🕴 Sustained 'Red Deer' Phishing Attacks Impersonate Israel Post, Drop RATs 🕴
📖 Read
via "Dark Reading".
The "missed package" phishing messages, likely the work of a hacking-for-hire group, bounds into inboxes, bearing ASyncRAT.📖 Read
via "Dark Reading".
Dark Reading
Sustained 'Red Deer' Phishing Attacks Impersonate Israel Post, Drop RATs
The "missed package" phishing messages, likely the work of a hacking-for-hire group, bounds into inboxes, bearing ASyncRAT.
‼ CVE-2023-32310 ‼
📖 Read
via "National Vulnerability Database".
DataEase is an open source data visualization and analysis tool. The API interface for DataEase delete dashboard and delete system messages is vulnerable to insecure direct object references (IDOR). This could result in a user deleting another user's dashboard or messages or interfering with the interface for marking messages read. The vulnerability has been fixed in v1.18.7. There are no known workarounds aside from upgrading.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-32713 ‼
📖 Read
via "National Vulnerability Database".
In Splunk App for Stream versions below 8.1.1, a low-privileged user could use a vulnerability in the streamfwd process within the Splunk App for Stream to escalate their privileges on the machine that runs the Splunk Enterprise instance, up to and including the root user.📖 Read
via "National Vulnerability Database".
🕴 How Do I Reduce Security Tool Sprawl in My Environment? 🕴
📖 Read
via "Dark Reading".
When it comes to tool consolidation, focus on platforms over products.📖 Read
via "Dark Reading".
Dark Reading
How Do I Reduce Security Tool Sprawl in My Environment?
When it comes to tool consolidation, focus on platforms over products.
🕴 Jetpack WordPress Plug-in API Bug Triggers Mass Updates 🕴
📖 Read
via "Dark Reading".
An audit uncovers an API-related security vulnerability dating back to Jetpack version 2.0 released in 2012 — and it affects millions of websites.📖 Read
via "Dark Reading".
Dark Reading
Jetpack WordPress Plug-in API Bug Triggers Mass Updates
An audit uncovers an API-related security vulnerability dating back to Jetpack version 2.0 released in 2012 — and it affects millions of websites.
❤1
‼ CVE-2023-34339 ‼
📖 Read
via "National Vulnerability Database".
In JetBrains Ktor before 2.3.1 headers containing authentication data could be added to the exception's message📖 Read
via "National Vulnerability Database".
🕴 Amazon Pays $30.8M to Settle Ring Spying & Alexa Privacy Lawsuits 🕴
📖 Read
via "Dark Reading".
The global e-commerce company will pay millions of dollars in two separate lawsuits because of privacy and security violations, the FTC says.📖 Read
via "Dark Reading".
Dark Reading
Amazon Pays $30.8M to Settle Ring Spying & Alexa Privacy Lawsuits
The global e-commerce company will pay millions of dollars in two separate lawsuits because of privacy and security violations, the FTC says.
🕴 Tel Aviv Stock Exchange Selects CardinalOps to Reduce Risk of Breaches Due to Undetected Attacks 🕴
📖 Read
via "Dark Reading".
Enables financial services firm to operationalize MITRE ATT&CK with Splunk and eliminate detection coverage gaps based on organizational risk and priorities.📖 Read
via "Dark Reading".
Dark Reading
Tel Aviv Stock Exchange Selects CardinalOps to Reduce Risk of Breaches Due to Undetected Attacks
Enables financial services firm to operationalize MITRE ATT&CK with Splunk and eliminate detection coverage gaps based on organizational risk and priorities.
🕴 Cyversity and United Airlines to Provide Cybersecurity Training Scholarships to Cyversity Members 🕴
📖 Read
via "Dark Reading".
Program designed to equip women and underrepresented individuals with the necessary skills and knowledge to succeed in cybersecurity.📖 Read
via "Dark Reading".
Dark Reading
Cyversity and United Airlines to Provide Cybersecurity Training Scholarships to Cyversity Members
Program designed to equip women and underrepresented individuals with the necessary skills and knowledge to succeed in cybersecurity.
‼ CVE-2023-29723 ‼
📖 Read
via "National Vulnerability Database".
