ATENTION‼ New - CVE-2017-9109
📖 Read
via "National Vulnerability Database".
An issue was discovered in adns before 1.5.2. It fails to ignore apparent answers before the first RR that was found the first time. when this is fixed, the second answer scan finds the same RRs at the first. Otherwise, adns can be confused by interleaving answers for the CNAME target, with the CNAME itself. In that case the answer data structure (on the heap) can be overrun. With this fixed, it prefers to look only at the answer RRs which come after the CNAME, which is at least arguably correct.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2017-9108
📖 Read
via "National Vulnerability Database".
An issue was discovered in adns before 1.5.2. adnshost mishandles a missing final newline on a stdin read. It is wrong to increment used as well as setting r, since used is incremented according to r, later. Rather one should be doing what read() would have done. Without this fix, adnshost may read and process one byte beyond the buffer, perhaps crashing or perhaps somehow leaking the value of that byte.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2017-9107
📖 Read
via "National Vulnerability Database".
An issue was discovered in adns before 1.5.2. It overruns reading a buffer if a domain ends with backslash. If the query domain ended with \, and adns_qf_quoteok_query was specified, qdparselabel would read additional bytes from the buffer and try to treat them as the escape sequence. It would depart the input buffer and start processing many bytes of arbitrary heap data as if it were the query domain. Eventually it would run out of input or find some other kind of error, and declare the query domain invalid. But before then it might outrun available memory and crash. In principle this could be a denial of service attack.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2017-9106
📖 Read
via "National Vulnerability Database".
An issue was discovered in adns before 1.5.2. adns_rr_info mishandles a bogus *datap. The general pattern for formatting integers is to sprintf into a fixed-size buffer. This is correct if the input is in the right range; if it isn't, the buffer may be overrun (depending on the sizes of the types on the current platform). Of course the inputs ought to be right. And there are pointers in there too, so perhaps one could say that the caller ought to check these things. It may be better to require the caller to make the pointer structure right, but to have the code here be defensive about (and tolerate with an error but without crashing) out-of-range integer values. So: it should defend each of these integer conversion sites with a check for the actual permitted range, and return adns_s_invaliddata if not. The lack of this check causes the SOA sign extension bug to be a serious security problem: the sign extended SOA value is out of range, and overruns the buffer when reconverted. This is related to sign extending SOA 32-bit integer fields, and use of a signed data type.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2017-9105
📖 Read
via "National Vulnerability Database".
An issue was discovered in adns before 1.5.2. It corrupts a pointer when a nameserver speaks first because of a wrong number of pointer dereferences. This bug may well be exploitable as a remote code execution.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2017-9104
📖 Read
via "National Vulnerability Database".
An issue was discovered in adns before 1.5.2. It hangs, eating CPU, if a compression pointer loop is encountered.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2017-9103
📖 Read
via "National Vulnerability Database".
An issue was discovered in adns before 1.5.2. pap_mailbox822 does not properly check st from adns__findlabel_next. Without this, an uninitialised stack value can be used as the first label length. Depending on the circumstances, an attacker might be able to trick adns into crashing the calling program, leaking aspects of the contents of some of its memory, causing it to allocate lots of memory, or perhaps overrunning a buffer. This is only possible with applications which make non-raw queries for SOA or RP records.📖 Read
via "National Vulnerability Database".
❌ Cisco Webex, Router Bugs Allow Code Execution ❌
📖 Read
via "Threatpost".
High-severity flaws plague Cisco's Webex collaboration platform, as well as its RV routers for small businesses.📖 Read
via "Threatpost".
Threat Post
Cisco Webex, Router Bugs Allow Code Execution
High-severity flaws plague Cisco's Webex collaboration platform, as well as its RV routers for small businesses.
🕴 O365 Phishing Campaign Leveraged Legit Domains 🕴
📖 Read
via "Dark Reading: ".
A sophisticated scheme used legitimate redirection tools to convince victims to give up Office 365 credentials.📖 Read
via "Dark Reading: ".
Dark Reading
O365 Phishing Campaign Leveraged Legit Domains
A sophisticated scheme used legitimate redirection tools to convince victims to give up Office 365 credentials.
🔐 Credential phishing attack impersonates Bank of America 🔐
📖 Read
via "Security on TechRepublic".
The phishing email leads recipients to a phony BOA landing page in an attempt to steal their banking credentials, according to Armorblox.📖 Read
via "Security on TechRepublic".
TechRepublic
Credential phishing attack impersonates Bank of America
The phishing email leads recipients to a phony BOA landing page in an attempt to steal their banking credentials, according to Armorblox.
🕴 60% of Businesses Plan to Spend More on Cyber Insurance 🕴
📖 Read
via "Dark Reading: ".
New data reveals 65% of SMEs plan to invest more in cyber insurance, compared with 58% of large enterprises.📖 Read
via "Dark Reading: ".
Dark Reading
60% of Businesses Plan to Spend More on Cyber Insurance
New data reveals 65% of SMEs plan to invest more in cyber insurance, compared with 58% of large enterprises.
