OpenVPN Monitor 1.1.3 Authorization Bypass / Denial Of Service
Authored by Sylvain Heiniger, Emanuel Duss OpenVPN Monitor versions 1.1.3 and below suffer from an authorization bypass vulnerability that allows…
US CISA, FBI, and NSA warn an escalation of Conti ransomware attacks
CISA, FBI, and the NSA warned today of an escalation of the attacks of the Conti ransomware gang […] The…
Backdrop CMS 1.20.0 Cross Site Request Forgery / Command Execution
Authored by V1n1v131r4 Backdrop CMS version 1.20.0 suffers from cross site request forgery vulnerabilities that can assist an attacker in…
FamousSparrow APT Group Flocks to Hotels, Governments, Businesses
A cyberespionage group dubbed FamousSparrow is targeting hotels, governments, and private businesses around the world, leveraging the ProxyLogon Microsoft Exchange…
Does Your Organization Have a Security.txt File?
It happens all the time: Organizations get hacked because there isn't an obvious way for security researchers to let them…
Simple Attendance System 1.0 SQL Injection
Authored by Abdullah Khawaja Simple Attendance System version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication…
HTML Smuggling: A Resurgent Cause for Concern
By Vinay Pidathala, Director of Security Research, Menlo Security Cybersecurity is never straightforward. While defense techniques, technologies, policies […] The…
Azure Zero-Day Flaws Highlight Lurking Supply-Chain Risk
Dubbed OMIGOD, a series of vulnerabilities in the Open Management Infrastructure used in Azure on Linux demonstrate hidden security threats,…
FBI, CISA, CGCYBER Warn of APTs Targeting CVE-2021-40539
Advanced persistent threat attackers are exploiting a newly identified vulnerability in Zoho ManageEngine ADSelfService Plus, according to a joint advisory…
3 security lessons from an MSP that survived the Kaseya VSA attack
An Indiana-based MSP offers lessons in what needs to change following the Kaseya VSA ransomware attack. Jay Tipton, chief executive…