[HackerNews] Critical RCE Vulnerability Found in VMware vCenter Server — Patch Now!

VMware has rolled out patches to address a critical security vulnerability in vCenter Server that could be leveraged by an adversary to execute arbitrary code on the server.
Tracked as CVE-2021-21985 (CVSS score 9.8), the issue stems from a lack of input validation in the Virtual SAN (vSAN) Health Check plug-in, which is enabled by default in the vCenter Server. “A malicious actor with network

Source: Read More (The Hacker News)

You might be interested in …

[ThreatPost] Encrypted & Fileless Malware Sees Big Growth

All posts, ThreatPost

An analysis of second-quarter malware trends shows that threats are becoming stealthier. Source: Read More (Threatpost)

Read More

[HackerNews] New SaaS Security Report Dives into the Concerns and Plans of CISOs in 2021

All posts, HackerNews

For years, security professionals have recognized the need to enhance SaaS security. However, the exponential adoption of Software-as-a-Service (SaaS) applications over 2020 turned slow-burning embers into a raging fire.  Organizations manage anywhere from thirty-five to more than a hundred applications. From collaboration tools like Slack and Microsoft Teams to mission-critical applications Source: Read More (The […]

Read More

[TheRecord] Ransomware attack disrupts Toronto’s public transportation system

A ransomware attack has disrupted the activities of the Toronto public transportation agency and has taken down several systems used by drivers and commuters alike. The Toronto Transit Commission said the attack was detected last week on Thursday night and was discovered by a TTC IT staffer who detected “unusual network activity.” “Impact was minimal […]

Read More

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.