Credit to Author: David Buxton| Date: Wed, 30 Aug 2023 22:38:37 +0000
In episode 314 of the Kaspersky podcast, the team discuss stalkerware getting pwned, Lapsus found guilty and much more.
Read moreCategories: Exploits and vulnerabilities Categories: News Tags: Barracuda ESG Tags: CVE-2023-2868 Tags: SEASPY Tags: SUBMARINE Tags: WHIRLPOOL The FBI repeats the warning by Barracuda that all ESG appliances should immediately be replaced because the patch was ineffective. |
The post FBI confirms Barracuda patch is not effective for exploited ESG appliances appeared first on Malwarebytes Labs.
Read moreCategories: Business Categories: News Tags: Cisco Tags: VPN Tags: Akira Tags: ransomware Tags: brute-force Tags: credential stuffing Tags: password spraying Several researchers are seeing ransomware attacks targetting Cisco VPNs without MFA |
The post Cisco VPNs without MFA are under attack by ransomware operator appeared first on Malwarebytes Labs.
Read moreCategories: News Tags: DuoLingo Tags: data breach Tags: email adress Tags: username Tags: real name Using an openly available API, cybercrimnals were able to scrape the data of 2.6 million DuoLingo users. |
The post 2.6 million DuoLingo users have scraped data released appeared first on Malwarebytes Labs.
Read moreCategories: News Tags: week Tags: security Tags: august Tags: 2023 Tags: trusted advisor Tags: cyrus Tags: A list of topics we covered in the week of August 21 to August 27 of 2023 |
The post A week in security (August 21 – August 27) appeared first on Malwarebytes Labs.
Read moreCategories: Exploits and vulnerabilities Categories: News Tags: Ivanti Tags: Sentry Tags: MobileIron Tags: CVE-2023-38035 Tags: MICS Tags: port 8443 There is some uncertainty about whether a vulnerability in Ivanti Sentry is being exploited in the wild, but why take the risk when you can patch? |
The post [updated] Ivanti Sentry critical vulnerability—don’t play dice, patch appeared first on Malwarebytes Labs.
Read more
Credit to Author: David Buxton| Date: Thu, 24 Aug 2023 11:04:27 +0000
In episode 313, the team look at Quantum resilient FIDO keys, Duolingo data breach and Interpol arrests
Read moreCategories: Exploits and vulnerabilities Categories: News Tags: Ivanti Tags: Sentry Tags: MobileIron Tags: CVE-2023-38035 Tags: MICS Tags: port 8443 There is some uncertainty about whether a vulnerability in Ivanti Sentry is being exploited in the wild, but why take the risk when you can patch? |
The post Ivanti Sentry critical vulnerability—don’t play dice, patch appeared first on Malwarebytes Labs.
Read more