Author: DEFENDEDGE

  • Misconfigured Baby Monitors Allow Unauthorized Viewing

    Hundreds of thousands of individuals are potentially affected by this vulnerability. Read more

  • Microsoft Pulls Bad Windows Update After Patch Tuesday Headaches

    Microsoft released a new servicing stack update (KB5001078) after an older one caused problems for Windows users installing Patch Tuesday security updates. Read more

  • Unpatched Android App with 1 Billion Downloads Threatens Spying, Malware

    Attackers can exploit SHAREit permissions to execute malicious code through vulnerabilities that remain unpatched three months after app makers were informed. Read more

  • Vulnerability Summary for the Week of February 8, 2021

    Original release date: February 15, 2021   High Vulnerabilities Primary Vendor — Product Description Published CVSS Score Source & Patch Info adobe — acrobat Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by an Out-of-bounds Write vulnerability when parsing a crafted jpeg file. An unauthenticated attacker… Read more

  • mHealth Apps Expose Millions to Cyberattacks

    Researcher testing of 30 mobile health apps for clinicians found that all of them had vulnerable APIs. Read more

  • Singtel Suffers Zero-Day Cyberattack, Damage Unknown

    The Tier 1 telecom giant was caught up in a coordinated, wide-ranging attack using unpatched security bugs in the Accellion legacy file-transfer platform. Read more

  • VMware Releases Security Update

    Original release date: February 12, 2021 VMware has released a security update to address a vulnerability in vSphere Replication. An attacker could exploit this vulnerability to take control of an affected system. CISA encourages users and administrators to review VMware Security Advisory VMSA-2021-0001 and apply the necessary update. This product is provided subject to this… Read more

  • Compromise of U.S. Water Treatment Facility

    Original release date: February 11, 2021 In response to recent events where unidentified cyber actors obtained unauthorized access to the supervisory control and data acquisition (SCADA) system at a U.S. drinking water treatment facility, CISA, the Federal Bureau of Investigation, the Environmental Protection Agency, and the Multi-State Information Sharing and Analysis Center have released joint… Read more

  • AA21-042A: Compromise of U.S. Water Treatment Facility

    Original release date: February 11, 2021 Summary On February 5, 2021, unidentified cyber actors obtained unauthorized access to the supervisory control and data acquisition (SCADA) system at a U.S. drinking water treatment plant. The unidentified actors used the SCADA system’s software to increase the amount of sodium hydroxide, also known as lye, a caustic chemical,… Read more

  • Verify Your Valentine

    Original release date: February 11, 2021 This Valentine’s Day, before you go looking for love in all the wrong chat rooms, CISA reminds users to be wary of internet romance scams. At first, cyber criminals promise the reward of romance after adopting an alias to appear as a potential partner. Once your heart is hooked… Read more