Cyber Risks · Cisco Talos

Threat Source newsletter (Dec. 5, 2019)

Summary: Cisco Talos disclosed and released protection for vulnerabilities in the Forma learning management system, Accusoft ImageGear, and EmbedThis's GoAhead Web Server in the week of Dec. 5, 2019. The newsletter also lists five file hashes with detection names including PUA:2144FlashPlayer-tpd, PUA.Win.Dropper.Razy::tpd, W32.49B9736191-100.SBX.TG, W32.AgentWDCR:Gen.21gn.1201, and Unix.Exploit.Lotoor::other.talos.

Bottom line: Three separate product vulnerabilities drew Talos disclosures in a single week, and the listed samples include a dropper and a Unix exploit, so the patching and detection work does not pause for the holiday shopping season attackers are said to target.

Read the original at Cisco Talos ↗

Topics
Malware
Related