Update your Cisco System Secure Client now to fix this AnyConnect bug

Categories: Exploits and vulnerabilities

Categories: News

Tags: Cisco

Tags: anyconnect

Tags: system secure client

Tags: VPN

Tags: bug

Tags: patch

Tags: update

Tags: vulnerability

Tags: SYSTEM

We take a look at a recent update for Cisco Secure System Client and why you should apply the update as soon as possible.

(Read more…)

The post Update your Cisco System Secure Client now to fix this AnyConnect bug appeared first on Malwarebytes Labs.

Read more

Time to uninstall! Abandoned Android apps pack a vulnerability punch

Categories: News

Tags: CVE

Tags: android

Tags: apps

Tags: abandonware

Tags: vulnerability

Tags: bug

Tags: telepad

Tags: pc keyboard

Tags: lazy mouse

Three abandoned Android apps with remote code execution vulnerabilities need to be shown the door.

(Read more…)

The post Time to uninstall! Abandoned Android apps pack a vulnerability punch appeared first on Malwarebytes Labs.

Read more

Critical OpenSSL fix due Nov 1—what you need to know

Categories: News

Tags: fix

Tags: bug

Tags: vulnerability

Tags: exploit

Tags: attack

Tags: patch

Tags: update

Tags: OpenSSL

Tags: v3

Tags: v1

Tags: 3.0.5.

Version 3.0.7 of OpenSSL will fix the software’s first critical issue for six years.

(Read more…)

The post Critical OpenSSL fix due Nov 1—what you need to know appeared first on Malwarebytes Labs.

Read more

Fake Emergency Search Warrants Draw Scrutiny from Capitol Hill

Credit to Author: BrianKrebs| Date: Thu, 31 Mar 2022 22:54:45 +0000

On Tuesday, KrebsOnSecurity warned that hackers increasingly are using compromised government and police department email accounts to obtain sensitive customer data from mobile providers, ISPs and social media companies. Today, one of the U.S. Senate’s most tech-savvy lawmakers said he was troubled by the report and is now asking technology companies and federal agencies for information about the frequency of such schemes.

Read more

Slack fixes account-stealing bug

Credit to Author: Danny Bradbury| Date: Tue, 17 Mar 2020 12:33:43 +0000

Slack has fixed a bug that allowed attackers to hijack user accounts by tampering with their HTTP sessions.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/i-F9hS91EoQ” height=”1″ width=”1″ alt=””/>

Read more

Dell fixes privilege elevation bug in support software

Credit to Author: Danny Bradbury| Date: Thu, 13 Feb 2020 13:43:39 +0000

Users of Dell SupportAssist should patch their software immediately to fix a software bug that could lead to arbitrary code execution.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/qWZIGKgr3WU” height=”1″ width=”1″ alt=””/>

Read more