Web infrastructure company Cloudflare on Wednesday revealed that threat actors are actively attempting to exploit a second bug disclosed in the widely used Log4j logging utility, making it imperative that customers move quickly to install the latest v…
Cibele Thinfinity VirtualUI 2.5.41.0 – User Enumeration
Arunna 1.0.0 – ‘Multiple’ Cross-Site Request Forgery (CSRF)
Type: InfographicsEmerging Cybersecurity Trends in 2022 Across the Threat LandscapeReview predictions from Secureworks threat intelligence expertsPredictions based on insights from 2021 can help organizations prepare for a successful 2022. Review our E…
Croogo 3.0.2 – ‘Multiple’ Stored Cross-Site Scripting (XSS)
 |
|
| Log4Shell is a severe software flaw affecting millions of applications, including those in your business. Secure this vulnerability now!
Categories: Exploits and vulnerabilities Tags: 0-dayApache logger flawbotnetbotsCISA Log4Shellcryptominingcve-2021-44228Cybersecurity & Infrastructure Security Agencylog4shellLogjamMicrosoft Threat Intelligence CentermiraiMirai botnetMSTICransomwareSMB protectzero-day |
The post What SMBs can do to protect against Log4Shell attacks appeared first on Malwarebytes Labs.
Meta Platforms, the company formerly known as Facebook, has announced that it’s expanding its bug bounty program to start rewarding valid reports of scraping vulnerabilities across its platforms as well as include reports of scraping data sets that ar…
Today’s cyber attackers are constantly looking for ways to exploit vulnerabilities and infiltrate organizations. To keep up with this evolving threat landscape, security teams must be on the lookout for potential risks around the clock. Since most org…
Malicious actors are deploying a previously undiscovered binary, an Internet Information Services (IIS) webserver module dubbed “Owowa,” on Microsoft Exchange Outlook Web Access servers with the goal of stealing credentials and enabling remote command…
