Another Critical RCE Flaw Discovered in SolarWinds Orion Platform

Blog WriterThe Hacker News - Original news source is thehackernews.com

IT infrastructure management provider SolarWinds on Thursday released a new update to its Orion networking monitoring tool with fixes for four security vulnerabilities, counting two weaknesses that could be exploited …

New 5G Flaw Exposes Priority Networks to Location Tracking and Other Attacks

Blog WriterThe Hacker News - Original news source is thehackernews.com

New research into 5G architecture has uncovered a security flaw in its network slicing and virtualized network functions that could be exploited to allow data access and denial of service attacks between …

Black Kingdom Ransomware Hunting Unpatched Microsoft Exchange Servers

Blog WriterThe Hacker News - Original news source is thehackernews.com

More than a week after Microsoft released a one-click mitigation tool to mitigate cyberattacks targeting on-premises Exchange servers, the company disclosed that patches have been applied to 92% of all internet-facing servers affected by …

Critical Cisco Jabber Bug Could Let Attackers Hack Remote Systems

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cisco on Wednesday released software updates to address multiple vulnerabilities affecting its Jabber messaging clients across Windows, macOS, Android, and iOS. Successful exploitation of the flaws could permit an “attacker …

Critical Flaws Affecting GE’s Universal Relay Pose Threat to Electric Utilities

Blog WriterThe Hacker News - Original news source is thehackernews.com

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has warned of critical security shortcomings in GE’s Universal Relay (UR) family of power management devices. “Successful exploitation of these vulnerabilities could …

WARNING: A New Android Zero-Day Vulnerability Is Under Active Attack

Blog WriterThe Hacker News - Original news source is thehackernews.com

Google has disclosed that a now-patched vulnerability affecting Android devices that use Qualcomm chipsets is being weaponized by attackers to launch targeted attacks. Tracked as CVE-2020-11261 (CVSS score 8.4), the …

Popular Netop Remote Learning Software Found Vulnerable to Hacking

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cybersecurity researchers on Sunday disclosed multiple critical vulnerabilities in remote student monitoring software Netop Vision Pro that a malicious attacker could abuse to execute arbitrary code and take over Windows computers. …