Vulnerabilities Archives

100000 Zyxel firewalls have hardcoded backdoor exposed

Taiwan based Zyxel Networks has issued patches for their enterprise grade firewalls after a hard coded credential vulnerability was discovered by security researchers. The vulnerability provides attackers with root level access over SSH or the Web Administration interface allowing firewall rules to be changed to permit easy access to the network behind the firewall. Zyxel […]

100000 Zyxel firewalls have hardcoded backdoor exposed Read More »

SolarWinds hack sends chills through security industry

News, Vulnerabilities / secureteampstg

SolarWinds provides tools used by security and network managers in many of the largest businesses and governments in the world. Since March 2020 hackers inserted their own code into SolarWinds Orion software which was downloaded by some 18,000 customers – providing a backdoor into those customers’ networks. SolarWinds Orion is a network health and performance

SolarWinds hack sends chills through security industry Read More »

Drupal vulnerability affects a million sites

News, Vulnerabilities / secureteampstg

A vulnerability in the Drupal web content management system can be exploited to allow arbitrary code execution, affecting almost a million websites. A security advisory from Drupal describes how this critical vulnerability can be exploited to perform arbitrary execution of PHP code. Security patches are available for Drupal versions 7, 8 and 9. The problem

Drupal vulnerability affects a million sites Read More »

Hackers target Oracle WebLogic vulnerability

News, Vulnerabilities / secureteampstg

Oracle patched a vulnerability in their WebLogic server in October 2020 – eight days later working exploit code was published online and now it is being used by criminals. CVE-2020-14882 allows an attacker to perform a Remote Code Execution attack with minimal effort or skill required. Juniper Networks security researchers reports at least five different

Hackers target Oracle WebLogic vulnerability Read More »

VMWare warns of critical zero-day vulnerability

News, Vulnerabilities / secureteampstg

VMWare has issued a security advisory warning of a command injection vulnerability that could allow someone with access to the VMWare Configurator admin account to issue command with unrestricted privileges on the underlying operating system. The vulnerability (CVE-2020-4006) affects VMWare Workspace One Access, Access Connector, Identity Manage and Identify Manager Connector administrative configurator. A malicious

VMWare warns of critical zero-day vulnerability Read More »

NCSC alerts over MobileIron vulnerability

News, Vulnerabilities / secureteampstg

The UK National Cyber Security Centre has issued an alert warning that multiple actors are attempting to exploit a MobileIron vulnerability to compromise the networks of UK organisations. MobileIron issued a security patch in June 2020 for their Mobile Device Management system to resolve several vulnerabilities in their software. Included was a critical remote code

NCSC alerts over MobileIron vulnerability Read More »

SAD DNS vulnerability revives risk of DNS poisoning

News, Vulnerabilities / secureteampstg

An award winning security paper published this week explains a newly discovered vulnerability called SAD DNS which leaves many websites vulnerable to man-in-the-middle and impersonation attacks. DNS is the system that converts friendly website addresses (www.secureteam.co.uk) into the numeric IP addresses used by TCP/IP. SAD DNS is a flaw discovered in the DNS protocol which

SAD DNS vulnerability revives risk of DNS poisoning Read More »

November Patch Tuesday fixes 12 RCE vulnerabilities

News, Vulnerabilities / secureteampstg

The November security patch bundle from Microsoft fixes 112 security vulnerabilities in their products, including 12 Remote Code Execution vulnerabilities. Noteworthy vulnerabilities fixed this month include: Windows Kernel Local Elevation of Privilege: CVE-2020-17087 Observed under active attack in the wild by Google, CVE-2020-17087 is an elevation of privilege vulnerability that was being used in

November Patch Tuesday fixes 12 RCE vulnerabilities Read More »

Adobe issues Acrobat security patches

News, Vulnerabilities / secureteampstg

Adobe has issued patches for critical vulnerabilities in their Acrobat and Acrobat Reader software widely used for creating and reading PDF documents. 12 fixes are included in the latest security updates, three are rated as Critical as they can be exploited to achieve arbitrary code execution. In other words, this means simply opening a specially

Adobe issues Acrobat security patches Read More »

Windows 0-day vulnerability disclosed

News, Vulnerabilities / secureteampstg

Google’s Project Zero has disclosed the details of a Windows 0-day vulnerability under active attack which affects all versions from Windows 7 through to Windows 10. No patch is yet available from Microsoft but one is expected in the November 2020 patch Tuesday updates. Last week we published details of a Chrome Browser 0-day vulnerability

Windows 0-day vulnerability disclosed Read More »

Vulnerabilities

100000 Zyxel firewalls have hardcoded backdoor exposed

SolarWinds hack sends chills through security industry

Drupal vulnerability affects a million sites

Hackers target Oracle WebLogic vulnerability

VMWare warns of critical zero-day vulnerability

NCSC alerts over MobileIron vulnerability

SAD DNS vulnerability revives risk of DNS poisoning

November Patch Tuesday fixes 12 RCE vulnerabilities

Adobe issues Acrobat security patches

Windows 0-day vulnerability disclosed

Our Address

Talk to us

Office Hours

Company Number

VAT Registration Number

Penetration Testing

Risk & Compliance Services

Quick Links

information. secured.

Head Office Address

Opening Hours

Stay in Touch