Fortinet fixed a critical flaw in FortiOS and FortiProxy
Fortinet warns of a critical vulnerability impacting FortiOS and FortiProxy that can allow remote attackers to perform arbitrary code execution. Fortinet has disclosed a critical…
Category: Securityaffairs
Microsoft mitigated an attack by Chinese threat actor Storm-0558Security Affairs
Microsoft announced it has mitigated a cyber attack by a China-linked threat actor, tracked as Storm-0558, which targeted customer emails. Microsoft announced it has mitigated…
Unpatched Office zero-day CVE-2023-36884 actively exploited in targeted attacksSecurity Affairs
Microsoft warned today that an unpatched zero-day in multiple Windows and Office products was actively exploited in the wild. Microsoft disclosed an unpatched zero-day vulnerability…
HCA Healthcare data breach impacted 11 million patientsSecurity Affairs
HCA Healthcare disclosed a data breach that exposed the personal information of roughly 11 million patients. HCA Healthcare this week announced that the personal information…
Apple issued Rapid Security Response updates to fix a zero-day but pulled them due to a Safari bugSecurity Affairs
Apple released Rapid Security Response updates for iOS, iPadOS, macOS, and Safari web browser to address an actively exploited zero-day. Apple has released Rapid Security Response updates for iOS, iPadOS, macOS,…
VMware warns customers of exploit available for critical vRealize RCE flaw CVE-2023-20864Security Affairs
VMware warns customers of the public availability of an exploit code for the RCE vulnerability CVE-2023-20864 affecting vRealize. VMware warned customers of the availability of…
Crooks Evolve Antidetect Tooling for Mobile OS-Based FraudSecurity Affairs
Resecurity identified the emergence of adversarial mobile Android-based Antidetect Tooling for Mobile OS-Based Fraud. Resecurity has identified the emergence of adversarial mobile Android-based tools (called…
Experts released PoC exploit for Ubiquiti EdgeRouter flawSecurity Affairs
A Proof-of-Concept (PoC) exploit for the CVE-2023-31998 vulnerability in the Ubiquiti EdgeRouter has been publicly released. The CVE-2023-31998 flaw (CVSS v3 5.9) is a heap…
RomCom RAT attackers target groups supporting NATO membership of UkraineSecurity Affairs
Threat actors are targeting NATO and groups supporting Ukraine in a spear-phishing campaign distributing the RomCom RAT. On July 4, the BlackBerry Threat Research and Intelligence…
A flaw in Revolut US payments resulted in the theft of $20 MillionSecurity Affairs
A zero-day vulnerability in the Revolut payment systems allowed threat actors to steal more than $20 million in early 2022. In early 2022, threat actors…
France ‘s government is giving the police more surveillance powerSecurity Affairs
The French government is going to grant law enforcement the power to spy on suspects through smartphones and other devices. French legislators are going to…
Two spyware sending data to China found in Google Play StoreSecurity Affairs
Two apps on the Google Play Store with more than 1.5 million downloads have been discovered spying on users and sending data to China. Researchers…