‼ CVE-2021-0324 ‼
📖 Read
via "National Vulnerability Database".
Product: AndroidVersions: Android SoCAndroid ID: A-175402462📖 Read
via "National Vulnerability Database".
‼ CVE-2021-0467 ‼
📖 Read
via "National Vulnerability Database".
In Chromecast bootROM, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege in the bootloader, with physical USB access, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-174490700📖 Read
via "National Vulnerability Database".
🕴 VPN Attacks Surged in First Quarter 🕴
📖 Read
via "Dark Reading".
But volume of malware, botnet, and other exploit activity declined because of the Emotet botnet takedown.📖 Read
via "Dark Reading".
Dark Reading
VPN Attacks Surged in First Quarter
But volume of malware, botnet, and other exploit activity declined because of the Emotet botnet takedown.
‼ CVE-2021-34693 ‼
📖 Read
via "National Vulnerability Database".
net/can/bcm.c in the Linux kernel through 5.12.10 allows local users to obtain sensitive information from kernel stack memory because parts of a data structure are uninitialized.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-27887 ‼
📖 Read
via "National Vulnerability Database".
Cross-site Scripting (XSS) vulnerability in the main dashboard of Ellipse APM versions allows an authenticated user or integrated application to inject malicious data into the application that can then be executed in a victim’s browser. This issue affects: Hitachi ABB Power Grids Ellipse APM 5.3 version 5.3.0.1 and prior versions; 5.2 version 5.2.0.3 and prior versions; 5.1 version 5.1.0.6 and prior versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-31618 ‼
📖 Read
via "National Vulnerability Database".
Apache HTTP Server protocol handler for the HTTP/2 protocol checks received request headers against the size limitations as configured for the server and used for the HTTP/1 protocol as well. On violation of these restrictions and HTTP response is sent to the client with a status code indicating why the request was rejected. This rejection response was not fully initialised in the HTTP/2 protocol handler if the offending header was the very first one received or appeared in a a footer. This led to a NULL pointer dereference on initialised memory, crashing reliably the child process. Since such a triggering HTTP/2 request is easy to craft and submit, this can be exploited to DoS the server. This issue affected mod_http2 1.15.17 and Apache HTTP Server version 2.4.47 only. Apache HTTP Server 2.4.47 was never released.📖 Read
via "National Vulnerability Database".
❌ Apple Hurries Patches for Safari Bugs Under Active Attack ❌
📖 Read
via "Threat Post".
Apple patched two bugs impacting its Safari browser WebKit engine that it said are actively being exploited.📖 Read
via "Threat Post".
Threat Post
Apple Hurries Patches for Safari Bugs Under Active Attack
Apple patched two bugs impacting its Safari browser WebKit engine that it said are actively being exploited.
⚠ “Face of Anonymous” suspect deported from Mexico to face US hacking charges ⚠
📖 Read
via "Naked Security".
After nearly a decade as a US expat dubbed "The Face of Anoynmous", he's back in the US facing cybercrime charges from almost a decade ago.📖 Read
via "Naked Security".
Naked Security
“Face of Anonymous” suspect deported from Mexico to face US hacking charges
After nearly a decade as a US expat dubbed “The Face of Anoynmous”, he’s back in the US facing cybercrime charges from almost a decade ago.
❌ Microsoft Gets Second Shot at Banning hiQ from Scraping LinkedIn User Data ❌
📖 Read
via "Threat Post".
Decision throws out previous ruling in favor of hiQ Labs that prevented Microsoft’s business networking platform to forbid the company from harvesting public info from user profiles.📖 Read
via "Threat Post".
Threat Post
Microsoft Gets Second Shot at Banning hiQ from Scraping LinkedIn User Data
Decision throws out previous ruling in favor of hiQ Labs that prevented Microsoft’s business networking platform to forbid the company from harvesting public info from user profiles.
🦿 Microsoft product vulnerabilities reached a new high of 1,268 in 2020 🦿
📖 Read
via "Tech Republic".
56% of all Microsoft critical vulnerabilities could have been mitigated by removing admin rights, according to the 2021 BeyondTrust Microsoft Vulnerabilities Report.📖 Read
via "Tech Republic".
