🕴 C10p's MOVEit Campaign Represents a New Era in Cyberattacks 🕴
📖 Read
via "Dark Reading".
The ransomware group shows an evolution of its tactics with MOVEit zero day — potentially ushering in a new normal when it comes to extortion supply chain cyberattacks, experts say.📖 Read
via "Dark Reading".
Dark Reading
Cl0p's MOVEit Campaign Represents a New Era in Cyberattacks
The ransomware group shows an evolution of its tactics with MOVEit zero-day — potentially ushering in a new normal when it comes to extortion supply chain cyberattacks, experts say.
⚠ Firefox 115 is out, says farewell to older Windows and Mac users ⚠
📖 Read
via "Naked Security".
No zero-days this month, so you're patching to stay ahead, not merely to catch up!📖 Read
via "Naked Security".
Sophos News
Naked Security – Sophos News
🕴 Ransomware Halts Operations at Japan's Port of Nagoya 🕴
📖 Read
via "Dark Reading".
LockBit 3.0 claims responsibility for the cyberattack that shuttered the largest port in Japan, according to authorities. 📖 Read
via "Dark Reading".
Dark Reading
Ransomware Halts Operations at Japan's Port of Nagoya
LockBit 3.0 claims responsibility for the cyberattack that shuttered the largest port in Japan, according to authorities.
‼ CVE-2023-36933 ‼
📖 Read
via "National Vulnerability Database".
In Progress MOVEit Transfer before 2021.0.9 (13.0.9), 2021.1.7 (13.1.7), 2022.0.7 (14.0.7), 2022.1.8 (14.1.8), and 2023.0.4 (15.0.4), it is possible for an attacker to invoke a method that results in an unhandled exception. Triggering this workflow can cause the MOVEit Transfer application to terminate unexpectedly.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-25969 ‼
📖 Read
via "National Vulnerability Database".
gnuplot v5.5 was discovered to contain a buffer overflow via the function plotrequest().📖 Read
via "National Vulnerability Database".
‼ CVE-2023-36932 ‼
📖 Read
via "National Vulnerability Database".
In Progress MOVEit Transfer before 2020.1.11 (12.1.11), 2021.0.9 (13.0.9), 2021.1.7 (13.1.7), 2022.0.7 (14.0.7), 2022.1.8 (14.1.8), and 2023.0.4 (15.0.4), multiple SQL injection vulnerabilities have been identified in the MOVEit Transfer web application that could allow an authenticated attacker to gain unauthorized access to the MOVEit Transfer database. An attacker could submit a crafted payload to a MOVEit Transfer application endpoint that could result in modification and disclosure of MOVEit database content.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-31194 ‼
📖 Read
via "National Vulnerability Database".
An access violation vulnerability exists in the GraphPlanar::Write functionality of Diagon v1.0.139. A specially crafted network request can lead to a heap buffer overflow. An attacker can send a network request to trigger this vulnerability.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-36934 ‼
📖 Read
via "National Vulnerability Database".
In Progress MOVEit Transfer before 2020.1.11 (12.1.11), 2021.0.9 (13.0.9), 2021.1.7 (13.1.7), 2022.0.7 (14.0.7), 2022.1.8 (14.1.8), and 2023.0.4 (15.0.4), a SQL injection vulnerability has been identified in the MOVEit Transfer web application that could allow an unauthenticated attacker to gain unauthorized access to the MOVEit Transfer database. An attacker could submit a crafted payload to a MOVEit Transfer application endpoint that could result in modification and disclosure of MOVEit database content.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-27390 ‼
📖 Read
via "National Vulnerability Database".
A heap-based buffer overflow vulnerability exists in the Sequence::DrawText functionality of Diagon v1.0.139. A specially crafted network request can lead to a heap buffer overflow. An attacker can send a network request to trigger this vulnerability.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-25399 ‼
📖 Read
via "National Vulnerability Database".
A refcounting issue which leads to potential memory leak was discovered in scipy commit 8627df31ab in Py_FindObjects() function.📖 Read
via "National Vulnerability Database".
🕴 OPERA1ER Cybercrime Group's Leader Arrested by INTERPOL 🕴
📖 Read
via "Dark Reading".
The group's mastermind was nabbed in Côte d'Ivoire for stealing up to $30 million using malware, phishing campaigns, and BEC scams, as part of international law enforcement's Operation Nervone.📖 Read
via "Dark Reading".
Dark Reading
OPERA1ER Cybercrime Group's Leader Arrested by Interpol
The group's mastermind was nabbed in Côte d'Ivoire for stealing up to $30 million using malware, phishing campaigns, and BEC scams, as part of international law enforcement's Operation Nervone.
‼ CVE-2023-34471 ‼
📖 Read
via "National Vulnerability Database".
AMI SPx contains a vulnerability in the BMC where a user may cause a missing cryptographic step by generating a hash-based message authentication code (HMAC). A successful exploit of this vulnerability may lead to the loss confidentiality, integrity, and authentication.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-23452 ‼
📖 Read
via "National Vulnerability Database".
A cross-site scripting (XSS) vulnerability in Selenium Grid v3.141.59 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the hub parameter under the /grid/console page.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-34338 ‼
📖 Read
via "National Vulnerability Database".
AMI SPx contains a vulnerability in the BMC where an Attacker may cause a use of hard-coded cryptographic key by a hard-coded certificate. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity, and availability. 📖 Read
via "National Vulnerability Database".
‼ CVE-2023-35001 ‼
📖 Read
via "National Vulnerability Database".
Linux Kernel nftables Out-Of-Bounds Read/Write Vulnerability; nft_byteorder poorly handled vm register contents when CAP_NET_ADMIN is in any user or network namespace📖 Read
via "National Vulnerability Database".
‼ CVE-2023-34106 ‼
📖 Read
via "National Vulnerability Database".
GLPI is a free asset and IT management software package. Versions of the software starting with 0.68 and prior to 10.0.8 have an incorrect rights check on a on a file accessible by an authenticated user. This allows access to the list of all users and their personal information. Users should upgrade to version 10.0.8 to receive a patch.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-33335 ‼
📖 Read
via "National Vulnerability Database".
Cross Site Scripting (XSS) in Sophos Sophos iView (The EOL was December 31st 2020) in grpname parameter that allows arbitrary script to be executed.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-34337 ‼
📖 Read
via "National Vulnerability Database".
AMI SPx contains a vulnerability in the BMC where a user may cause an inadequate encryption strength by hash-based message authentication code (HMAC). A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity, and availability.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-35863 ‼
📖 Read
via "National Vulnerability Database".
In MADEFORNET HTTP Debugger through 9.12, the Windows service does not set the seclevel registry key before launching the driver. Thus, it is possible for an unprivileged application to obtain a handle to the NetFilterSDK wrapper before the service obtains exclusive access.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-34473 ‼
📖 Read
via "National Vulnerability Database".
AMI SPx contains a vulnerability in the BMC where a valid user may cause a use of hard-coded credentials. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity, and availability.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-31248 ‼
📖 Read
via "National Vulnerability Database".
Linux Kernel nftables Use-After-Free Local Privilege Escalation Vulnerability; `nft_chain_lookup_byid()` failed to check whether a chain was active and CAP_NET_ADMIN is in any user or network namespace📖 Read
via "National Vulnerability Database".