04 April 2022
The maintainers of Spring Framework have released an emergency patch to address a newly disclosed remote code execution flaw that, if successfully exploited, could allow an unauthenticated attacker to take control of a targeted system.
31 March 2022
Σύμφωνα με ερευνητές ασφαλείας μία νέα καμπάνια διανομής του κακόβουλου λογισμικού Mars Stealer χρησιμοποιεί τις διαφημίσεις στο Google Ads και διαδίδεται μέσω κλωνοποιημένων ιστοτόπων που διαφημίζουν γνωστά λογισμικά.
22 March 2022
Five new security weaknesses have been disclosed in Dell BIOS that, if successfully exploited, could lead to code execution on vulnerable systems.
17 March 2022
Ερευνητές ασφαλείας διαπίστωσαν μία αύξηση στις κακόβουλες εφαρμογές Android που διατίθενται στο Google Play Store για κινητά τηλέφωνα. Στις περισσότερες περιπτώσεις, οι χρήστες εν αγνοία τους μπορεί να κατεβάσουν το κακόβουλο λογισμικό μέσα από διάφορες εφαρμογές.
14 March 2022
Taiwanese hardware vendor QNAP warns most of its Network Attached Storage (NAS) devices are impacted by a high severity Linux vulnerability dubbed 'Dirty Pipe' that allows attackers with local access to gain root privileges.
10 March 2022
Με την επανεμφάνιση του κακόβουλου λογισμικού Emotet τον περασμένο Νοέμβριο, ο αριθμός των μολυσμένων συσκευών αυξάνεται αργά και σταθερά. Υπολογίζεται ότι μέχρι στιγμής έχουν μολυνθεί περισσότερες από 130 χιλιάδες συσκευές σε 179 χώρες.
09 March 2022
HP has disclosed 16 high-impact UEFI firmware vulnerabilities that could allow threat actors to infect devices with malware that gain high privileges and remain undetectable by installed security software.
02 March 2022
Τις τελευταίες μέρες παρατηρείται αυξημένη δραστηριότητα όσον αφορά τις κυβερνοεπιθέσεις εναντίον οργανισμών του δημόσιου και ιδιωτικού τομέα λόγο του τεταμένου κλίματος που επικρατεί στην ευρύτερη περιοχή.
01 March 2022
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) last week published an industrial control system (ICS) advisory related to multiple vulnerabilities impacting Schneider Electric's Easergy medium voltage protection relays.
25 February 2022
A notification from the U.S. Cybersecurity Infrastructure and Security Agency (CISA) warns that threat actors are exploiting vulnerabilities in Zabbix open-source tool for monitoring networks, servers, virtual machines, and cloud services.
17 February 2022
VMware on Tuesday patched several high-severity vulnerabilities impacting ESXi, Workstation, Fusion, Cloud Foundation, and NSX Data Center for vSphere that could be exploited to execute arbitrary code and cause a denial-of-service (DoS) condition.
16 February 2022
Researchers have revealed details of a now-patched high-severity security vulnerability in Apache Cassandra that, if left unaddressed, could be abused to gain remote code execution (RCE) on affected installations. Apache Cassandra is an open-source, distributed, NoSQL database management system for managing very large amounts of structured data across commodity servers.
14 February 2022
Adobe on Sunday rolled out patches to contain a critical security vulnerability impacting its Commerce and Magento Open Source products that it said is being actively exploited in the wild.
08 February 2022
Τα Κυπριακά Ταχυδρομεία πληροφορούν το κοινό ότι παρατηρήθηκε νέα απόπειρα εξαπάτησης με την αποστολή μηνυμάτων σε κινητά τηλέφωνα, χρησιμοποιώντας το όνομα των Κυπριακών Ταχυδρομείων.
04 February 2022
Cisco has patched multiple critical security vulnerabilities impacting its RV Series routers that could be weaponized to elevate privileges and execute arbitrary code on affected systems, while also warning of the existence of proof-of-concept (PoC) exploit code targeting some of these bugs.
03 February 2022
A cross-site scripting (XSS) Zimbra security vulnerability is actively exploited in attacks targeting European media and government organizations. Zimbra is an email and collaboration platform that also includes instant messaging, contacts, video conferencing, file sharing, and cloud storage capabilities.
03 February 2022
Researchers have discovered critical vulnerabilities in the UEFI firmware from InsydeH2O used by multiple computer vendors such as Fujitsu, Intel, AMD, Lenovo, Dell, ASUS, HP, Siemens, Microsoft, and Acer.
28 January 2022
Taiwanese company QNAP has warned customers to secure network-attached storage (NAS) appliances and routers against a new ransomware variant called DeadBolt.
07 January 2022
The vulnerability was identified and fixed in 2013 but in 2014 Microsoft revised the fix allowing Malsmoke hackers in 2022 to spread ZLoader malware.
10 December 2021
Researchers discovered a critical vulnerability in Apache Log4j library, which scores perfect 10 out of 10 in CVSS.
Working towards a trusted and cyber secure Europe
Protect your cyber hygiene
Cyber Europe 2022 [exercise]
Cyber threats require heightened defences
News