❌ MoleRats APT Flaunts New Trojan in Latest Cyberespionage Campaign ❌
📖 Read
via "Threat Post".
Researchers from Proofpoint have spotted a new Middle East-targeted phishing campaign that delivers a novel malware dubbed NimbleMamba.📖 Read
via "Threat Post".
Threat Post
MoleRats APT Flaunts New Trojan in Latest Cyberespionage Campaign
Researchers from Proofpoint have spotted a new Middle East-targeted phishing campaign that delivers a novel malware dubbed NimbleMamba.
🗓️ Cyber-attack at Vodafone Portugal knocks mobile network services offline 🗓️
📖 Read
via "The Daily Swig".
No customer data was accessed, company claims📖 Read
via "The Daily Swig".
The Daily Swig | Cybersecurity news and views
Cyber-attack at Vodafone Portugal knocks mobile network services offline
No customer data was accessed, company claims
⚠ Self-styled “Crocodile of Wall Street” arrested with husband over Bitcoin megaheist ⚠
📖 Read
via "Naked Security".
The cops say they've recovered 80% of a $72 million cryptocoin heist... but the recovered funds alone are now worth over $4 billion!📖 Read
via "Naked Security".
Naked Security
Self-styled “Crocodile of Wall Street” arrested with husband over Bitcoin megaheist
The cops say they’ve recovered 80% of a $72 million cryptocoin heist… but the recovered funds alone are now worth over $4 billion!
‼ CVE-2021-46360 ‼
📖 Read
via "National Vulnerability Database".
Authenticated remote code execution (RCE) in Composr-CMS 10.0.39 and earlier allows remote attackers to execute arbitrary code via uploading a PHP shell through /adminzone/index.php?page=admin-commandr.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-46354 ‼
📖 Read
via "National Vulnerability Database".
Thinfinity VirtualUI 2.1.28.0, 2.1.32.1 and 2.5.26.2, fixed in version 3.0 is affected by an information disclosure vulnerability in the parameter "Addr" in cmd site. The ability to send requests to other systems can allow the vulnerable server to filtrate the real IP of the web server or increase the attack surface.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-0538 ‼
📖 Read
via "National Vulnerability Database".
Jenkins 2.333 and earlier, LTS 2.319.2 and earlier defines custom XStream converters that have not been updated to apply the protections for the vulnerability CVE-2021-43859 and allow unconstrained resource usage.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-0539 ‼
📖 Read
via "National Vulnerability Database".
Cross-site Scripting (XSS) - Stored in Packagist ptrofimov/beanstalk_console prior to 1.7.14.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-25939 ‼
📖 Read
via "National Vulnerability Database".
In ArangoDB, versions v3.7.0 through v3.9.0-alpha.1 have a feature which allows downloading a Foxx service from a publicly available URL. This feature does not enforce proper filtering of requests performed internally, which can be abused by a highly-privileged attacker to perform blind SSRF and send internal requests to localhost.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-40837 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability affecting F-Secure antivirus engine before Capricorn update 2022-02-01_01 was discovered whereby decompression of ACE file causes the scanner service to stop. The vulnerability can be exploited remotely by an attacker. A successful attack will result in denial-of-service of the antivirus engine.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-23378 ‼
📖 Read
via "National Vulnerability Database".
A Cross-Site Scripting (XSS) vulnerability exists within the 3.2.2 version of TastyIgniter. The "items%5B0%5D%5Bpath%5D" parameter of a request made to /admin/allergens/edit/1 is vulnerable.📖 Read
via "National Vulnerability Database".
🕴 Log4j and the Role of SBOMs in Reducing Software Security Risk 🕴
📖 Read
via "Dark Reading".
Enterprises are spending a pittance on securing their software supply chain, which makes COTS software dangerous — vulnerabilities can be "hidden" in open source components.📖 Read
via "Dark Reading".
Dark Reading
Log4j and the Role of SBOMs in Reducing Software Security Risk
Enterprises are spending a pittance on securing their software supply chain, which makes COTS software dangerous — vulnerabilities can be "hidden" in open source components.
🗓️ Couple charged with laundering proceeds from $4.5bn Bitfinex cryptocurrency hack 🗓️
📖 Read
via "The Daily Swig".
US investigators recover $3.6bn in digital assets📖 Read
via "The Daily Swig".
The Daily Swig | Cybersecurity news and views
Couple charged with laundering proceeds from $4.5bn Bitfinex cryptocurrency hack
US investigators recover $3.6bn in digital assets
🛠 GNU Privacy Guard 2.2.34 🛠
📖 Read
via "Packet Storm Security".
GnuPG (the GNU Privacy Guard or GPG) is GNU's tool for secure communication and data storage. It can be used to encrypt data and to create digital signatures. It includes an advanced key management facility and is compliant with the proposed OpenPGP Internet standard as described in RFC2440. As such, it is meant to be compatible with PGP from NAI, Inc. Because it does not use any patented algorithms, it can be used without any restrictions. This is the LTS release.📖 Read
via "Packet Storm Security".
Packetstormsecurity
GNU Privacy Guard 2.2.34 ≈ Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers
‼ CVE-2022-23102 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0). Affected products contain an open redirect vulnerability. An attacker could trick a valid authenticated user to the device into clicking a malicious link there by leading to phishing attacks.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-46151 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions). Affected application contains an out of bounds write past the end of an allocated structure while parsing specially crafted NEU files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-14754, ZDI-CAN-15082)📖 Read
via "National Vulnerability Database".
‼ CVE-2021-20009 ‼
📖 Read
via "National Vulnerability Database".
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2021. Notes: none.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-46152 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions). Affected application contains a type confusion vulnerability while parsing NEU files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-14643, ZDI-CAN-14644, ZDI-CAN-14755, ZDI-CAN-15183)📖 Read
via "National Vulnerability Database".
‼ CVE-2022-23312 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP9 Security Patch 1). The integrated web application "Online Help" in affected product contains a Cross-Site Scripting (XSS) vulnerability that could be exploited if unsuspecting users are tricked into accessing a malicious link.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-3813 ‼
📖 Read
via "National Vulnerability Database".
Improper Privilege Management in GitHub repository chatwoot/chatwoot prior to v2.2.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-46153 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions). Affected application contains a memory corruption vulnerability while parsing NEU files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-14645, ZDI-CAN-15305, ZDI-CAN-15589, ZDI-CAN-15599)📖 Read
via "National Vulnerability Database".
‼ CVE-2021-20002 ‼
📖 Read
via "National Vulnerability Database".
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2021. Notes: none.📖 Read
via "National Vulnerability Database".