[HackerNews] Eltima SDK Contain Multiple Vulnerabilities Affecting Several Cloud Service Provides

Cybersecurity researchers have disclosed multiple vulnerabilities in a third-party driver software developed by Eltima that have been “unwittingly inherited” by cloud desktop solutions like Amazon Workspaces, Accops, and NoMachine and could provide attackers a path to perform an array of malicious activities.
“These vulnerabilities allow attackers to escalate privileges enabling them to disable

Source: Read More (The Hacker News)

You might be interested in …

[ZDNet] Web creator Tim Berners-Lee joins ProtonMail’s advisory board

All posts, ZDNet

The Berners-Lee addition comes after the company received flak for its handling of one of its users’ IP addresses. Source: Read More (Latest topics for ZDNet in Security)

Read More

[SecurityWeek] Interpol Says 585 People Arrested in APAC Operation Against Cyber-Enabled Crime

All posts, Security Week

Interpol revealed last week that specialized law enforcement officers in the Asia-Pacific (APAC) region intercepted more than $83 million in fraudulent money transfers as part of a six-month coordinated effort aimed at cyber-enabled financial crime. read more Source: Read More (SecurityWeek RSS Feed)

Read More

[SANS ISC] Hikvision Security Cameras Potentially Exposed to Remote Code Execution, (Sat, Nov 20th)

All posts, Sans-ISC

These probes appear to be related to a remote code execution (RCE) vulnerability (CVE-2021-36260) impacting Hikvision’s popular Internet of things (IoT) security camera. If exploited by unauthenticated malicious actors, it could lead to full control over targeted devices and possibly internal networks. Shodan statistics have identified over 3.2 million camera on the internet. Hikvision released […]

Read More