‼ CVE-2022-29855 ‼
📖 Read
via "National Vulnerability Database".
Mitel 6800 and 6900 Series SIP phone devices through 2022-04-27 have "undocumented functionality." A vulnerability in Mitel 6800 Series and 6900 Series SIP phones excluding 6970, versions 5.1 SP8 (5.1.0.8016) and earlier, and 6.0 (6.0.0.368) through 6.1 HF4 (6.1.0.165), could allow a unauthenticated attacker with physical access to the phone to gain root access due to insufficient access control for test functionality during system startup. A successful exploit could allow access to sensitive information and code execution.📖 Read
via "National Vulnerability Database".
❌ Novel ‘Nerbian’ Trojan Uses Advanced Anti-Detection Tricks ❌
📖 Read
via "Threat Post".
The stealthy, feature-rich malware has multistage evasion tactics to fly under the radar of security analysis, researchers at Proofpoint have found.📖 Read
via "Threat Post".
Threat Post
Novel ‘Nerbian’ Trojan Uses Advanced Anti-Detection Tricks
The stealthy, feature-rich malware has multistage evasion tactics to fly under the radar of security analysis, researchers at Proofpoint have found.
♟️ DEA Investigating Breach of Law Enforcement Data Portal ♟️
📖 Read
via "Krebs on Security".
The U.S. Drug Enforcement Administration (DEA) says it is investigating reports that hackers gained unauthorized access to an agency portal that taps into 16 different federal law enforcement databases. KrebsOnSecurity has learned the alleged compromise is tied to a cybercrime and online harassment community that routinely impersonates police and government officials to harvest personal information on their targets.📖 Read
via "Krebs on Security".
Krebs on Security
DEA Investigating Breach of Law Enforcement Data Portal
The U.S. Drug Enforcement Administration (DEA) says it is investigating reports that hackers gained unauthorized access to an agency portal that taps into 16 different federal law enforcement databases. KrebsOnSecurity has learned the alleged compromise is…
🕴 On Air With Dark Reading News Desk at Black Hat Asia 2022 🕴
📖 Read
via "Dark Reading".
This year's Black Hat Asia is hybrid, with some sessions broadcast on the virtual platform and others live on stage in Singapore. News Desk is available on-demand with prerecorded interviews.📖 Read
via "Dark Reading".
Darkreading
On the Air With Dark Reading News Desk at Black Hat Asia 2022
This year's Black Hat Asia is hybrid, with some sessions broadcast on the virtual platform and others live on stage in Singapore. News Desk is available on-demand with prerecorded interviews.
‼ CVE-2022-1674 ‼
📖 Read
via "National Vulnerability Database".
NULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 in GitHub repository vim/vim prior to 8.2.4938. NULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 allows attackers to cause a denial of service (application crash) via a crafted input.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-1650 ‼
📖 Read
via "National Vulnerability Database".
Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository eventsource/eventsource prior to v2.0.2.📖 Read
via "National Vulnerability Database".
❌ You Can’t Eliminate Cyberattacks, So Focus on Reducing the Blast Radius ❌
📖 Read
via "Threat Post".
Tony Lauro, director of security technology and strategy at Akamai, discusses reducing your company's attack surface and the "blast radius" of a potential attack.📖 Read
via "Threat Post".
Threat Post
You Can’t Eliminate Cyberattacks, So Focus on Reducing the Blast Radius
Tony Lauro, director of security technology and strategy at Akamai, discusses reducing your company's attack surface and the "blast radius" of a potential attack.
🕴 Nokia Opens Cybersecurity Testing Lab 🕴
📖 Read
via "Dark Reading".
The end-to-end cybersecurity 5G testing lab will help identify and prevent cyberattacks on 5G networks.📖 Read
via "Dark Reading".
Darkreading
Nokia Opens Cybersecurity Testing Lab
The end-to-end cybersecurity 5G testing lab will help identify and prevent cyberattacks on 5G networks.
🗓️ Box, Zoom, Google Docs offer phishing boost with ‘vanity URL’ flaws 🗓️
📖 Read
via "The Daily Swig".
Attack technique bypasses email filters and burnishes credibility of phishing links📖 Read
via "The Daily Swig".
The Daily Swig | Cybersecurity news and views
Box, Zoom, Google Docs offer phishing boost with ‘vanity URL’ flaws
Attack technique bypasses email filters and burnishes credibility of phishing links
🕴 5 Years That Altered the Ransomware Landscape 🕴
📖 Read
via "Dark Reading".
