The infamous Mirai and Gafgyt Internet of Things (IoT) botnets are targeting vulnerabilities in Apache Struts and the SonicWall Global Management System (GMS), Palo Alto Networks has discovered. read more http://feedproxy.google.com/~r/Securityweek/~3/Y8ZSbM-3PAA/iot-botnets-target-apache-struts-son..
Tag : Vulnerabilities
Google has released its September 2018 security patches for Android, which resolves more than 50 vulnerabilities in the operating system. read more http://feedproxy.google.com/~r/Securityweek/~3/3lc9JXXCT5I/android-september-2018-patches-fix-crit..
Microsoft this week revealed plans to offer paid Windows 7 Extended Security Updates (ESU) for three years after traditional support for the operating system will officially end. read more http://feedproxy.google.com/~r/Securityweek/~3/1Gf_AtBHtI8/microsoft-charge-windows-7-securi..
Effective this week, Windows XP is no longer supported by Firefox. read more http://feedproxy.google.com/~r/Securityweek/~3/EBX2NgnogNY/firefox-drops-support-..
A vulnerability discovered in some of Schneider Electric’s Modicon programmable logic controllers (PLCs) may allow malicious actors to cause significant disruption to industrial control systems (ICS). read more http://feedproxy.google.com/~r/Securityweek/~3/ug8gGBcDDH8/flaw-schneider-plc-allows-significant-disr..
Cisco informed customers on Wednesday that patches are available for over a dozen critical and high severity vulnerabilities affecting the company’s RV series, SD-WAN, Umbrella and other products. read more http://feedproxy.google.com/~r/Securityweek/~3/8tkEQGRinyk/cisco-patches-serious-flaws-rv-sd-wan-umbrell..
Opsview recently addressed a series of remote code-execution, command-execution and local privilege-escalation vulnerabilities in the Opsview Monitor. read more http://feedproxy.google.com/~r/Securityweek/~3/Wk6n-kv8EZ0/multiple-vulnerabilities-addressed-opsvi..
Google this week celebrates 10 years of its Chrome web browser with the release of a new version that provides users with security improvements, new features, and patches for 40 vulnerabilities. read more http://feedproxy.google.com/~r/Securityweek/~3/W_tbNa6BIJw/latest-version-chrome-improves-password-management-patche..
A threat group tracked by security firm ESET as “PowerPool” has been exploiting a Windows zero-day vulnerability to elevate the privileges of a backdoor in targeted attacks. read more http://feedproxy.google.com/~r/Securityweek/~3/41idLQKD4D8/windows-zero-day-exploited-targeted-attacks-power..
This year’s mobile-focused Pwn2Own hacking competition organized by Trend Micro’s Zero Day Initiative (ZDI) will include a new category for Internet of Things (IoT) devices. read more http://feedproxy.google.com/~r/Securityweek/~3/l45QXbWfZjQ/iot-category-added-pwn2own-hacki..