🕴 The Bigger the News, the Bigger the Cyber Threats 🕴
📖 Read
via "Dark Reading: ".
Criminals use disasters, wars, and now pandemics as air cover to focus collective anxiety and fear into highly targeted, malicious messaging.📖 Read
via "Dark Reading: ".
Dark Reading
The Bigger the News, the Bigger the Cyber Threats
Criminals use disasters, wars, and now pandemics as air cover to focus collective anxiety and fear into highly targeted, malicious messaging.
🛠 Haveged 1.9.12 🛠
📖 Go!
via "Security Tool Files ≈ Packet Storm".
haveged is a daemon that feeds the /dev/random pool on Linux using an adaptation of the HArdware Volatile Entropy Gathering and Expansion algorithm invented at IRISA. The algorithm is self-tuning on machines with cpuid support, and has been tested in both 32-bit and 64-bit environments. The tarball uses the GNU build mechanism, and includes self test targets and a spec file for those who want to build an RPM.📖 Go!
via "Security Tool Files ≈ Packet Storm".
Packetstormsecurity
Haveged 1.9.12 ≈ Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers
🛠 Lynis Auditing Tool 3.0.0 🛠
📖 Go!
via "Security Tool Files ≈ Packet Storm".
Lynis is an auditing tool for Unix (specialists). It scans the system and available software to detect security issues. Beside security related information it will also scan for general system information, installed packages and configuration mistakes. This software aims in assisting automated auditing, software patch management, vulnerability and malware scanning of Unix based systems.📖 Go!
via "Security Tool Files ≈ Packet Storm".
Packetstormsecurity
Lynis Auditing Tool 3.0.0 ≈ Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers
❌ IcedID Banker is Back, Adding Steganography, COVID-19 Theme ❌
📖 Read
via "Threatpost".
The malware has boosted its anti-detection capabilities in a new email campaign.📖 Read
via "Threatpost".
Threat Post
IcedID Banker is Back, Adding Steganography, COVID-19 Theme
The malware has boosted its anti-detection capabilities in a new email campaign.
🔐 Cybersecurity risks in a possible US manufacturing resurgence 🔐
📖 Read
via "Security on TechRepublic".
When factories, notably in China, shuttered during the COVID-19 pandemic, products the US relied on were impacted. Here's how experts see a return to "Made in America" and the incumbent risks.📖 Read
via "Security on TechRepublic".
TechRepublic
Cybersecurity risks in a possible US manufacturing resurgence
When factories, notably in China, shuttered during the COVID-19 pandemic, products the US relied on were impacted. Here's how experts see a return to "Made in America" and the incumbent risks.
🔐 Microsoft 365 phishing campaign exploits Samsung, Adobe, and Oxford University 🔐
📖 Read
via "Security on TechRepublic".
The attack redirects users through legitimate websites in an attempt to capture their Microsoft credentials, says Check Point Research.📖 Read
via "Security on TechRepublic".
🔐 Popular mobile banking apps are riddled with security flaws, and Android users are more at risk 🔐
📖 Read
via "Security on TechRepublic".
A study of banking apps for iOS and Android found poor source code protection, cleartext storage of sensitive data, and other serious flaws that make it easy for attackers to break into accounts.📖 Read
via "Security on TechRepublic".
TechRepublic
Popular mobile banking apps are riddled with security flaws, and Android users are more at risk
A study of banking apps for iOS and Android found poor source code protection, cleartext storage of sensitive data, and other serious flaws that make it easy for attackers to break into accounts.
🕴 Adobe Releases PDF Protected Mode for Acrobat DC 🕴
📖 Read
via "Dark Reading: ".
The preview, open to Windows users, opens PDF files in a sandbox to protect users who open malicious Acrobat documents.📖 Read
via "Dark Reading: ".
Dark Reading
Adobe Releases PDF Protected Mode for Acrobat DC
The preview, open to Windows users, opens PDF files in a sandbox to protect users who open malicious Acrobat documents.
🕴 Have Your Say: Dark Reading Video News Desk Seeks Reader Contributions 🕴
📖 Read
via "Dark Reading: ".
We've got questions for you on black infosec, burnout, vulnerabilities, COVID-19, and much more. Send us your video responses and we'll play them in our News Desk broadcast during Black Hat Virtual.📖 Read
via "Dark Reading: ".
Dark Reading
Have Your Say: Dark Reading Video News Desk Seeks Reader Contributions
We've got questions for you on black infosec, burnout, vulnerabilities, COVID-19, and much more. Send us your video responses and we'll play them in our News Desk broadcast during Black Hat Virtual.
🔏 PCI SSC Releases New Standard to Secure Devices 🔏
📖 Read
via "Subscriber Blog RSS Feed ".
A new update to PCI requirements is designed to keep pace with the evolving financial threat environment.📖 Read
via "Subscriber Blog RSS Feed ".
Digital Guardian
PCI SSC Releases New Standard to Secure Devices
A new update to PCI requirements is designed to keep pace with the evolving financial threat environment.