Tag: pfsense

A vulnerability has been found in rtcwcoop 1.0.2 and classified as problematic. Affected by this vulnerability is the function AICast_ScriptLoad of the file code/game/ai_cast_script.c of the component Team Command Handler.… [...]

CVE-2016-15025 | generator-hottowel 0.0.11 404 Error _app.js cross site scripting (ID 174)

23 March 2023

A vulnerability, which was classified as problematic, was found in generator-hottowel 0.0.11. Affected is an unknown function of the file app/templates/src/server/_app.js of the component 404 Error Handler. The manipulation leads… [...]

CVE-2012-10008 | uakfdotb oneapp sql injection

23 March 2023

A vulnerability, which was classified as critical, has been found in uakfdotb oneapp. This issue affects some unknown processing. The manipulation leads to sql injection. The identification of this vulnerability… [...]

CVE-2023-0913 | SourceCodester Auto Dealer Management System 1.0 id sql injection

23 March 2023

A vulnerability classified as critical was found in SourceCodester Auto Dealer Management System 1.0. This vulnerability affects unknown code of the file /adms/admin/?page=vehicles/sell_vehicle. The manipulation of the argument id leads… [...]

CVE-2023-0912 | SourceCodester Auto Dealer Management System 1.0 id sql injection

23 March 2023

A vulnerability classified as critical has been found in SourceCodester Auto Dealer Management System 1.0. This affects an unknown part of the file /adms/admin/?page=vehicles/view_transaction. The manipulation of the argument id… [...]

CVE-2014-125087 | java-xmlbuilder up to 1.1 xml external entity reference

23 March 2023

A vulnerability was found in java-xmlbuilder up to 1.1. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to xml external entity… [...]

CVE-2012-10007 | madgicweb BuddyStream Plugin up to 3.2.7 on WordPress ShareBox.php content/link/shares cross site scripting

23 March 2023

A vulnerability was found in madgicweb BuddyStream Plugin up to 3.2.7. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file ShareBox.php. The… [...]

CVE-2016-15024 | doomsider shadow denial of service

23 March 2023

A vulnerability was found in doomsider shadow. It has been classified as problematic. Affected is an unknown function. The manipulation leads to denial of service. This vulnerability is traded as… [...]

CVE-2023-0910 | SourceCodester Online Pizza Ordering System 1.0 GET Parameter view_prod.php ID sql injection

23 March 2023

A vulnerability has been found in SourceCodester Online Pizza Ordering System 1.0 and classified as critical. This vulnerability affects unknown code of the file view_prod.php of the component GET Parameter… [...]

CVE-2023-0909 | cxasm notepad-- 1.22 Directory Comparison denial of service

23 March 2023

A vulnerability, which was classified as problematic, was found in cxasm notepad-- 1.22. This affects an unknown part of the component Directory Comparison Handler. The manipulation leads to denial of… [...]

CVE-2022-4904 | c-ares config_sortlist stack-based overflow (ID 496)

23 March 2023

A vulnerability, which was classified as critical, has been found in c-ares. Affected by this issue is the function config_sortlist. The manipulation leads to stack-based buffer overflow. This vulnerability is… [...]

CVE-2022-46806 | Cart All In One for WooCommerce Plugin up to 1.1.10 on WordPress Cart Changes cross-site request forgery

23 March 2023

A vulnerability was found in Cart All In One for WooCommerce Plugin up to 1.1.10. It has been rated as problematic. Affected by this issue is some unknown functionality of… [...]

CVE-2022-41727 | x-image up to 0.4.x TIFF Image resource consumption

23 March 2023

A vulnerability was found in x-image up to 0.4.x. It has been classified as problematic. Affected is an unknown function of the component TIFF Image Handler. The manipulation leads to… [...]

CVE-2022-41723 | x-net up to 0.6.x HTTP2 Stream resource consumption

23 March 2023

A vulnerability was found in x-net up to 0.6.x and classified as problematic. This issue affects some unknown processing of the component HTTP2 Stream Handler. The manipulation leads to resource… [...]

CVE-2022-3707 | Linux Kernel up to 6.1-rc2 Intel GVT-g Graphics Driver intel_gvt_dma_map_guest_page double free

23 March 2023

A vulnerability has been found in Linux Kernel up to 6.1-rc2 and classified as critical. This vulnerability affects the function intel_gvt_dma_map_guest_page of the component Intel GVT-g Graphics Driver. The manipulation… [...]

CVE-2023-0908 | Xoslab Easy File Locker 2.2.0.184 xlkfs.sys MessageNotifyCallback denial of service

23 March 2023

A vulnerability, which was classified as problematic, was found in Xoslab Easy File Locker 2.2.0.184. This affects the function MessageNotifyCallback in the library xlkfs.sys. The manipulation leads to denial of… [...]

