CISA Incident Response to SUPERNOVA Malware

Original release date: April 22, 2021CISA has released AR21-112A: CISA Identifies SUPERNOVA Malware During Incident Response to provide analysis of a compromise in an organization’s enterprise network by an advance…

Comments Off on CISA Incident Response to SUPERNOVA Malware

SonicWall Releases Patches for Email Security Products

Original release date: April 21, 2021CISA is aware of three vulnerabilities affecting SonicWall Email Security products: CVE-2021-20021, CVE-2021-20022, and CVE-2021-20023. A remote attacker could exploit these vulnerabilities to take control…

Comments Off on SonicWall Releases Patches for Email Security Products

CISA Issues Emergency Directive on Pulse Connect Secure

Original release date: April 20, 2021CISA has issued Emergency Directive (ED) 21-03, as well as Alert AA21-110A, to address the exploitation of vulnerabilities affecting Pulse Connect Secure (PCS) software. An…

Comments Off on CISA Issues Emergency Directive on Pulse Connect Secure

Oracle Releases April 2021 Critical Patch Update

Original release date: April 20, 2021Oracle has released its Critical Patch Update for April 2021 to address 384 vulnerabilities across multiple products. A remote attacker could exploit some of these…

Comments Off on Oracle Releases April 2021 Critical Patch Update

CISA and CNMF Analysis of SolarWinds-related Malware

Original release date: April 15, 2021CISA and the Department of Defense (DoD) Cyber National Mission Force (CNMF) have analyzed additional SolarWinds-related malware variants—referred to as SUNSHUTTLE and SOLARFLARE. One of…

Comments Off on CISA and CNMF Analysis of SolarWinds-related Malware

Threat Actors Targeting Cybersecurity Researchers

Original release date: April 14, 2021Google and Microsoft recently published reports on advanced persistent threat (APT) actors targeting cybersecurity researchers. The APT actors are using fake social media profiles and…

Comments Off on Threat Actors Targeting Cybersecurity Researchers

SAP Releases April 2021 Security Updates

Original release date: April 13, 2021SAP has released security updates to address vulnerabilities affecting multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected…

Comments Off on SAP Releases April 2021 Security Updates