Remove weekly-update-256
article thumbnail

Weekly Update 256

Troy Hunt

Well this week went on for a bit, an hour and 6 mins in all. The 2 Apple things were particularly interesting due to the way in which both catching CSAM baddies and catching baddies who steal your things involves using technology that can be abused. Is it good tech because it can do good things? Bad tech because it can do bad things?

Security 127
article thumbnail

Vulnerability Recap 4/29/24 – Cisco, Microsoft, Palo Alto & More

eSecurity Planet

It seems that many continue to struggle to keep up with patching and updating backlogs, which suggests that more organizations need outside help from patch management as a service or managed service providers (MSPs) to catch up. The fix: For those with Chrome updates automatically enabled, make sure that all users restart their browsers.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

WINTRIAGE: THE TRIAGE TOOL FOR WINDOWS DFIRERS

Security Affairs

Sometimes it is interesting (or even mandatory) to take out only one compressed file and obtain its hash SHA-256. Only if you have an account in this service ( [link] ), Wintriage can send the SHA-256 of the compressed file to eGarante and you will receive an email with a signed PDF containing the received SHA-256. Version 4.2.0

article thumbnail

New Cring ransomware deployed targeting unpatched Fortinet VPN devices

Security Affairs

This ransomware encrypts data from victims with AES-256 + RSA-8192 and then demands a ~ 2 BTC ransom to get the files back. “The lack of timely antivirus database updates for the security solution used on attacked systems also played a key role, preventing the solution from detecting and blocking the threat. Pierluigi Paganini.

article thumbnail

Security Affairs newsletter Round 256

Security Affairs

A new round of the weekly newsletter arrived! Drupal addresses two XSS flaws by updating the CKEditor. The post Security Affairs newsletter Round 256 appeared first on Security Affairs. The best news of the week with Security Affairs. BlackWater, a malware that uses Cloudflare Workers for C2 Communication. Pierluigi Paganini.

article thumbnail

DoS flaw in several MikroTik Routers exploited in attacks

Security Affairs

The reboot was caused by watchdog timer since the device was overloaded and stopped responding” The Latvian vendor already released security updates for the RouterOS that addressed the flaw (CVE-2018-19299), but according to the experts, some of the affected devices continue to be vulnerable. RouterOS v6.45beta23 and RouterOS v6.

Cloud 101
article thumbnail

Australian social news platform leaks 80,000 user records

Security Affairs

Snewpit is a map-based peer-to-peer app that allows users to create, find, and share real-time news updates, as well as receive notifications for news posted within 5 kilometers of their location. To see if your email address has been exposed in this or other security breaches, use our personal data leak checker. What data is in the bucket?

Passwords 114