The Glitter Unicorn Wallpaper app for Android 7.0 thru 8.0 allows unauthorized applications to actively request permission to insert data into the database that records information about a user's personal preferences and will be loaded into memory to be read and used when the application is opened. By injecting data, the attacker can force the application to load malicious image URLs and display them in the UI. As the amount of data increases, it will eventually cause the application to trigger an OOM error and crash, resulting in a persistent denial of service attack.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-29736 ‼
📖 Read
via "National Vulnerability Database".
Keyboard Themes 1.275.1.164 for Android contains a dictionary traversal vulnerability that allows unauthorized apps to overwrite arbitrary files in its internal storage and achieve arbitrary code execution.📖 Read
via "National Vulnerability Database".
👍1
‼ CVE-2023-29725 ‼
📖 Read
via "National Vulnerability Database".
The BT21 x BTS Wallpaper app 12 for Android allows unauthorized applications to actively request permission to insert data into the database that records information about a user's personal preferences and will be loaded into memory to be read and used when the application is opened. By injecting data, the attacker can force the application to load malicious image URLs and display them in the UI. As the amount of data increases, it will eventually cause the application to trigger an OOM error and crash, resulting in a persistent denial of service attack.📖 Read
via "National Vulnerability Database".
👍1
‼ CVE-2023-29746 ‼
📖 Read
via "National Vulnerability Database".
An issue found in The Thaiger v.1.2 for Android allows unauthorized apps to cause a code execution attack by manipulating the SharedPreference files.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-2835 ‼
📖 Read
via "National Vulnerability Database".
The WP Directory Kit plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'search' parameter in versions up to, and including, 1.2.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.📖 Read
via "National Vulnerability Database".
🔥2
‼ CVE-2023-2060 ‼
📖 Read
via "National Vulnerability Database".
Weak Password Requirements vulnerability in FTP function on Mitsubishi Electric Corporation MELSEC iQ-R Series EtherNet/IP module RJ71EIP91 and MELSEC iQ-F Series EtherNet/IP module FX5-ENET/IP allows a remote unauthenticated attacker to access to the module via FTP by dictionary attack or password sniffing.📖 Read
via "National Vulnerability Database".
🔥1
📢 Horabot campaign targeted businesses for more than two years before finally being discovered 📢
📖 Read
via "ITPro".
The newly-discovered Horabot botnet has attacked companies in the accounting, investment, and construction sectors in particular 📖 Read
via "ITPro".
Cloud Pro
Horabot campaign targeted businesses for more than two years before finally being discovered
The newly-discovered Horabot botnet has attacked companies in the accounting, investment, and construction sectors in particular
👍1
📢 Kaspersky traces spyware attack on staff iOS devices back to 2019 📢
📖 Read
via "ITPro".
It's currently unclear who is behind the spyware attack on the Russian-based cyber security firm 📖 Read
via "ITPro".
ITPro
Kaspersky traces spyware attack on staff iOS devices back to 2019
It's currently unclear who is behind the spyware attack on the Russian-based cyber security firm
👍1
‼ CVE-2023-28705 ‼
📖 Read
via "National Vulnerability Database".
Openfind Mail2000 has insufficient filtering special characters of email content of its content filtering function. A remote attacker can exploit this vulnerability using phishing emails that contain malicious web pages injected with JavaScript. When users access the system and open the email, it triggers an XSS (Reflected Cross-site scripting) attack.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-28702 ‼
📖 Read
via "National Vulnerability Database".
ASUS RT-AC86U does not filter special characters for parameters in specific web URLs. A remote attacker with normal user privileges can exploit this vulnerability to perform command injection attack to execute arbitrary system commands, disrupt system or terminate service.📖 Read
via "National Vulnerability Database".
⚠ Researchers claim Windows “backdoor” affects hundreds of Gigabyte motherboards ⚠
📖 Read
via "Naked Security".
It's a backdoor, Jim, but not as we know it... here's a sober look at this issue.📖 Read
via "Naked Security".
‼ CVE-2023-3056 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability was found in YFCMF up to 3.0.4. It has been declared as problematic. This vulnerability affects unknown code of the file index.php. The manipulation leads to path traversal: '../filedir'. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-230542 is the identifier assigned to this vulnerability.📖 Read
via "National Vulnerability Database".