The infamous Mirai and Gafgyt Internet of Things (IoT) botnets are targeting vulnerabilities in Apache Struts and the SonicWall Global Management System (GMS), Palo Alto Networks has discovered.
http://feedproxy.google.com/~r/Securityweek/~3/Y8ZSbM-3PAA/iot-botnets-target-apache-struts-sonicwall-gms
Google has released its September 2018 security patches for Android, which resolves more than 50 vulnerabilities in the operating system.
http://feedproxy.google.com/~r/Securityweek/~3/3lc9JXXCT5I/android-september-2018-patches-fix-critical-flaws
Microsoft this week revealed plans to offer paid Windows 7 Extended Security Updates (ESU) for three years after traditional support for the operating system will officially end.
http://feedproxy.google.com/~r/Securityweek/~3/1Gf_AtBHtI8/microsoft-charge-windows-7-security-updates
Effective this week, Windows XP is no longer supported by Firefox.
http://feedproxy.google.com/~r/Securityweek/~3/EBX2NgnogNY/firefox-drops-support-windows-xp
A vulnerability discovered in some of Schneider Electric’s Modicon programmable logic controllers (PLCs) may allow malicious actors to cause significant disruption to industrial control systems (ICS).
http://feedproxy.google.com/~r/Securityweek/~3/ug8gGBcDDH8/flaw-schneider-plc-allows-significant-disruption-ics
Cisco informed customers on Wednesday that patches are available for over a dozen critical and high severity vulnerabilities affecting the company’s RV series, SD-WAN, Umbrella and other products.
http://feedproxy.google.com/~r/Securityweek/~3/8tkEQGRinyk/cisco-patches-serious-flaws-rv-sd-wan-umbrella-products
Opsview recently addressed a series of remote code-execution, command-execution and local privilege-escalation vulnerabilities in the Opsview Monitor.
http://feedproxy.google.com/~r/Securityweek/~3/Wk6n-kv8EZ0/multiple-vulnerabilities-addressed-opsview-monitor
Google this week celebrates 10 years of its Chrome web browser with the release of a new version that provides users with security improvements, new features, and patches for 40 vulnerabilities.
http://feedproxy.google.com/~r/Securityweek/~3/W_tbNa6BIJw/latest-version-chrome-improves-password-management-patches-40-flaws
A threat group tracked by security firm ESET as “PowerPool” has been exploiting a Windows zero-day vulnerability to elevate the privileges of a backdoor in targeted attacks.
http://feedproxy.google.com/~r/Securityweek/~3/41idLQKD4D8/windows-zero-day-exploited-targeted-attacks-powerpool-group
This year’s mobile-focused Pwn2Own hacking competition organized by Trend Micro’s Zero Day Initiative (ZDI) will include a new category for Internet of Things (IoT) devices.
http://feedproxy.google.com/~r/Securityweek/~3/l45QXbWfZjQ/iot-category-added-pwn2own-hacking-contest