Remote Code Execution Vulnerabilities Found in TP-Link, NetComm Routers

remote-code-execution-vulnerabilities-found-in-tp-link,-netcomm-routers

Vulnerabilities identified in TP-Link and NetComm router models could be exploited to achieve remote code execution (RCE).

Two security defects were identified in TP-Link WR710N-V1-151022 and Archer-C5-V2-160201 SOHO (small office/home office) routers, allowing attackers to execute code, crash devices, or guess login credentials.

read more

18k Nissan Customers Affected by Data Breach at Third-Party Software Developer

18k-nissan-customers-affected-by-data-breach-at-third-party-software-developer

Nissan North America is informing roughly 18,000 customers that their personal information was exposed in a data breach at a third-party services provider.

The breach occurred after data provided by Nissan to the services provider was inadvertently exposed on the internet, the company notes in a notification letter sent to the impacted customers.

read more

Oracle’s First Security Update for 2023 Includes 327 New Patches

oracle’s-first-security-update-for-2023-includes-327-new-patches

Oracle on Tuesday announced the release of its first Critical Patch Update for 2023, which includes 327 new security patches. More than 70 fixes address critical-severity vulnerabilities.

Over 200 of the patches resolve security defects that can be exploited remotely without authentication. Some of the resolved bugs impact multiple products.

read more

Free Decryptors Released for BianLian, MegaCortex Ransomware

free-decryptors-released-for-bianlian,-megacortex-ransomware

Avast and Bitdefender have released decryptors to help victims of BianLian and MegaCortex ransomware recover their data for free.

Written in Golang, BianLian emerged in August 2022 and has been used in targeted attacks against entertainment, healthcare, media, and manufacturing organizations.

read more