The massive state-sponsored espionage campaign that compromised software maker SolarWinds also targeted Microsoft, as the unfolding investigation into the hacking spree reveals the incident may have been far more wider in scope, sophistication, and impact than previously thought. News of Microsoft’s compromise was first reported by Reuters, which also said the company’s own products were then used to strike other victims by leveraging its cloud offerings, citing people familiar with the matter.… Read more

Homeland Security cybersecurity agency says update Google Chrome as attackers hone in on new security flaws. Department of Homeland Security urges users to update Google Chrome as attackers look to exploit … [+] AFP VIA GETTY IMAGES Within the space of just three short weeks, Google has patched no less than five potentially dangerous vulnerabilities in the Chrome web browser.… Read more

VMware has released patches for two serious ESXi vulnerabilities that were disclosed during the 2020 Tianfu Cup International PWN Contest. The Tianfu Cup is the most important hacking contest held in China, the total bonus of the contest this year was up to 1 million US dollars. The participants successfully tested their exploits against the following software: iOS 14 running on an iPhone 11 ProSamsung Galaxy S20Windows 10 v2004 (April 2020 edition)UbuntuChromeSafariFirefoxAdobe PDF ReaderDocker (Community Edition)VMWare EXSi (hypervisor)QEMU (emulator & virtualizer)TP-Link and ASUS router firmware The team named “360 Enterprise Security and Government and (ESG) Vulnerability Research Institute,” which is part of the Chinese tech giant Qihoo 360, won the competition.… Read more