise and expose any device in an internal network, according to the latest research. Detailed by enterprise IoT security firm Armis, the new attack (CVE-2020-16043 and CVE-2021-23961) builds on the previously disclosed technique to bypass routers and firewalls and reach any unmanaged device within the internal network from the Internet. First disclosed by security researcher Samy Kamkar in late October 2020, the JavaScript-based attack relie...