CVE-2023-0907 | Filseclab Twister Antivirus 8.17 IoControlCode ffsmon.sys denial of service

23 March 2023

A vulnerability, which was classified as problematic, has been found in Filseclab Twister Antivirus 8.17. Affected by this issue is some unknown functionality in the library ffsmon.sys of the component… [...]

CVE-2023-0906 | SourceCodester Online Pizza Ordering System 1.0 POST Parameter ajax.php delete_category missing authentication

23 March 2023

A vulnerability classified as critical was found in SourceCodester Online Pizza Ordering System 1.0. Affected by this vulnerability is the function delete_category of the file ajax.php of the component POST… [...]

CVE-2023-0905 | SourceCodester Employee Task Management System 1.0 changePasswordForEmployee.php improper authentication

23 March 2023

A vulnerability classified as critical has been found in SourceCodester Employee Task Management System 1.0. Affected is an unknown function of the file changePasswordForEmployee.php. The manipulation leads to improper authentication.… [...]

CVE-2023-0904 | SourceCodester Employee Task Management System 1.0 task-details.php task_id sql injection

23 March 2023

A vulnerability was found in SourceCodester Employee Task Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file task-details.php. The manipulation of… [...]

CVE-2023-0903 | SourceCodester Employee Task Management System 1.0 edit-task.php task_id sql injection

23 March 2023

A vulnerability was found in SourceCodester Employee Task Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file edit-task.php. The manipulation of the… [...]

CVE-2023-0902 | SourceCodester Simple Food Ordering System 1.0 process_order.php order cross site scripting

23 March 2023

A vulnerability was found in SourceCodester Simple Food Ordering System 1.0. It has been classified as problematic. This affects an unknown part of the file process_order.php. The manipulation of the… [...]

CVE-2022-48115 | jspreadsheet up to 4.5.x Dropdown Menu cross site scripting (ID 1587)

23 March 2023

A vulnerability was found in jspreadsheet up to 4.5.x and classified as problematic. Affected by this issue is some unknown functionality of the component Dropdown Menu. The manipulation leads to… [...]

CVE-2021-33983 | Dvidelabs flatcc 0.6.0 error_ref_sym buffer overflow (ID 188)

23 March 2023

A vulnerability has been found in Dvidelabs flatcc 0.6.0 and classified as critical. Affected by this vulnerability is the function error_ref_sym. The manipulation leads to buffer overflow. This vulnerability is… [...]

CVE-2021-32441 | Exponent-CMS 2.6.x selectValue sql injection (ID 1542)

23 March 2023

A vulnerability, which was classified as critical, was found in Exponent-CMS 2.6.x. Affected is the function selectValue. The manipulation leads to sql injection. This vulnerability is traded as CVE-2021-32441. The… [...]

CVE-2023-27054

22 March 2023

A cross-site scripting (XSS) vulnerability in MiroTalk P2P before commit f535b35 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter under… [...]

CVE-2023-28685

22 March 2023

Jenkins AbsInt a³ Plugin 1.1.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks. (CVSS:0.0) (Last Update:2023-03-22) [...]

CVE-2023-1557

22 March 2023

A vulnerability was found in SourceCodester E-Commerce System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /ecommerce/admin/user/controller.php?action=edit of the component… [...]

CVE-2023-25688

22 March 2023

IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL… [...]

CVE-2023-28005

22 March 2023

A vulnerability in Trend Micro Endpoint Encryption Full Disk Encryption version 6.0.0.3204 and below could allow an attacker with physical access to an affected device to bypass Microsoft Windows? Secure… [...]

CVE-2023-25593

22 March 2023

Vulnerabilities within the web-based management interface of ClearPass Policy Manager could allow a remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the interface. A… [...]

CVE-2023-25595

22 March 2023

A vulnerability exists in the ClearPass OnGuard Ubuntu agent that allows for an attacker with local Ubuntu instance access to potentially obtain sensitive information. Successful Exploitation of this vulnerability allows… [...]

CVE-2022-45634

22 March 2023

An issue discovered in MEGAFEIS, BOFEI DBD+ Application for IOS & Android v1.4.4 allows authenticated attacker to gain access to sensitive account information (CVSS:0.0) (Last Update:2023-03-22) [...]

CVE-2023-27857

22 March 2023

In affected versions, a heap-based buffer over-read condition occurs when the message field indicates more data than is present in the message field in Rockwell Automation's ThinManager ThinServer. An unauthenticated… [...]

CVE-2023-27856

22 March 2023

In affected versions, path traversal exists when processing a message of type 8 in Rockwell Automation's ThinManager ThinServer. An unauthenticated remote attacker can exploit this vulnerability to download arbitrary files… [...]

