Author: Admin

ZoHo has released patches for an authentication bypass vulnerability that could lead to remote code execution and has been exploited in the wild. Background On December 3, ZoHo issued a security advisory and patches for CVE-2021-44515, an authentication bypass vulnerability in its ManageEngine Desktop Central product that has been exploited in the wild. In addition, a patch was released for CVE-2021-44526, another authentication bypass vulnerability in ServiceDesk Plus, a help desk and asset management application….

Crypto-currency worth at least $150m has been stolen from crypto-currency exchange BitMart. Blockchain security company Peckshield shared news of the theft on Saturday night on social media, claiming that digital currency worth $196m was stolen in the incident.  Peckshield alleged that a hacker pumped crypto-currency worth $96m out of the Binance smart chain and kenneled $100m worth of crypto-currencies from the Ethereum blockchain. It reported that a mix of more than 20 tokens, including Binance, Safemoon, and Shiba Inu, was stolen in…

By Gnanaprakasam Pandian, Chief Product Officer and Co-Founder, Ordr As connected devices, including Internet of Things (IoT), Internet of Medical Things (IoMT) and Operational Technology (OT) continue to explode in growth, they introduce a new attack surface. In fact, an astonishing 46% of all connected devices are vulnerable to medium and high severity attacks. This is just one of the key findings of a new report released by connected device security company Ordr, in its 2nd annual…

YARA won’t replace antivirus software, but it can help you detect problems more efficiently and allows more customization. Learn how to write YARA rules to improve security and incident response . Image: iStock/vadimrysev In our first article about YARA, we defined what kind of tool it was and in which context it could be used: detecting malware on the network or on endpoints, helping incident response and monitoring, classifying files or even detecting sensitive data…