Attackers are scanning for vulnerable VMware servers, patch now!
www.bleepingcomputer.com/news/security/attackers-are-scanning-for-vulnerable-vmware-servers-patch-now/ Threat actors are actively scanning for Internet-exposed VMware vCenter servers unpatched against a critical remote code execution (RCE) vulnerability impacting all vCenter deployments and patched by VMware ten days ago. The ongoing scanning activity was spotted by threat intelligence company Bad Packets yesterday and confirmed earlier today by cybersecurity expert Kevin Beaumont. Lisäksi:
GitHub Updates Policy to Remove Exploit Code When Used in Active Attacks
thehackernews.com/2021/06/github-updates-policy-to-remove-exploit.html Code-hosting platform GitHub Friday officially announced a series of updates to the site’s policies that delve into how the company deals with malware and exploit code uploaded to its service. Lisäksi:
US arrests Latvian woman who worked on Trickbot malware source code
therecord.media/us-arrests-latvian-woman-who-worked-on-trickbot-malware-source-code/ The US Department of Justice has arraigned in court today a Latvian woman who was part of the Trickbot malware crew, where she served as a programmer and wrote code for controlling the malware and deploying ransomware on infected computers.
Chrome, Safari, Firefox and Edge join forces to improve browser extensions
www.cnet.com/news/chrome-safari-firefox-and-edge-join-forces-to-improve-browser-extensions/ The teams behind the Google Chrome, Apple Safari, Mozilla Firefox and Microsoft Edge browsers have banded together to improve extensions, the add-ons you can download to customize the software. That should mean your extensions will work better and come with a better security foundation to protect you from malware.