article thumbnail

Fortinet addresses 4 vulnerabilities in FortiWeb web application firewalls

Security Affairs

Fortinet has addressed four vulnerabilities in FortiWeb web application firewalls that were reported by Positive Technologies expert Andrey Medov. . The first vulnerability, tracked as CVE-2020-29015 , is a blind SQL injection that resides in the FortiWeb user interface. ” Andrey Medov at Positive Technologies explains.

Firewall 108
article thumbnail

New iLOBleed Rootkit, the first time ever that malware targets iLO firmware

Security Affairs

A previously unknown rootkit, dubbed iLOBleed, was used in attacks aimed at HP Enterprise servers that wiped data off the infected systems. The Integrated Lights-Out is a proprietary embedded server management technology from Hewlett-Packard Enterprise which provides out-of-band management facilities. ” continues the report.

Firmware 129
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Yomi Hunter Catches the CurveBall

Security Affairs

Yomi implements detection for CurveBall exploits and also supports CVE-2020-0601 exploit detection even for signed Powershell modules. . Such uncommon vulnerability reporter alerted the whole Industry, CVE-2020-0601 quickly conquered most of the headlines. . What the NSA states is real: CVE-2020-0601 exposes companies to high risks.

article thumbnail

North Korean Lazarus APT group targets blockchain tech companies

Malwarebytes

A new advisory issued by the Federal Bureau of Investigation (FBI), the Cybersecurity and Infrastructure Security Agency (CISA), and the US Treasury Department (Treasury), highlights the cyberthreats associated with cryptocurrency thefts and tactics used by a North Korean state-sponsored advanced persistent threat (APT) group since at least 2020.

article thumbnail

Yandex sysadmin caught selling access to email accounts

Malwarebytes

Yandex, a European multinational technology firm best known for being the most-used search engine in Russia, has revealed it had a security breach, leading to the compromise of almost 5,000 Yandex email accounts. The company says it spotted the breach after a routine check by its security team.

article thumbnail

Adconion Execs Plead Guilty in Federal Anti-Spam Case

Krebs on Security

In 2020, Inspiring Networks and its director Maikel Uerlings were named in a dogged , multi-part investigation by South African news outlet MyBroadband.co.za . “Exhibit A” in a recent government court filing shows that in 2013 Adconion leased more than 65,000 IP addresses from Inspiring Networks , a Dutch network services company.

article thumbnail

Top Cybersecurity Accounts to Follow on Twitter

eSecurity Planet

Brian Krebs is an independent investigative reporter known for his coverage of technology, malware , data breaches , and cybercrime developments. — Dave Kennedy (@HackingDave) July 15, 2020. link] pic.twitter.com/cVIyB44o6q — Eugene Kaspersky (@e_kaspersky) June 22, 2020. Brian Krebs | @briankrebs. Ingenious!