GoldenSpy Malware Embedded in Official Golden Tax Software
During major fiscal reforms in 1994, China began a value-add tax (VAT) system requiring businesses to pay tax on the
Read MoreAuthor: Jason Davies
SoreFang Malware
Malware, dubbed ‘SoreFang’ by the NCSC, is a first stage downloader that uses HTTP to exfiltrate victim information and download
Read More
Cisco ASA and Firepower Threat Defense Software Web Services Read-Only Path Traversal Vulnerability [CVE-2020-3452]
CVE number – CVE-2020-3452 A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco
Read More
Google Releases Security Updates for Chrome
Google has released Chrome version 84.0.4147.89 for Windows, Mac, and Linux. This new version addresses vulnerabilities that an attacker could exploit to
Read More
Twitter gets hacked – powerful Twitter users are targeted by Bitcoin scammers
A number of high-profile Twitter accounts have been hacked in an apparent Bitcoin scam. Barack Obama, Joe Biden, Jeff Bezos,
Read More
Purple Fox Malware
Purple Fox is a combined fileless rootkit and backdoor trojan, that is also able to act as an exploit kit.
Read More
Huawei to be removed from UK 5G networks by 2027
HUAWEI will be completely removed from the UK’s 5G networks by the end of 2027, the UK government has announced,
Read More
Microsoft Windows Codecs Library Remote Code Execution Vulnerability [CVE-2020-1425]
CVE number – CVE-2020-1425 A remoted code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects
Read More
Palo Alto – Authentication Bypass in SAML Authentication [CVE-2020-2021]
When Security Assertion Markup Language (SAML) authentication is enabled and the ‘Validate Identity Provider Certificate’ option is disabled (unchecked), improper
Read MoreUniversal Plug and Play (UPnP) SUBSCRIBE can be abused to send traffic to arbitrary destinations
The Universal Plug and Play (UPnP) protocol in effect prior to April 17, 2020 can be abused to send traffic
Read More