In the security news this week: Cursor opens your repo, the repo opens you, If you want the good model I'm going to need to see your ID, Flock's a Flocking mess, Defender was supposed to be the chosen one, Side stepping Secure boot - twice, SonicWall: a LAMP stack in a fancy case, Macs don't get viruses, part infinity, Flipper One, but why not Nix?...
The campaign, primarily impacting devices in Ukraine and Russia, leveraged CVE-2021-33044 and CVE-2021-33045, two authentication-bypass flaws rated 9.8 CVSS by the NVD.
Researchers from the University of Birmingham and Fuzzware discovered that nine out of 26 tested devices, including several Quectel cellular modules and specific OPPO and ASUS phone models, were susceptible to use of the RUN AT command.
VulnCheck CTO Jacob Baines claims that Zbtlink routers are intentionally designed to communicate with command and control servers, a feature he calls a "phone-home trojan horse."
Cyber Insider disclosed that a popular Wansview indoor security camera model, the WVC Q5, was found to be shipping with a web server vulnerable to a flaw first identified over 20 years ago.
In the news this week: InfraTrust and knowing what to patch, Adversary in the middle triggered command injection, Exploitarium again, FreeRDP comes with free vulnerabilities, AI breaking out of sandboxes on its own, Wordpress RCE, DMA dangers, Nightmware eclypse is at it again, Fortisandbox, Turning AI to the dark side, more prompt injection, Secur...
Fast Five
Selected by the SC Media Editorial team every Tuesday.
Sign up now for the top five issues cybersecurity pros need to know this week.
