vulnerabilities
Factory reset devices after threat hunting even if NO compromise detected says CISA
Previously unseen malware being deployed, and UK's NCSC is "investigating cases of active exploitation affecting UK networks"
CVE-2020-2883: You patched that when you first heard about it, right? Ditto these Mitel Colab bugs...
You *still* didn't pull your PAN-OS interface off the public internet? Don't say you weren't warned...
Public advisory comes after alleged PAN-OS vulnerability advertised on exploit forum.
A "missing authentication for critical function vulnerability"? Well, this is novel!
Google researchers say use after free vulnerability could allow attackers to escalate privileges on Android devices.
CISA warns of "unspecified vulnerability involving an unspecified third-party component."
But details of campaign blasted by one industry veteran for giving away too much detail on web shells on victims' systems