Security advisories

The US government Cybersecurity and Infrastructure Security Agency (CISA) has issued security advisories for Drupal web content creation software and Juniper Networking products: Drupal Releases Security Update to Address Vulnerability in Private Taxonomy Terms | CISA Juniper Networks Releases Security Updates for Multiple Products | CISA Cisco has issued advisories …

Zerobot malware targets a wide range of vulnerable devices – are your devices on the list?

From online CCTV cameras to popular router modems, Zerobot malware is infecting devices that have not been patched to build a network to carry out distributed denial of service attacks (DDoS). New Zerobot malware has 21 exploits for BIG-IP, Zyxel, D-Link devices (bleepingcomputer.com) The Bleeping Computer article has the details …

Do you have a D-Link or Netgear router – if so they may be vulnerable

There is an interesting article over on SANS Internet Storm today – Johannes Ullrich has been tracking some public vulnerabilities in D-Link and Netgear devices that are not mentioned on the vendor pages and for many there are no patches available: What’s the deal with these router vulnerabilities? – SANS …

Chaos

Black Lotus Labs has discovered a new strain a malware, they are calling it Chaos. The new is very telling – the malware is infecting a wide range of devices and servers, Linux, Windows, small office routers etc. One of the servers infected was hosting an instance of GitHub, bringing …