BazarLoader phishing lures: plan a Halloween party, get a bonus and be fired in the same afternoon, (Thu, Oct 22nd)
Phishing messages distributing BazarLoader have come to be commonplace in the past six months, but in the last couple of weeks Ive been seeing more and more e-mails spreading this malware caught in my quarantine. Although contents of these messages differ, their appearance is usually similar [...]
https://isc.sans.edu/diary/rss/26710
XSS to TSS: tech support scam campaign abuses cross-site scripting vulnerability
VU#208577: Chocolatey Boxstarter vulnerable to privilege escalation due to weak ACLs
Chocolatey Boxstarter fails to properly set ACLs, which can allow an unprivileged Windows user to be able to run arbitrary code with SYSTEM privileges.
https://kb.cert.org/vuls/id/208577
Gefährliche Lücken in Cisco-Software für Netzwerkschutz und -Management
Der Netzwerkausrüster Cisco hat wichtige Sicherheitsupdates für verschiedene Netzwerk-Software veröffentlicht. Keine Lücke gilt als kritisch.
https://heise.de/-4936512
Vulnerability Spotlight: A deep dive into WAGO-s cloud connectivity and the vulnerabilities that arise
Security Bulletin: A security vulnerability in Node.js node-fetch module affects IBM Cloud Pak for Multicloud Management Infrastructure Management and Managed Service.