Eduard Kovacs

The Wayback Machine - https://web.archive.org/web/20210128032004/https://www.securityweek.com/authors/eduard-kovacs

Security Experts:

Eduard Kovacs (@EduardKovacs) is a contributing editor at SecurityWeek. He worked as a high school IT teacher for two years before starting a career in journalism as Softpedia’s security news reporter. Eduard holds a bachelor’s degree in industrial informatics and a master’s degree in computer techniques applied in electrical engineering.

Recent articles by Eduard Kovacs

CISA Issues Advisory for High-Severity Vulnerabilities in Fuji Electric HMI Products

CISA has issued an advisory to warn industrial organizations about some Fuji Electric HMI products being affected by several high-severity remote code execution vulnerabilities.
Hundreds of Industrial Organizations Received Sunburst Malware in SolarWinds Attack

Hundreds of industrial organizations, many in the manufacturing sector, apparently received the Sunburst malware as part of the SolarWinds hack.
Pwn2Own 2021: Hackers Offered $200,000 for Zoom, Microsoft Teams Exploits

ZDI announces Pwn2Own 2021, with a prize pool of $1.5 million, including $600,000 for hacking a Tesla and $200,000 for Zoom and Microsoft Teams exploits.
More Cybersecurity Firms Confirm Being Hit by SolarWinds Hack

Cybersecurity companies Mimecast, Qualys and Fidelis have confirmed being impacted by the SolarWinds attack.
Several DDoS Attack Records Broken in 2020

Several companies reported seeing DDoS attack records being broken in 2020.
Crane Maker Palfinger Says Cyberattack Had 'Massive' Impact on IT Infrastructure

Crane manufacturer Palfinger says it has been targeted in a cyberattack that has caused serious disruptions.
Packaging Giant WestRock Says Ransomware Attack Impacted OT Systems

American packaging giant WestRock has disclosed a ransomware incident that impacted both IT and OT systems.
Industrial Firms Informed About Serious Vulnerabilities in Matrikon OPC Product

Industrial organizations have been informed about the existence of several potentially serious vulnerabilities affecting a Matrikon (Honeywell) OPC UA product.
SonicWall Says Internal Systems Targeted by Hackers Exploiting Zero-Day Flaws

SonicWall says its internal systems have been targeted by sophisticated hackers as part of a coordinated attack that may have involved exploitation of zero-day vulnerabilities in its own products.
Intel's Early Earnings Release Triggered by Hack

Intel released information about its Q4 earnings earlier than planned after learning that hackers possibly gained unauthorized access to sensitive financial information.
Thousands of Unprotected RDP Servers Can Be Abused for DDoS Attacks

Unprotected Windows RDP servers have been abused to amplify DDoS attacks, with observed attacks ranging between 20 and 750 Gbps.
Microsoft Details OPSEC, Anti-Forensic Techniques Used by SolarWinds Hackers

Microsoft has released another report detailing the tactics, techniques and procedures of the SolarWinds hackers.
Amazon Awards $18,000 for Exploit Allowing Kindle E-Reader Takeover

KindleDrip exploit chain could have allowed an attacker to take complete control of a Kindle e-reader simply by knowing the targeted user’s email address.
Snort 3 Becomes Generally Available

Cisco announces the official release and general availability of Snort 3, seven years after the alpha version was unveiled.
Malwarebytes Targeted by SolarWinds Hackers

Malwarebytes said it was targeted by the state-sponsored threat actor that breached SolarWinds.
DNSpooq Flaws Expose Millions of Devices to DNS Cache Poisoning, Other Attacks

DNSpooq is the name given to 7 Dnsmasq vulnerabilities that could expose millions of devices to DNS cache poisoning, remote code execution and DoS attacks.
FireEye Releases New Open Source Tool in Response to SolarWinds Hack

FireEye has released an open source tool that checks Microsoft 365 tenants for the use of techniques associated with the SolarWinds hackers.
SolarWinds Hackers Used 'Raindrop' Malware for Lateral Movement

Symantec researchers have uncovered another piece of malware used in the SolarWinds attack, namely Raindrop, which has been used for lateral movement and payload deployment.
OpenWrt Informs Users of Forum Breach

The OpenWrt Project said someone breached its forum over the weekend and downloaded user information.
Expired Domain Allowed Researcher to Hijack Country's TLD

An expired domain allowed a researcher to hijack the country code top-level domain (TLD) of Congo.
Researchers Earn $50,000 for Hacking Apple Servers

A couple of researchers have earned $50,000 from Apple for finding some serious vulnerabilities on the tech giant’s servers.
Rob Joyce Appointed Director of Cybersecurity at NSA

Rob Joyce, an official who is highly respected in the cybersecurity community, has been named the NSA’s new director of cybersecurity.
Tens of Vulnerabilities in Siemens PLM Products Allow Code Execution

Some of Siemens’ product development solutions are affected by tens of vulnerabilities that can be exploited for arbitrary code execution using malicious files.
Malvuln Project Catalogues Vulnerabilities Found in Malware

A researcher has launched Malvuln, a project that catalogues vulnerabilities in malware and shows how they can be exploited.
Vulnerability Exposes F5 BIG-IP Systems to Remote DoS Attacks

A high-severity vulnerability affecting F5 Networks’ BIG-IP Access Policy Manager (APM) solution can be exploited for remote DoS attacks.

Dec	JAN	Feb
	28
2020	2021	2022

SECURITYWEEK NETWORK:

Security Experts:

Eduard Kovacs

Recent articles by Eduard Kovacs

Get the Daily Briefing

Popular Topics

Security Community

Stay Intouch

About SecurityWeek