article thumbnail

Security testing firm NSS Labs ceases operations, citing coronavirus

TechCrunch

NSS Labs retracted its “caution” rating for CrowdStrike’s Falcon platform in 2019, after the two companies confidentially settled a lawsuit challenging the results. But the last few years have been rocky.

Testing 50
article thumbnail

WatchBog Malware Adds BlueKeep Scanner (CVE-2019-0708), New Exploits (CVE-2019-10149, CVE-2019-11581)

Tenable

Scanner for “BlueKeep” vulnerability and newly minted exploits for Exim and Jira incorporated into cryptocurrency mining malware. On July 24, researchers at Intezer published a blog about a new variant of the WatchBog malware. CVE-2019-7238. CVE-2019-0192. CVE-2019-10149. CVE-2019-11581. CVE-2019-0708.

Malware 14
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

From Bugs to Breaches: 25 Significant CVEs As MITRE CVE Turns 25

Tenable

Attackers could exploit Shellshock to gain full control of vulnerable systems, leading to data breaches, service interruptions and malware deployment. By sending crafted HTTP requests, attackers could gain RCE and take full control of affected devices to install malware or steal data. The impact extended far beyond local systems.

article thumbnail

‘If you compromise the bootloader, you pwn the whole phone’

The Parallax

The vulnerabilities, discovered by Ilja van Sprundel and Joseph Tartaro at security research company IOActive , and by Andrea Barisani at antivirus company F-Secure , affect a wide range of bootloaders, including Das U-Boot , Coreboot , Grub , Seabios , CFE , iPXE , and TianoCore , they disclosed at PacSec 2019 here in November.

article thumbnail

Microsoft's December 2019 Patch Tuesday Includes Fix for Zero Day Exploited in the Wild (CVE-2019-1458)

Tenable

Microsoft closes out 2019 by patching 36 CVEs, including one flaw that was exploited in the wild as a zero-day. The December 2019 Patch Tuesday contains updates for 36 CVEs, seven of which are rated as critical. CVE-2019-1458 | Win32k Elevation of Privilege Vulnerability.

article thumbnail

SecureAge Integrates Artificial Intelligence Powered APEX Anti-Malware Engine in VirusTotal

DevOps.com

The post SecureAge Integrates Artificial Intelligence Powered APEX Anti-Malware Engine in VirusTotal appeared first on DevOps.com.

article thumbnail

CVE-2019-11510: Critical Pulse Connect Secure Vulnerability Used in Sodinokibi Ransomware Attacks

Tenable

CVE-2019-11510 is a critical arbitrary file disclosure vulnerability in Pulse Connect Secure, the SSL VPN solution from Pulse Secure. While Pulse Secure issued an out-of-cycle patch for the vulnerability in April 2019, it garnered more attention after a proof of concept (PoC) for the flaw was made public in August 2019.

Malware 18