Ciberseguridad, vulnerabilidades y privacidad
Recent updates to Microsoft Defender for Endpoint on Linux have led to significant issues, including the disabling of the security service on reboot and installation failures on specific systems.
A public exploit has been released for a previously patched remote code execution vulnerability in vBulletin, affecting versions 6.2.1 and earlier, as well as 6.1.6 and earlier.
The Dysphoria IoT botnet has transitioned to blockchain-based command-and-control mechanisms following a disruption of the JackSkid infrastructure, complicating mitigation efforts.
Europol has flagged 4,340 URLs associated with The Com, a network involved in various illicit activities, as part of a broader crackdown aimed at disrupting its online presence.
Recent research highlights a shift in phishing tactics targeting the insurance sector, moving from credential harvesting to real-time account hijacking.
A serious vulnerability in Fastjson, Alibaba's JSON library for Java, is being actively exploited, with no patch currently available.
A new malvertising operation named SourTrade is leveraging browser capabilities to construct malicious executables, targeting cryptocurrency investors across multiple countries.
A researcher has published an exploit for a GitLab vulnerability that allows authenticated users to execute commands on self-managed servers. This flaw affects versions that have not been updated since June 10.
The Click To Pray app, endorsed by the Pope, has leaked sensitive user information due to a security vulnerability that remains unaddressed for months.
A newly discovered vulnerability, dubbed Certighost, enables low-privileged Active Directory users to impersonate Domain Controllers, raising significant security concerns for organizations utilizing Microsoft Active Directory.
