Author: DEFENDEDGE

An unmonitored account belonging to a deceased employee allowed Nefilim to exfiltrate data and infiltrate systems for a month, without being noticed. Read more

If exploited, the most serious of these flaws could lead to a denial-of-service condition for Jetson products. Read more

Hackers masquerade as security researchers to befriend analysts and eventually infect fully patched systems at multiple firms with a malicious backdoor. Read more

A security flaw in TikTok could have allowed attackers to query query the platform’s database – potentially opening up for privacy violations. Read more

The high-severity security vulnerability (CVE-2021-1257) allows cross-site request forgery (CSRF) attacks. Read more

Original release date: January 25, 2021 The CISA Weekly Vulnerability Summary Bulletin is created using information from the NIST NVD. In some cases, the vulnerabilities in the Bulletin may not yet have assigned CVSS scores. Please visit NVD for updated vulnerability entries, which include CVSS scores once they are available. High Vulnerabilities Primary Vendor —… Read more

The security vendor is investigating potential zero-day vulnerabilities in its Secure Mobile Access (SMA) 100 series. Read more

The “KindleDrip” attack would have allowed attackers to siphon money from unsuspecting victims. Read more

Netscout researchers identify more than 14,000 existing servers that can be abused by ‘the general attack population’ to flood organizations’ networks with traffic. Read more

Researchers have traced the origins of a campaign – infecting SQL servers to mine cryptocurrency – back to an Iranian software firm. Read more