Security news that informs and inspires

All Articles

1072 articles:

OpenSSL Fixes Flaw in Certificate Checks

OpenSSL has patched a bug that could have allowed a certificate that was not issued by a valid CA to slip into the certificate chain.

Openssl

Q&A: Andrew Morris

Removing the background noise from the Internet can give security analysts the context necessary to find the attacks that matter, says GreyNoise founder Andrew Morris.

Network Security

ProxyLogon Bug Still Haunting Thousands of Exchange Servers

There are still nearly 30,000 Exchange servers vulnerable to the ProxyLogon bug, with ransomware attacks and public exploits circulating.

Microsoft

Exploits Target F5 BIG-IP Flaw

Full chain exploits are in use against a critical flaw (CVE-2021-22986) in the F5 BIG-IP system.

F5

Requiring a VDP for Suppliers Won’t Fix Supply Chain Security

Extending the requirement for vulnerability disclosure policies from federal agencies to their suppliers is not a quick fix for supply chain security issues.

Solarwinds, Government

SolarWinds Attackers Accessed Mimecast Source Code

The attackers behind the SolarWinds breach also gained access to and downloaded some Mimecast source code repositories.

Solarwinds, Email

Microsoft Releases One-Click Mitigation for Exchange Flaw

Microsoft has published a new tool that installs a mitigation for the CVE-2021-26855 Exchange ProxyLogon flaw.

Microsoft

Decipher Podcast: Andrew Morris

Andrew Morris, founder of GreyNoise, joins Dennis Fisher to talk about the unique origins of the company and the security case for removing all of the background noise from the Internet to find what really matters.

Podcast

Number of Exchange Servers Vulnerable to ProxyLogon Declines

The number of Exchange servers vulnerable to the ProxyLogon flaws is continuing to drop, but there are still more than 60,000 online.

Microsoft

DearCry Ransomware Hitting Exchange Servers

Attackers are installing the DearCry ransomware on some vulnerable Exchange servers.

Ransomware, Microsoft

Decipher Podcast: Joe Slowik

Joe Slowik, senior security researcher at Domaintools, joins Dennis Fisher to discuss the Exchange vulnerabilities, the exploitation activity timeline, and the question of attribution.

Podcast

ThreatFox Aims to Simplify IOC Sharing

The new ThreatFox platform from Abuse.ch is designed to allow researchers to share IOCs freely and easily without the need to register or subscribe to a feed.

Threat Intelligence

Four Critical Flaws Hit F5 BIG-IP Boxes

F5 has patched four critical flaws in its BIG-IP appliances, all of which can lead to remote code execution.

F5, Networking

Microsoft Fixes IE 0-Day Used in Attacks on Researchers

Microsoft has patched a zero day in Internet Explorer and Edge that was used in attacks against security researchers.

Microsoft

GitHub Fixes Bug That Could Have Routed Authenticated Sessions to Other Users

GitHub has patched a flaw in a backend system that in rare cases could have routed one user's authenticated session to another user's browser.

Software Security