Page 34 - Web Security News Today : Breaking News, Live Updates & Top Stories | Vimarsana

Cisco is stoppering critical holes in its SD-WAN solutions and its smart software manager satellite. Cisco is warning of multiple, critical vulnerabilities in its software-defined networking for wide-area networks (SD-WAN) solutions for business users. Cisco issued patches addressing eight buffer-overflow and command-injection SD-WAN vulnerabilities. The most serious of these flaws could be exploited by an unauthenticated, remote attacker to execute arbitrary code on the affected system with root privileges. “Cisco has released software updates that address these vulnerabilities,” accord...

A phishing campaign spoofs Xerox notifications to lure victims into clicking on malicious HTML attachments.

Seven flaws in open-source software Dnsmasq could allow DNS cache poisoning attacks and remote code execution. Researchers have uncovered a set of flaws in dnsmasq, popular open-source software used for caching Domain Name System (DNS) responses for home and commercial routers and servers. The set of seven flaws are comprised of buffer overflow issues and flaws allowing for DNS cache-poisoning attacks (also known as DNS spoofing). If exploited, these flaws could be chained together to allow remote code execution, denial of service and other attacks. Researchers have labeled the set of vulnera...

The attack vector was not the Orion platform but rather an email-protection application for Microsoft 365. Malwarebytes is the latest discovered victim of the SolarWinds hackers, the security company said – except that it wasn’t targeted through the SolarWinds platform. “While Malwarebytes does not use SolarWinds, we, like many other companies were recently targeted by the same threat actor,” it disclosed in a Tuesday web posting. Instead of using the SolarWinds Orion network-management system, the advanced persistent threat (APT) abused “applications with privileged access to Micro...

Users of dating apps – like Tinder, Match and Bumble – should be on the lookout for investment-fraud scammers.