Remove weekly-update-88
article thumbnail

Weekly Update 88

Troy Hunt

I've been in Sydney this week talking at one of our big banks and as I say in this week's update, getting out there amongst companies dealing with their unique cyber challenges is always interesting: #cyber pic.twitter.com/CIMDhPfKIP — Troy Hunt (@troyhunt) May 23, 2018. References.

article thumbnail

TheMoon bot infected 40,000 devices in January and February

Security Affairs

The Black Lotus Labs team at Lumen Technologies uncovered an updated version of “ TheMoon ” bot targeting end-of-life (EoL) small home/small office (SOHO) routers and IoT devices. The new version of the bot has been spotted infecting thousands of outdated devices in 88 countries. ” reads the report published by Black Lotus Labs.

IoT 129
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

CVE-2022-40684 flaw in Fortinet products is being exploited in the wild

Security Affairs

An authentication bypass using an alternate path or channel [CWE-88] in FortiOS and FortiProxy may allow an unauthenticated attacker to perform operations on the administrative interface via specially crafted HTTP or HTTPS requests,” reads the advisory issued by the company PSIRT. Blog post and POC coming later this week.

article thumbnail

Experts released PoC exploit code for critical bug CVE-2022-40684 in Fortinet products

Security Affairs

The company also provided a workaround for those who can’t immediately deploy security updates. The cybersecurity firm addressed the flaw with the release of FortiOS/FortiProxy versions 7.0.7 An attacker can exploit the vulnerability to log into vulnerable devices. “An

article thumbnail

New Study: 2018 State of Embedded Analytics Report

Why do some embedded analytics projects succeed while others fail? We surveyed 500+ application teams embedding analytics to find out which analytics features actually move the needle. Read the 6th annual State of Embedded Analytics Report to discover new best practices. Brought to you by Logi Analytics.

article thumbnail

Over 17000 Fortinet devices exposed online are very likely vulnerable to CVE-2022-40684

Security Affairs

An authentication bypass using an alternate path or channel [CWE-88] in FortiOS and FortiProxy may allow an unauthenticated attacker to perform operations on the administrative interface via specially crafted HTTP or HTTPS requests,” reads the advisory issued by the company PSIRT. ” reads the advisory published by the company.

article thumbnail

Microsoft Patch Tuesday security updates for June 2019 fix 88 flaws

Security Affairs

Microsoft releases Patch Tuesday security updates for June 2019 that address 88 vulnerabilities in Windows OS and other products. 21 out of 88 flaws are rated as Critical in severity, 66 as Important, and only one of them rated as Moderate in severity. None of these vulnerabilities was exploited in attacks in the wild.