Author: DEFENDEDGE

A new version of NAT slipstreaming allows cybercriminals an easy path to devices that aren’t connected to the internet. Read more

Qualys said the vuln gives any local user root access to systems running the most popular version of Sudo. Read more

Researchers publicly disclosed flaws in ADT’s LifeShield DIY HD Video Doorbell, which could have allowed local attackers to access credentials, video feeds and more. Read more

An anonymous researcher identified bugs in the software’s kernel and WebKit browser engine that are likely part of an exploit chain. Read more

Original release date: January 26, 2021 The Federal Trade Commission (FTC) has released information on scammers attempting to impersonate the FTC. The scammers operate an FTC-spoofed website that claims to provide instant cash payments and tries to trick consumers into disclosing their financial information. The real FTC does not require such information and scammers can… Read more

An unmonitored account belonging to a deceased employee allowed Nefilim to exfiltrate data and infiltrate systems for a month, without being noticed. Read more

If exploited, the most serious of these flaws could lead to a denial-of-service condition for Jetson products. Read more

Hackers masquerade as security researchers to befriend analysts and eventually infect fully patched systems at multiple firms with a malicious backdoor. Read more

A security flaw in TikTok could have allowed attackers to query query the platform’s database – potentially opening up for privacy violations. Read more

The high-severity security vulnerability (CVE-2021-1257) allows cross-site request forgery (CSRF) attacks. Read more