ATENTION‼ New - CVE-2020-1028
📖 Read
via "National Vulnerability Database".
A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-1126, CVE-2020-1136, CVE-2020-1150.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2020-1024
📖 Read
via "National Vulnerability Database".
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1023, CVE-2020-1102.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2020-1023
📖 Read
via "National Vulnerability Database".
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1024, CVE-2020-1102.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2020-1021
📖 Read
via "National Vulnerability Database".
An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files, aka 'Windows Error Reporting Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1082, CVE-2020-1088.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2020-1010
📖 Read
via "National Vulnerability Database".
An elevation of privilege vulnerability exists in Windows Block Level Backup Engine Service (wbengine) that allows file deletion in arbitrary locations.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Microsoft Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1068, CVE-2020-1079.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2020-0963
📖 Read
via "National Vulnerability Database".
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-1141, CVE-2020-1145, CVE-2020-1179.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2020-0909
📖 Read
via "National Vulnerability Database".
A denial of service vulnerability exists when Hyper-V on a Windows Server fails to properly handle specially crafted network packets.To exploit the vulnerability, an attacker would send specially crafted network packets to the Hyper-V Server.The security update addresses the vulnerability by resolving the conditions where Hyper-V would fail to properly handle these network packets., aka 'Windows Hyper-V Denial of Service Vulnerability'.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2020-0901
📖 Read
via "National Vulnerability Database".
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2019-20804
📖 Read
via "National Vulnerability Database".
Gila CMS before 1.11.6 allows CSRF with resultant XSS via the admin/themes URI, leading to compromise of the admin account.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2019-20803
📖 Read
via "National Vulnerability Database".
Gila CMS before 1.11.6 has reflected XSS via the admin/content/postcategory id parameter, which is mishandled for g_preview_theme.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2018-21234
📖 Read
via "National Vulnerability Database".
Jodd before 5.0.4 performs Deserialization of Untrusted JSON Data when setClassMetadataName is set.📖 Read
via "National Vulnerability Database".
🕴 10 iOS Security Tips to Lock Down Your iPhone 🕴
📖 Read
via "Dark Reading: ".
Mobile security experts share their go-to advice for protecting iPhones from hackers, thieves, and fraudsters.📖 Read
via "Dark Reading: ".
Dark Reading
10 iOS Security Tips to Lock Down Your iPhone
Mobile security experts share their go-to advice for protecting iPhones from hackers, thieves, and fraudsters.
⚠ Apple and Google launch COVID-19 contact tracing API ⚠
📖 Read
via "Naked Security".
The first phase of Apple and Google's contact tracing framework allows public health authorities across the world to connect their apps with data that could help them identify people at risk from coronavirus.📖 Read
via "Naked Security".
Naked Security
Apple and Google launch COVID-19 contact tracing API
The first phase of Apple and Google’s contact tracing framework to help identify people at risk from coronavirus.
❌ Chafer APT Hits Middle East Govs With Latest Cyber-Espionage Attacks ❌
📖 Read
via "Threatpost".
Government and air transportation companies in Kuwait and Saudi Arabia were targeted in a recent attack tracked back to the Chafer APT.📖 Read
via "Threatpost".
Threat Post
Chafer APT Hits Middle East Govs With Latest Cyber-Espionage Attacks
Government and air transportation companies in Kuwait and Saudi Arabia were targeted in a recent attack tracked back to the Chafer APT.
🛠 nfstream 5.1.3 🛠
📖 Go!
via "Security Tool Files ≈ Packet Storm".
nfstream is a Python package providing fast, flexible, and expressive data structures designed to make working with online or offline network data both easy and intuitive. It aims to be the fundamental high-level building block for doing practical, real world network data analysis in Python. Additionally, it has the broader goal of becoming a common network data processing framework for researchers providing data reproducibility across experiments.📖 Go!
via "Security Tool Files ≈ Packet Storm".
Packetstormsecurity
nfstream 5.1.3 ≈ Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers
❌ NSO Group Impersonates Facebook Security Team to Spread Spyware — Report ❌
📖 Read
via "Threatpost".
An investigation traces an NSO Group-controlled IP address to a fake Facebook security portal.📖 Read
via "Threatpost".
Threat Post
NSO Group Impersonates Facebook Security Team to Spread Spyware — Report
An investigation traces an NSO Group-controlled IP address to a fake Facebook security portal.
🔐 8 states targeted in CARES Act scams from cybercrime group 🔐
📖 Read
via "Security on TechRepublic".
Scattered Canary has siphoned over $4 million in unemployment benefits and federal funding through a variety of scams, according to the Secret Service and the cybersecurity company Agari.📖 Read
via "Security on TechRepublic".
TechRepublic
8 states targeted in CARES Act scams from cybercrime group
Scattered Canary has siphoned over $4 million in unemployment benefits and federal funding through a variety of scams, according to the Secret Service and the cybersecurity company Agari.
❌ Home Chef Serves Up Data Breach for 8 Million Records ❌
📖 Read
via "Threatpost".
The meal-kit company's customer records were leaked as part of the Shiny Hunters breach.📖 Read
via "Threatpost".
Threat Post
Home Chef Serves Up Data Breach for 8 Million Records
The meal-kit company's customer records were leaked as part of the Shiny Hunters breach.
❌ ‘Coronavirus Report’ Emails Spread NetSupport RAT, Microsoft Warns ❌
📖 Read
via "Threatpost".
Attackers used malicious Excel 4.0 documents to spread the weaponized NetSupport RAT in a spear-phishing campaign.📖 Read
via "Threatpost".
Threat Post
‘Coronavirus Report’ Emails Spread NetSupport RAT, Microsoft Warns
Attackers used malicious Excel 4.0 documents to spread the weaponized NetSupport RAT in a spear-phishing campaign.
⚠ Signal secure messaging can now identify you without a phone number ⚠
📖 Read
via "Naked Security".
Signal decouples its secure messaging service from your phone number - a bit.📖 Read
via "Naked Security".
Sophos News
Naked Security – Sophos News
⚠ The ransomware that attacks you from inside a virtual machine ⚠
📖 Read
via "Naked Security".
In a recent attack, Ragnar Locker ransomware was seen encrypting victim's files while shielded from security software inside a virtual machine.📖 Read
via "Naked Security".
Naked Security
The ransomware that attacks you from inside a virtual machine
In a recent attack, Ragnar Locker ransomware was seen encrypting victim’s files while shielded from security software inside a virtual machine.