Category: alerts

Original release date: July 19, 2021 Fortinet has released security advisory FG-IR-21-067 to address a use-after-free vulnerability in the FortiManager fgfmsd daemon. A use-after-free condition occurs when a program marks a section of memory as free but then subsequently tries to use that memory, which could result in a program crash. The use of previously… Read more

Original release date: July 19, 2021   High Vulnerabilities Primary Vendor — Product Description Published CVSS Score Source & Patch Info echobh — sharecare Echo ShareCare 8.15.5 is susceptible to SQL injection vulnerabilities when processing remote input from both authenticated and unauthenticated users, leading to the ability to bypass authentication, exfiltrate Structured Query Language (SQL)… Read more

Original release date: July 19, 2021 CISA, the Federal Bureau of Investigation (FBI), and the National Security Agency (NSA) have observed increasingly sophisticated Chinese state-sponsored activity targeting U.S. political, economic, military, educational, and critical infrastructure personnel and organizations. In response: The White House has released a statement attributing recent Microsoft Exchange server exploitation activity to… Read more

Original release date: July 19, 2021 Summary This Joint Cybersecurity Advisory was written by the Federal Bureau of Investigation (FBI) and the Cybersecurity and Infrastructure Security Agency (CISA) to provide information on a Chinese Advanced Persistent Threat (APT) group known in open-source reporting as APT40. This advisory provides APT40’s tactics, techniques, and procedures (TTPs) and… Read more

Original release date: July 19, 2021 Summary This advisory uses the MITRE Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK®) framework, Version 9, and MITRE D3FEND™ framework, version 0.9.2-BETA-3. See the ATT&CK for Enterprise for all referenced threat actor tactics and techniques and the D3FEND framework for referenced defensive tactics and techniques. The National Security Agency, Cybersecurity… Read more

An analysis of criminal forums reveal what publicly known vulnerabilities attackers are most interested in. Read more

Curtis Simpson, CISO at Armis, discusses the stop qualities that all CISOs need to possess to excel. Read more

Telecom providers, including wireless carriers, are at risk of disruption of network service if the bug in SBR Carrier is exploited. Read more

Candiru, aka Sourgum, allegedly sells the DevilsTongue surveillance malware to governments around the world. Read more

Another vulnerability separate from PrintNightmare allows for local elevation of privilege and system takeover. Read more