Vulnerability (CVE)
Cisco Talos reports that CVE-2021-41733, a path traversal and file disclosure flaw introduced in Apache HTTP Server 2.4.49, is being actively exploited in the wild, and that the fix in 2.4.50 was insufficient, leading to a second vulnerability,...
Microsoft's October 2021 Patch Tuesday disclosed 77 vulnerabilities across its software, hardware and firmware, with only two rated critical — the fewest critical flaws in a Patch Tuesday in at least a year. Both critical bugs, CVE-2021-40461 in the...
Cisco Talos reported that a malware loader called SQUIRRELWAFFLE is spreading more widely through spam campaigns and is being used to deliver other malware including Qakbot and the penetration-testing tool Cobalt Strike. Talos also reported active...