US defense contractors targeted by North Korean phishing attacks
Employees of U.S. defense and aerospace contractors were targeted in a large scale spear-phishing campaign between early April and mid-June 2020 in a series of phishing attacks designed to infect their devices and to exfiltrate defense tech intelligence. (6f4c434995edef0548165457c4d90ce3)[…]
Cisco fixes severe flaws in data center management solution
Cisco today has released several security updates to address three critical authentication bypass, buffer overflow, and authorization bypass vulnerabilities found to affect Cisco Data Center Network Manager (DCNM) and multiple Cisco SD-WAN software products. (47a9275c481dbf25e49cf753f7102ec1)[…]
BootHole GRUB bootloader bug lets hackers hide malware in Linux, Windows
A severe vulnerability exists in almost all signed versions of GRUB2 bootloader used by most Linux systems. When properly exploited, it could allow threat actors to compromise an operating system’s booting process even if the Secure Boot verification mechanism is active. (47a9275c481dbf25e49cf753f7102ec1)[…]
