/explore
|
You are here 
|
blog.acrossecurity.com | ||
| | | | |
sparklekitten.net
[AI summary] The post reviews May's threat intelligence landscape, highlighting the 3CX supply chain attack by North Korean actors, the targeting of ESXi servers by ransomware, the active exploitation of VEEAM backup vulnerabilities by FIN7, and a newly critical Cisco zero-day, alongside advice on mitigation strategies. |
|
| | | | | ||
| | | | |
parsiya.net
[AI summary] A security engineer explains why 'style points' like unquoted service paths or 404 injection are not real vulnerabilities and clarifies the distinction between code injection at current privilege levels versus actual privilege escalation. |
|
| | | | | ||
| | | | |
srcincite.io
Some time ago Ron Bowes found a vulnerability in Cisco WebEx Meetings Desktop App that could allow local privilege escalation, or, if you have a user account... |
|
| | | | | ||
| | | | |
blog.talosintelligence.com
Update History DateDescription of UpdatesDec. 20, 2021 Additional coverage and IOCs; additional detection capabilities for customers via Cisco Global Threat Alerts. Dec. 18, 2021 Additional mitigation guidance; updated coverage information. Dec. 17, 2021 Added additional vulnerability and mitigation information; added section on guidance for developers; timeline. Dec. 16, 2021 Added |
|
| | | |||
