‼ CVE-2022-48300 ‼
📖 Read
via "National Vulnerability Database".
The WMS module lacks the authentication mechanism in some APIs. Successful exploitation of this vulnerability may affect data confidentiality.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-48296 ‼
📖 Read
via "National Vulnerability Database".
The SystemUI has a vulnerability in permission management. Successful exploitation of this vulnerability may cause users to receive broadcasts from malicious apps, conveying false alarm information about external storage devices.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-48294 ‼
📖 Read
via "National Vulnerability Database".
The IHwAttestationService interface has a defect in authentication. Successful exploitation of this vulnerability may affect data confidentiality.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-22603 ‼
📖 Read
via "National Vulnerability Database".
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-48299 ‼
📖 Read
via "National Vulnerability Database".
The WMS module lacks the authentication mechanism in some APIs. Successful exploitation of this vulnerability may affect data confidentiality.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-22609 ‼
📖 Read
via "National Vulnerability Database".
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none📖 Read
via "National Vulnerability Database".
‼ CVE-2021-41064 ‼
📖 Read
via "National Vulnerability Database".
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2021. Notes: none.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-48298 ‼
📖 Read
via "National Vulnerability Database".
The geofencing kernel code does not verify the length of the input data. Successful exploitation of this vulnerability may cause out-of-bounds memory access.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-22607 ‼
📖 Read
via "National Vulnerability Database".
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none📖 Read
via "National Vulnerability Database".
‼ CVE-2022-48297 ‼
📖 Read
via "National Vulnerability Database".
The geofencing kernel code has a vulnerability of not verifying the length of the input data. Successful exploitation of this vulnerability may cause out-of-bounds memory access.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-48288 ‼
📖 Read
via "National Vulnerability Database".
The bundle management module lacks authentication and control mechanisms in some APIs. Successful exploitation of this vulnerability may affect data confidentiality.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-48286 ‼
📖 Read
via "National Vulnerability Database".
The multi-screen collaboration module has a privilege escalation vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-0575 ‼
📖 Read
via "National Vulnerability Database".
External Control of Critical State Data, Improper Control of Generation of Code ('Code Injection') vulnerability in YugaByte, Inc. Yugabyte DB on Windows, Linux, MacOS, iOS (DevopsBase.Java:execCommand, TableManager.Java:runCommand modules) allows API Manipulation, Privilege Abuse. This vulnerability is associated with program files backup.Py. This issue affects Yugabyte DB: Lesser then 2.2.📖 Read
via "National Vulnerability Database".
🕴 Phishing Surges Ahead, as ChatGPT & AI Loom 🕴
📖 Read
via "Dark Reading".
AI and phishing-as-a-service (PaaS) kits are making it easier for threat actors to create malicious email campaigns, which continue to target high-volume applications using popular brand names.📖 Read
via "Dark Reading".
Dark Reading
Phishing Surges Ahead, as ChatGPT & AI Loom
AI and phishing-as-a-service (PaaS) kits are making it easier for threat actors to create malicious email campaigns, which continue to target high-volume applications using popular brand names.
🕴 Cryptographers Decode Secret Letters of Mary, Queen of Scots 🕴
📖 Read
via "Dark Reading".
Nearly a half-millennium after her execution, encrypted letters from the imprisoned royal offer a fascinating look into early cryptography.📖 Read
via "Dark Reading".
Dark Reading
Cryptographers Decode Secret Letters of Mary, Queen of Scots
Nearly a half-millennium after her execution, encrypted letters from the imprisoned royal offer a fascinating look into early cryptography.
🕴 Kaspersky Finds Growing Number of Parents Experiencing Ransomware Attacks on Children's Schools 🕴
📖 Read
via "Dark Reading".
Schools paying higher ransoms and seeing longer closures, according to survey of parents.📖 Read
via "Dark Reading".
Dark Reading
Kaspersky Finds Growing Number of Parents Experiencing Ransomware Attacks on Children's Schools
Schools paying higher ransoms and seeing longer closures, according to survey of parents.
♟️ U.S., U.K. Sanction 7 Men Tied to Trickbot Hacking Group ♟️
📖 Read
via "Krebs on Security".
Authorities in the United States and United Kingdom today levied financial sanctions against seven men accused of operating "Trickbot," a cybercrime-as-a-service platform based in Russia that has enabled countless ransomware attacks and bank account takeovers since its debut in 2016. The U.S. Department of the Treasury says the Trickbot group is associated with Russian intelligence services, and that this alliance led to the targeting of many U.S. companies and government entities.📖 Read
via "Krebs on Security".
Krebs on Security
U.S., U.K. Sanction 7 Men Tied to Trickbot Hacking Group
Authorities in the United States and United Kingdom today levied financial sanctions against seven men accused of operating "Trickbot," a cybercrime-as-a-service platform based in Russia that has enabled countless ransomware attacks and bank account takeovers…
🕴 7 Critical Cloud Threats Facing the Enterprise in 2023 🕴
📖 Read
via "Dark Reading".
From shadow data to misconfigurations, and overpermissioning to multicloud sprawl, Dark Reading's cloud security slideshow helps security pros understand the threat horizon.📖 Read
via "Dark Reading".
Dark Reading
7 Critical Cloud Threats Facing the Enterprise in 2023
From shadow data to misconfigs, and overpermissioning to multicloud sprawl, our cloud security slideshow helps security pros understand the threat horizon.
🕴 Avast Threat Report: Consumers Plagued With Refund Fraud, Tech Support Scams, and Adware 🕴
📖 Read
via "Dark Reading".
Avast researchers also discovered and reported two zero-day vulnerabilities, and observed the spread of information-stealing malware, remote access trojans, and botnets.📖 Read
via "Dark Reading".
Dark Reading
Avast Threat Report: Consumers Plagued With Refund Fraud, Tech Support Scams, and Adware
Avast researchers also discovered and reported two zero-day vulnerabilities, and observed the spread of information-stealing malware, remote access trojans, and botnets.
‼ CVE-2023-21435 ‼
📖 Read
via "National Vulnerability Database".
Exposure of Sensitive Information vulnerability in Fingerprint TA prior to SMR Feb-2023 Release 1 allows attackers to access the memory address information via log.📖 Read
via "National Vulnerability Database".