WordPress Plugins, Cisco, Cisco Webex, Cerberus RAT, Microsoft Teams

Week In Cyber News: Cerberus RAT new Variant, 2 WordPress Plugins Vulnerabilities, Cisco Webex Phishing Campaign, and More

Cyber AttacksBy SecureBugLeave a comment

Popular services, programs, and organizations have always been a target of cyber attacks to exploit the vulnerabilities in the service, steal users’ information, steal sensitive corporate information, or compromise the infrastructure. We have gathered the major cyber news over the past week including Cerberus RAT, WordPress plugins vulnerabilities, Cisco Webex phishing emails, Cisco update, and…

Ubuntu 20.04 logo

Ubuntu 20.04 LTS is out

Information SecurityBy SecureBugLeave a comment

Canonical has released the latest version of its Ubuntu Linux, one of the most popular Linux distributions; which offers several exciting new features designed to improve performance and security; including a built-in VPN, support for ExFat and ZFS, and more. Ubuntu 20.04 “Focal Fossa” is now available for download. Ubuntu 20.04 LTS is a long-term…

microsoft-office

Microsoft released out-of-band security update Microsoft Office and Paint 3D

VulnerabilitiesBy SecureBugLeave a comment

A week after the April 2020 Patch Tuesday, Microsoft released an out-of-band security update that fixes remote code execution vulnerabilities in Office, Office 365 ProPlus, and Paint 3D. The applications are affected by multiple Autodesk vulnerabilities that, if exploited, could enable remote code execution. The newly disclosed bugs stem from the Autodesk’s library for the FBX…

Intel Logo

Intel Patches Security Vulnerabilities in Latest Update

Information SecurityBy SecureBugLeave a comment

Intel addressed medium and high-severity vulnerabilities in its April 2020 security update; the vulnerabilities in Intel software and firmware programs could potentially allow attackers to launch denial-of-service (DoS) attacks and enables escalation of privilege. Out of the 6 vulnerabilities Intel addressed in the security update published on April 14, 3 of them were patched, and…

vMware logo

VMware patched critical flaw on vCenter Server

VulnerabilitiesBy SecureBugLeave a comment

VMware has fixed a critical vulnerability in its latest security update. The critical information-disclosure bug exists in the vCenter Server virtual infrastructure management platform.  “With vCenter Server, virtual environments are easier to manage: a single administrator can manage hundreds of workloads, more than doubling typical productivity when managing physical infrastructure,” says VMware. The vulnerability in…

Apple Safari

Apple Safari Updated to Block Third-Party Cookies

Network Security, VulnerabilitiesBy SecureBugLeave a comment

Apple on Tuesday released Safari 13.1 and updated the Intelligent Tracking Prevention (ITP) privacy feature. Intelligent Tracking Prevention allows Safari to block cookies and prevent advertisers from snooping on users’ web habits. According to Apple WebKit engineer John Wilander, Safari now blocks all third-party cookies. (WebKit is the browser engine that powers Safari.) That means that…