Firewall Vendor Patches Critical Auth Bypass Flaw
Cybersecurity firm Genua fixes a critical flaw in its GenuGate High Resistance Firewall, allowing attackers to log in as root users.
Source:
[...]
bypass
Amazon Dismisses Claims Alexa ‘Skills’ Can Bypass Security Vetting Process
Researchers found a number of privacy and security issues in Amazon’s Alexa skill vetting process, which could lead to attackers stealing data or
[...]
New PDF Vulnerability Let Attackers Bypass the Signature Validation in PDF and Replace Content
A team of researchers from the Ruhr-University Bochum in Germany has reported the attacks bypassing the signature validation in PDF. Digitally signed PDFs
[...]
Cisco Warns of Critical Auth-Bypass Security Flaw
Cisco also stomped out a critical security flaw affecting its Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches.
Source: Threat
[...]
Apple Kills MacOS Feature Allowing Apps to Bypass Firewalls
Security researchers lambasted the controversial macOS Big Sur feature for exposing users’ sensitive data.
Source: Threat Post – Mobile Security – Apple
[...]
cPanel 2FA Bypass Exposes Tens of Millions of Websites to Hack
Digital Defense, Inc., a leader in vulnerability and threat management solutions, announced that its Vulnerability Research Team (VRT) exposed a previously undisclosed vulnerability affecting the cPanel
[...]
Malware Operators Arrested for Running Services To Bypass Antivirus Software
Romanian police forces have arrested two individuals this week, for allegedly running two malware crypting services like CyberSeal and DataProtector to escape antivirus
[...]
Google Services Weaponized to Bypass Security in Phishing, BEC Campaigns
Attackers exploiting an array of Google Services, including Forms, Firebase, Docs and more to boost phishing and BEC campaigns.
Source: Threat Post
[...]
Some Apple Apps on macOS Big Sur Bypass Content Filters, VPNs
Attackers can exploit the feature and send people’s data directly to remote servers, posing a privacy and security risk, researchers said.
Source:
[...]
Attackers Using Image Inversion Technique to Bypass Office 365 Filtering Mechanism
A creative Office 365 phishing campaign was discovered by WMC Global Analysis researchers that a legitimate login page of a Microsoft Account, but
[...]