Ransomwarecritical

Week in review: 150+ HP multifunction printers open to attack, how to combat ransomware with visibility

Help Net Securityby @helpnetsecurityDec 5, 2021 · 00:00 UTC (Dec 5, 2021)7 min read3 · 1 read

Read at helpnetsecurity.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2021-44077 CVE-2021-39237 CVE-2021-39238

Tags: cve-2021-44077 cve-2021-39237 cve-2021-39238 ransomware

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-39238 +1 related CVE CVE-2021-39237	Certain HP Enterprise LaserJet, HP LaserJet Managed, HP Enterprise PageWide, HP PageWide Managed products may be vulnerable to potential buffer overflow	9.8 group max	12%		Nov 3, 2021
CVE-2021-44077	Unauthenticated RCE in Zoho ManageEngine ServiceDesk Plus and SupportCenter Plus	9.8	94%	KEVPoC	Nov 29, 2021 KEV Dec 1, 2021

From the original article

7 min read at helpnetsecurity.com

Here’s an overview of some of last week’s most interesting news, articles and interviews: Determined APT is exploiting ManageEngine ServiceDesk Plus vulnerability (CVE-2021-44077) An APT group is leveraging a critical vulnerability (CVE-2021-44077) in Zoho ManageEngine ServiceDesk Plus to compromise organizations in a variety of sectors, including defense and tech.

Help Net Security

By @helpnetsecurity · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.