🕴 How Does the Government Buy Its Cybersecurity? 🕴
📖 Read
via "Dark Reading".
The federal government is emphasizing cybersecurity regulation, education, and defense strategies this year.📖 Read
via "Dark Reading".
❌ SASE & Zero Trust: The Dream Team ❌
📖 Read
via "Threat Post".
Forcepoint’s Nico Fischbach, global CTO and VPE of SASE, and Chase Cunningham, chief strategy officer at Ericom Software, on using SASE to make Zero Trust real.📖 Read
via "Threat Post".
🛠 Hashcat Advanced Password Recovery 6.2.2 Source Code 🛠
📖 Read
via "Packet Storm Security".
Hashcat is an advanced GPU hash cracking utility that includes the World's fastest md5crypt, phpass, mscash2 and WPA / WPA2 cracker. It also has the first and only GPGPU-based rule engine, focuses on highly iterated modern hashes, single dictionary-based attacks, and more. This is the source code release.📖 Read
via "Packet Storm Security".
Packetstormsecurity
Hashcat Advanced Password Recovery 6.2.2 Source Code ≈ Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers
🕴 How President Biden Can Better Defend the US From Russian Hacks 🕴
📖 Read
via "Dark Reading".
Wilson Center cybersecurity expert Meg King pinpoints five ambitious steps the administration should take, including a comprehensive national data breach notification protocol.📖 Read
via "Dark Reading".
Dark Reading
How President Biden Can Better Defend the US From Russian Hacks
Wilson Center cybersecurity expert Meg King pinpoints five ambitious steps the administration should take, including a comprehensive national data breach notification protocol.
❌ Microsoft Disrupts Large-Scale, Cloud-Based BEC Campaign ❌
📖 Read
via "Threat Post".
Varied cloud infrastructure was used to phish email credentials, monitor for and forward finance-related messages and automate operations.📖 Read
via "Threat Post".
Threat Post
Microsoft Disrupts Large-Scale, Cloud-Based BEC Campaign
Varied cloud infrastructure was used to phish email credentials, monitor for and forward finance-related messages and automate operations.
❌ Malicious PDFs Flood the Web, Lead to Password-Snarfing ❌
📖 Read
via "Threat Post".
SolarMarker makers are using SEO poisoning, stuffing thousands of PDFs with tens of thousands of pages full of SEO keywords & links to redirect to the malware.📖 Read
via "Threat Post".
Threat Post
Malicious PDFs Flood the Web, Lead to Password-Snarfing
SolarMarker makers are using SEO poisoning, stuffing thousands of PDFs with tens of thousands of pages full of SEO keywords & links to redirect to the malware.
🕴 What Industrial Control System Vulnerabilities Can Teach Us About Protecting the Supply Chain 🕴
📖 Read
via "Dark Reading".
Older technologies used in industrial and critical infrastructure leave the sector highly vulnerable to attack, but organizations can take steps to better protect themselves.📖 Read
via "Dark Reading".
Dark Reading
What Industrial Control System Vulnerabilities Can Teach Us About Protecting the Supply Chain
Older technologies used in industrial and critical infrastructure leave the sector highly vulnerable to attack, but organizations can take steps to better protect themselves.
🕴 Deloitte Buys Terbium Labs to Expand Threat Intel Capabilities 🕴
📖 Read
via "Dark Reading".
Terbium Labs' products and services will become part of Deloitte's Detect & Respond lineup, the company confirms.📖 Read
via "Dark Reading".
‼ CVE-2021-31497 ‼
📖 Read
via "National Vulnerability Database".
This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of DWG files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-13311.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-31487 ‼
📖 Read
via "National Vulnerability Database".
This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DWF files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-12715.📖 Read
via "National Vulnerability Database".
🕴 Andariel Group Targets South Korean Entities in New Campaign 🕴
📖 Read
via "Dark Reading".
Andariel, designated as a sub-group of the Lazarus Group APT, has historically targeted South Korean organzations.📖 Read
via "Dark Reading".