Author: DEFENDEDGE

Investigation reveals device sector is problem plagued when it comes to security bugs. Read more

The phones of 36 journalists were infected by four APTs, possibly linked to Saudi Arabia or the UAE. Read more

The bugs rate 10 out of 10 on the vulnerability-severity scale, thanks to the ease of exploitation. Read more

Original release date: December 21, 2020   High Vulnerabilities Primary Vendor — Product Description Published CVSS Score Source & Patch Info adremsoft — netcrunch AdRem NetCrunch 10.6.0.4587 has a hardcoded SSL private key vulnerability in the NetCrunch web client. The same hardcoded SSL private key is used across different customers’ installations when no other SSL… Read more

What are the riskiest links in the virtual healthcare chain? Threatpost readers weigh in as part of an exclusive telemed poll. Read more

Original release date: December 18, 2020 | Last revised: December 19, 2020 CISA has updated AA20-352A: Advanced Persistent Threat Compromise of Government Agencies, Critical Infrastructure, and Private Sector Organizations, originally released December 17. This update states that CISA has evidence of, and is currently investigating, initial access vectors in addition to those attributed to the… Read more

Researchers predict software security will continue to struggle to keep up with cloud and IoT in the new year. Read more

Examining the backdoor’s DNS communications led researchers to find a government agency and a big U.S. telco that were flagged for further exploitation in the spy campaign. Read more

The ongoing, growing campaign is “effectively an attack on the United States and its government and other critical institutions,” Microsoft warned. Read more

Threat actors impersonate Google Play store in scam as Sony pulls the game off the PlayStation store due to myriad performance issues. Read more