Cisco has warned of active exploitation attempts targeting a pair of two-year-old security flaws in the Cisco AnyConnect Secure Mobility Client for Windows.
Tracked as CVE-2020-3153 (CVSS score: 6.5) and CVE-2020-3433 (CVSS score: 7.8), the vulnerabilities could enable local authenticated attackers to perform DLL hijacking and copy arbitrary files to system directories with elevated privileges.
Related Post
- November 22, 2024
APT-K-47 Uses Hajj-Themed Lures to Deliver Advanced Asyncshell
The threat actor known as Mysterious Elephant has been observed using an advanced version of malware called Asynshell. The attack
- November 22, 2024
Russian Hackers Deploy HATVIBE and CHERRYSPY Malware Across
Threat actors with ties to Russia have been linked to a cyber espionage campaign aimed at organizations in Central Asia,
- November 22, 2024
China-Linked TAG-112 Targets Tibetan Media with Cobalt Strike
A China-linked nation-state group called TAG-112 compromised Tibetan media and university websites in a new cyber espionage campaign designed to
- November 22, 2024
The Scale of Geoblocking by Nation
Interesting analysis: We introduce and explore a little-known threat to digital equality and freedomwebsites geoblocking users in response to political