sophos

SQL injection vulnerability in Mail Manager Component would allow authenticated attackers to execute code in Sophos UTM

On: March 24, 2022

Tagged: antivirus, Common Vulnerability Scoring System (CVSS), Cyberattack, cybercrime, cybersecurity, Firewall, Hacking, incidents, Information Security, security flaws, sophos, SQL injections, Universal Threat Manager (UTM), vulnerability

Sophos security teams announced the fix of a critical vulnerability in authentication software running on Universal Threat Manager (UTM) devices. The vulnerability was described as a SQL injection bug inRead More →

Unpatched Microsoft Exchange Server let two ransomware actors attack a Canadian healthcare company; Karma just stole data, while Conti encrypted it

On: March 1, 2022

In: Virus

Tagged: Conti ransomware, Cyberattack, cybercrime, cybersecurity, Hacking, Information Security, Karma ransomware, malware, Microsoft Exchange Server, ProxyShell, ransomware, sophos

In December 2021 a Canadian-based medical services firm was attacked by two ransomware operations employing remarkably different tactics, leaving the affected infrastructure in critical condition. According to the Sophos report,Read More →

DearCry: new ransomware variant infecting vulnerable Exchange implementations

On: March 17, 2021

In: Cyber Security

Tagged: Cyberattack, cybercrime, cybersecurity, DearCry, Hacking, malware, MICROSOFT EXCHANGE, ransomware, sophos, WannaCry

A Sophos security report details the finding of a new ransomware variant specifically targeting on-premises Microsoft Exchange servers without updating. Identified as “DearCry”, experts mention that this is an unsophisticatedRead More →

sophos

SQL injection vulnerability in Mail Manager Component would allow authenticated attackers to execute code in Sophos UTM

Unpatched Microsoft Exchange Server let two ransomware actors attack a Canadian healthcare company; Karma just stole data, while Conti encrypted it

DearCry: new ransomware variant infecting vulnerable Exchange implementations

Dual Vulnerabilities in Microsoft SharePoint Server: Essential Steps to Mitigate Vulnerabilities

Exploiting the High-Risk Vulnerabilities in Secure Boot of Most Linux Devices on the Planet

Hackers’ New Target is containerized environments through vulnerabilities in runC

Hacking Android, Linux, macOS, iOS, Windows Devices via Bluetooth using a single vulnerability

Hacking Windows 10 and 11 with DLL Search Order Hijacking without administrator rights

Healthcare Hack Horror: Cyberattacks Leave French Hospitals in Chaos for $10 Million

Hacking the Unhackable: The Story of How CISA Was Breached

The Cloudflare Hack: A Hacker, 5000 Credentials, and Operation Code Red

Hijacked Data:LockBit Ransomware Gang Targets Aerospace Giant Boeing

Timeless Targets: After Casio, Seiko Group hacked again by Ransomware gang

Unlocked Doors: The Inside Story of Casio’s Global Data Breach!

Largest soft drink bottle supplier, recycle and plastic manufacturers hacked by ransomware

Google Gemini Under Fire: Critical Security Vulnerabilities You Need to Know to hack Gemini

Cracking SCCM Wide Open: Pentesting System Center Configuration Manager with Misconfiguration Manager

Hacking Windows 10 and 11 with DLL Search Order Hijacking without administrator rights

Hacking SSH Connections by exploiting SSH Protocol Vulnerabilities: Different Terrapin Attack Vectors

Understanding Latest DHCP DNS Vulnerabilities and How DHCP Exploits work in Active Directory

Hacking Bluetooth via MiTM: The BLUFFS Bluetooth attack to hack into Millions of Devices

6 Steps to File Anonymous SEC Complaints Against Data Breachers & Force Them to Pay Fines or Take Action

Inside the Exploit: How Your ChatGPT’s Uploaded Files Could Be Stolen by Prompt Injection Vulnerability

This Google Calendar technique allows to hack into companies without getting detected

This telegram bot is like ChatGPT for scammers to steal money from victims easily

How easy is to bomb someone mobile phone with thousands of SMS messages?

This new DDoS attack prevention technique has a 99% accuracy rate

How to secure Cisco Firepower Threat Defense (FTD) firewalls ?

How to use AWS SSM agent as backdoor and hack into EC2 instances?

New tool FraudGPT allows scamming and easy hacking of victims using AI

The Dark Side of PDFs: How Opening a Simple PDF Could Unleash a Cybersecurity Nightmare

Largest soft drink bottle supplier, recycle and plastic manufacturers hacked by ransomware

Visited thesaurus.com in search for Synonyms? You have Coinminer malware infection

How to send malware via Teams, even “Safe Attachments” or “Safe Links” can’t protect you

2 Big Cloud hosting companies shutdown by ransomware and lose all customer data