WannaCry continues to be a reminder of the challenges that organizations face dealing with the ransomware threat.📖 Read
via "Dark Reading".
Darkreading
5 Years That Altered the Ransomware Landscape
WannaCry continues to be a reminder of the challenges that organizations face dealing with the ransomware threat.
🕴 Known macOS Vulnerabilities Led Researcher to Root Out New Flaws 🕴
📖 Read
via "Dark Reading".
Researcher shares how he unearthed newer bugs in Apple's operating system by closer scrutiny of previous research, including vulnerabilities that came out of the Pwn2Own competition.📖 Read
via "Dark Reading".
Darkreading
Known macOS Vulnerabilities Led Researcher to Root Out New Flaws
Researcher shares how he unearthed newer bugs in Apple's operating system by closer scrutiny of previous research, including vulnerabilities that came out of the Pwn2Own competition.
❌ Malware Builder Leverages Discord Webhooks ❌
📖 Read
via "Threat Post".
Researchers discovered a simple malware builder designed to steal credentials, then pinging them to Discord webhooks.📖 Read
via "Threat Post".
Threat Post
Malware Builder Leverages Discord Webhooks
Researchers discovered a simple malware builder designed to steal credentials, then pinging them to Discord webhooks.
🕴 How Can Your Business Defend Itself Against Fraud-as-a-Service? 🕴
📖 Read
via "Dark Reading".
By understanding how FaaS works and following best practices to prevent it, your business can protect its customers, revenue, and brand reputation.📖 Read
via "Dark Reading".
Darkreading
How Can Your Business Defend Itself Against Fraud-as-a-Service?
By understanding how FaaS works and following best practices to prevent it, your business can protect its customers, revenue, and brand reputation.
🗓️ Researcher stops REvil ransomware in its tracks with DLL-hijacking exploit 🗓️
📖 Read
via "The Daily Swig".
Conti, Lockbit, and other prolific ransomware strains apparently have similar vulnerabilities📖 Read
via "The Daily Swig".
The Daily Swig | Cybersecurity news and views
Researcher stops REvil ransomware in its tracks with DLL-hijacking exploit
Conti, Lockbit, and other prolific ransomware strains apparently have similar vulnerabilities
‼ CVE-2021-42863 ‼
📖 Read
via "National Vulnerability Database".
A buffer overflow in ecma_builtin_typedarray_prototype_filter() in JerryScript version fe3a5c0 allows an attacker to construct a fake object or a fake arraybuffer with unlimited size.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-28873 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability affecting F-Secure SAFE browser was discovered. An attacker can potentially exploit Javascript window.open functionality in SAFE Browser which could lead address bar spoofing attacks.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-28872 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability affecting F-Secure SAFE browser was discovered. A maliciously crafted website could make a phishing attack with address bar spoofing as the address bar was not correct if navigation fails in a loop.📖 Read
via "National Vulnerability Database".
🗓️ Marcus Hutchins on halting the WannaCry ransomware attack – ‘Still to this day it feels like it was all a weird dream’ 🗓️
📖 Read
via "The Daily Swig".
Five years since WannaCry exploded onto the scene, ransomware still tops global threat lists ANALYSIS Five years ago today (May 12), a ransomware attack by a North Korean hacking group hit computers r📖 Read
via "The Daily Swig".
The Daily Swig | Cybersecurity news and views
Marcus Hutchins on halting the WannaCry ransomware attack – ‘Still to this day it feels like it was all a weird dream’
Five years since WannaCry exploded onto the scene, ransomware still tops global threat lists
⚠ Serious Security: Learning from curl’s latest bug update ⚠
📖 Read
via "Naked Security".
Learn how to write plain-speaking and purposeful security advisories from one of the most widely-used open source tools in the world.📖 Read
via "Naked Security".
Naked Security
Serious Security: Learning from curl’s latest bug update
Learn how to write plain-speaking and purposeful security advisories from one of the most widely-used open source tools in the world.
⚠ S3 Ep82: Bugs, bugs, bugs (and Colonial Pipeline again) [Podcast] ⚠
📖 Read
via "Naked Security".
Latest episode - lots to learn - plain English - fun with a serious side - listen now!📖 Read
via "Naked Security".
Naked Security
S3 Ep82: Bugs, bugs, bugs (and Colonial Pipeline again) [Podcast]
Latest episode – lots to learn – plain English – fun with a serious side – listen now!
‼ CVE-2022-29989 ‼
📖 Read
via "National Vulnerability Database".
Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=delete_booking.📖 Read
via "National Vulnerability Database".