Cybersecurity News - Page 342

CVE-2020-14750 is related to another WebLogic vulnerability patched as part of the October 2020 Critical Patch Update, which is already being targeted by cybercriminals.

The penalty only relates to the breach from March 25, 2018, when new rules under the General Data Protection Regulation came into effect.

The attacks involved exploitation of known vulnerabilities, directory traversal, SQL injection, web shell uploads, and unique flaws in websites.

Attackers are using the zero-day Windows flaw together with separate bug in Chrome, which Google already fixed last month.

A weekly vulnerability digest.

The vulnerability allows unauthenticated attackers to take over the system by sending a simple HTTP GET request.

US authorities shared details on the ComRAT malware and the Zebrocy backdoor used by Russia-linked Turla and APT 28 hacker groups.

The Maze group had stopped encrypting new victims in September 2020, and is now trying to get the last payments from their victims.

The attacks involved spoofed emails with invitations ostensibly sent from organizers of the Munich Security Conference and the Think 20 Summit in Saudi Arabia.

The group is focused on gathering intelligence on foreign policy and national security issues related to the Korean peninsula.