Cisco has warned of active exploitation attempts targeting a pair of two-year-old security flaws in the Cisco AnyConnect Secure Mobility Client for Windows.
Tracked as CVE-2020-3153 (CVSS score: 6.5) and CVE-2020-3433 (CVSS score: 7.8), the vulnerabilities could enable local authenticated attackers to perform DLL hijacking and copy arbitrary files to system directories with elevated privileges.
Related Post
- December 24, 2024
The AI Fix #30: ChatGPT reveals the devastating
In episode 30 of The AI Fix, AIs are caught lying to avoid being turned off, Apple’s AI flubs a
- December 24, 2024
Researchers Uncover PyPI Packages Stealing Keystrokes and Hijacking
Cybersecurity researchers have flagged two malicious packages that were uploaded to the Python Package Index (PyPI) repository and came fitted
- December 24, 2024
Spyware Maker NSO Group Found Liable for Hacking
A judge has found that NSO Group, maker of the Pegasus spyware, has violated the US Computer Fraud and Abuse
- December 24, 2024
North Korean Hackers Pull Off $308M Bitcoin Heist
Japanese and U.S. authorities have formerly attributed the theft of cryptocurrency worth $308 million from cryptocurrency company DMM Bitcoin in