Threat Source newsletter for Sept. 17, 2020
Summary: Cisco Talos disclosed a Google Chrome PDFium memory corruption bug that allows out-of-bounds memory access and potential remote code execution when a victim visits a malicious webpage or opens a malicious PDF, and also found several vulnerabilities in the Nitro Pro PDF Reader that could lead to code execution. CISA warned that state-sponsored actors are targeting known vulnerabilities in Pulse and Citrix VPN services for directory-traversal attacks, and urged updates to F5 BIG-IP, Pulse Secure VPN, Citrix VPN and Microsoft Exchange servers.
What you should know: State-sponsored actors are exploiting VPN flaws in Pulse and Citrix to traverse directories and get inside networks, so unpatched F5 BIG-IP, Pulse Secure, Citrix VPN and Exchange systems are the exposed edge.
Read the original at Cisco Talos ↗
- Topics
- Detection & Response
- Related
- YARA-X 1.23.0 Release, (Sun, Nov 15th) Cyber Risks · Nov 15, 2026Inside Falcon AI Gateway: One Control Point for AI Traffic Cyber Risks · Nov 13, 2026Macfinger Click Fix campaign sends Down TheDRAIN infostealer for macOS, (Fri, Nov 13th) Cyber Risks · Nov 13, 2026