Citrix fixes critical bugs allowing takeover of XenMobile Servers
Citrix today fixed 5 vulnerabilities impacting multiple versions of Citrix Endpoint Management (CEM) on-premise instances, also known as XenMobile Server. [...]
Author Archives: Sergiu Gatlan
Twitter experiencing issues sending account verification codes
Twitter is experiencing a worldwide service disruption preventing users from receiving account verification codes via text messages or phone calls. [...]
Upgraded Agent Tesla malware steals passwords from browsers, VPNs
New variants of Agent Tesla remote access Trojan now come with modules dedicated to stealing credentials from applications including popular web browsers, VPN software, as well as FTP and email clients. [...]
Michigan State University discloses credit card theft incident
Michigan State University (MSU) today disclosed that attackers were able to steal credit card and personal information from roughly 2,600 users of its shop.msu.edu online store between October 2019 and June 2020. [...]
Office 365 will let you manage phishing simulation emails
Microsoft is adding support for allowing emails containing malicious URLs or attachments to reach the mailboxes of end-users to make it easier to run phishing training sessions or simulations. [...]
FBI: Iranian hackers trying to exploit critical F5 BIG-IP flaw
The FBI warns of Iranian hackers actively attempting to exploit an unauthenticated remote code execution flaw affecting F5 Big-IP application delivery controller (ADC) devices used by Fortune 500 firms, government agencies, and banks. [...]
US shares info on election interference tied to Russia, China, Iran
The Director of the U.S. National Counterintelligence and Security Center (NCSC) today shared information on ongoing election influence efforts linked to Russia, China, and Iran, before the 2020 U.S. elections. [...]
Reddit hit by coordinated hack promoting Trump’s reelection
Multiple Reddit subreddits have been defaced during the last 24 hours, with the attackers behind this incident posting pro-Trump messages and changing the subreddits' themes to show content supporting Trump's 2020 campaign. [...]
CCleaner fixes bug that wipes Firefox extension settings
Piriform released CCleaner 5.70 to address a bug that was causing the app to wipe settings for Firefox extensions installed after upgrading to Firefox 79 when cleaning the web browser's Internet cache. [...]
Nearly 50% of all smartphones affected by Qualcomm Snapdragon bugs
Several security vulnerabilities found in Qualcomm's Snapdragon chip Digital Signal Processor (DSP) chip could allow attackers to take control of almost 40% of all smartphones, spy on their users, and create un-removable malware capable of evading detection. [...]
KrØØk attack variants impact Qualcomm, MediaTek Wi-Fi chips
Qualcomm and MediaTek Wi-Fi chips were found to have been impacted by new variants of the KrØØk information disclosure vulnerability discovered by ESET researchers Robert Lipovský and Štefan Svorenčík. [...]
Google banned 2500+ Chinese YouTube channels for disinformation
Google says that it took down multiple coordinated influence operation campaigns linked to China, Russia, Iran, and Tunisia by terminating thousands of YouTube channels and several AdSense, Play Developer, and advertising accounts. [...]
Office 365 services will drop support for older Office clients
Microsoft says that Office 365 (and Microsoft 365) services including Exchange Online, SharePoint Online, and OneDrive for Business will provide connectivity support for a smaller number of Office clients starting with October 13, 2020. [...]