US-CERT Warns of Remotely Exploitable Bugs in Medical Devices
Vulnerabilities in key surgical equipment could be remotely exploited by a low-skill attacker.
Source: Dark Reading – Threat Intelligence – US-CERT Warns
[...]
warns
Magento Warns E-Commerce Sites to Upgrade ASAP to Prevent Attacks
The platform is a favorite target for the Magecart collective of card-skimming threat groups.
Source: Threat Post – Web Security – Magento
[...]
Microsoft Warns of More BlueKeep RDP Attacks to Deploy CoinMiner Malware – Patch Now!!
Microsoft Urges users to patch for BlueKeep RDP vulnerability as it could result in more effective attacks. The Bluekeep exploit can be used
[...]
NCSC Warns that APT Groups Exploiting Vulnerabilities in Popular Enterprise VPN
APT groups exploiting vulnerabilities in popular enterprise VPN products to retrieve arbitrary files that include login credentials, change configuration settings, or connect to
[...]
Google Warns of Android Zero-Day Bug Under Active Attack
Flaw impacts 18 Android models including Google’s flagship Pixel handset as well as phones made by Samsung, Huawei and Xiaomi.
Source: Threat
[...]
Lenovo Warns on ThinkPad Bugs, One Unpatched
The notebook maker is warning users of three separate vulnerabilities.
Source: Threat Post – Mobile Security – Lenovo Warns on ThinkPad Bugs,
[...]
DHS Warns About Security Flaws in Small Airplanes
Rapid7 researchers found holes in CAN bus networks that an attacker could exploit to sabotage its operation.
Source: Dark Reading – Threat
[...]
CISA Warns Public About the Risks of 5G
Vulnerabilities include everything from physical risks through the supply chain to business risks.
Source: Dark Reading – Threat Intelligence – CISA Warns
[...]
Coast Guard Warns Shipping Firms of Maritime Cyberattacks
A commercial vessel suffered a significant malware attack in February, prompting the US Coast Guard to issues an advisory to all shipping companies:
[...]
US Military Warns Companies to Look Out for Iranian Outlook Exploits
Microsoft patched a serious vulnerability in the Microsoft Outlook client in 2017, but an Iranian group continues to exploit the flaw.
Source:
[...]