Cisco has warned of active exploitation attempts targeting a pair of two-year-old security flaws in the Cisco AnyConnect Secure Mobility Client for Windows.
Tracked as CVE-2020-3153 (CVSS score: 6.5) and CVE-2020-3433 (CVSS score: 7.8), the vulnerabilities could enable local authenticated attackers to perform DLL hijacking and copy arbitrary files to system directories with elevated privileges.
Related Post
- November 12, 2024
Criminals Exploiting FBI Emergency Data Requests
I’ve been writing about the problem with lawful-access backdoors in encryption for decades now: that as soon as you create
- November 12, 2024
5 Ways Behavioral Analytics is Revolutionizing Incident Response
Behavioral analytics, long associated with threat detection (i.e. UEBA or UBA), is experiencing a renaissance. Once primarily used to identify
- November 12, 2024
Winter Fuel Payment scam targets UK citizens via
Scammers have leapt at the opportunity to exploit vulnerable UK residents by sending bogus messages telling them they need to
- November 12, 2024
New Ymir Ransomware Exploits Memory for Stealthy Attacks;
Cybersecurity researchers have flagged a new ransomware family called Ymir that was deployed in an attack two days after systems