Patch/Configuration Management, Vulnerability Management

Security update for Firefox

Share

A new version of the popular web browser Firefox (3.0.9) addresses multiple vulnerabilities, such as POST data being sent to the wrong site when saving web pages, allowing malicious search plug-ins to inject code into arbitrary sites, and cross-site scripting hazards when using third-party stylesheets. Exploitation of these vulnerabilities could enable an attacker to execute arbitrary code, leverage additional attacks, or obtain sensitive information, according to US-CERT. — CAM

Related

Attacks exploiting WhatsUp Gold flaws underway

After executing several PowerShell scripts using WhatsUp Gold's Active Monitor PowerShell Script functionality, threat actors proceeded with exploiting the 'msiexec.exe' Windows utility to install the Atera Agent, SimpleHelp Remote Access, Splashtop Remote, and Radmin remote access tools for persistence and further payload deployment.

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

By clicking the Subscribe button below, you agree to SC Media Terms of Use and Privacy Policy.