CVE-2023-28725

22 March 2023

General Bytes Crypto Application Server (CAS) 20230120, as distributed with General Bytes BATM devices, allows remote attackers to execute arbitrary Java code by uploading a Java application to the /batm/app/admin/standalone/deployments… [...]

CVE-2023-27855

22 March 2023

In affected versions, a path traversal exists when processing a message in Rockwell Automation's ThinManager ThinServer. An unauthenticated remote attacker could potentially exploit this vulnerability to upload arbitrary files to… [...]

CVE-2023-27100

22 March 2023

Improper restriction of excessive authentication attempts in the SSHGuard component of Netgate pfSense Plus software v22.05.1 and pfSense CE software v2.6.0 allows attackers to bypass brute force protection mechanisms via… [...]

CVE-2023-27060

22 March 2023

LightCMS v1.3.7 was discovered to contain a remote code execution (RCE) vulnerability via the image:make function. (CVSS:0.0) (Last Update:2023-03-22) [...]

CVE-2023-25591

22 March 2023

A vulnerability in the web-based management interface of ClearPass Policy Manager could allow a remote attacker authenticated with low privileges to access sensitive information. A successful exploit allows an attacker… [...]

CVE-2022-37940

22 March 2023

Potential security vulnerabilities have been identified in the HPE FlexFabric 5700 Switch Series. These vulnerabilities could be remotely exploited to allow host header injection and URL redirection. HPE has made… [...]

CVE-2023-25592

22 March 2023

CVE-2023-1168

22 March 2023

An authenticated remote code execution vulnerability exists in the AOS-CX Network Analytics Engine. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user… [...]

CVE-2023-25594

22 March 2023

A vulnerability in the web-based management interface of ClearPass Policy Manager allows an attacker with read-only privileges to perform actions that change the state of the ClearPass Policy Manager instance.… [...]

CVE-2023-1370

22 March 2023

[Json-smart](https://netplex.github.io/json-smart/) is a performance focused, JSON processor lib. When reaching a ‘[‘ or ‘{‘ character in the JSON input, the code parses an array or an object respectively. It was… [...]

CVE-2023-25596

22 March 2023

A vulnerability exists in ClearPass Policy Manager that allows for an attacker with administrative privileges to access sensitive information in a cleartext format. A successful exploit allows an attacker to… [...]

CVE-2023-1436

22 March 2023

An infinite recursion is triggered in Jettison when constructing a JSONArray from a Collection that contains a self-reference in one of its elements. This leads to a StackOverflowError exception being… [...]

CVE-2023-25924

22 March 2023

IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 could allow an authenticated user to perform actions that they should not have access to due to improper… [...]

CVE-2023-25069

22 March 2023

TXOne StellarOne has an improper access control privilege escalation vulnerability in every version before V2.0.1160 that could allow a malicious, falsely authenticated user to escalate his privileges to administrator level.… [...]

CVE-2023-28083

22 March 2023

A remote Cross-site Scripting vulnerability was discovered in HPE Integrated Lights-Out 6 (iLO 6), Integrated Lights-Out 5 (iLO 5) and Integrated Lights-Out 4 (iLO 4). HPE has provided software updates… [...]

CVE-2023-28759

23 March 2023

An issue was discovered in Veritas NetBackup before 10.0. A vulnerability in the way NetBackup validates the path to a DLL prior to loading may allow a lower level user… [...]

CVE-2023-28758

23 March 2023

An issue was discovered in Veritas NetBackup before 8.3.0.2. BPCD allows an unprivileged user to specify a log file path when executing a NetBackup command. This can be used to… [...]

CVE-2022-30037

23 March 2023

XunRuiCMS v4.3.3 to v4.5.1 vulnerable to PHP file write and CMS PHP file inclusion, allows attackers to execute arbitrary php code, via the add function in cron.php. [...]

CVE-2023-26496

23 March 2023

An issue was discovered in Samsung Baseband Modem Chipset for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, and Exynos Auto T5124. Memory corruption can occur due to… [...]

CVE-2023-23192

23 March 2023

IS Decisions UserLock MFA 11.01 is vulnerable to authentication bypass using scheduled task. [...]

CVE-2023-24367

23 March 2023

Temenos T24 Release 20 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the routineName parameter at genrequest.jsp. [...]

CVE-2023-27249

23 March 2023

swfdump v0.9.2 was discovered to contain a heap buffer overflow in the function swf_GetPlaceObject at swfobject.c. [...]

CVE-2023-28470

23 March 2023

In Couchbase Server 5 through 7 before 7.1.4, the nsstats endpoint is accessible without authentication. [...]

CVE-2023-26498

23 March 2023

An issue was discovered in Samsung Baseband Modem Chipset for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, Exynos Auto T5126. Memory corruption can occur due to improper… [...]

CVE-2023-26088

23 March 2023

In Malwarebytes before 4.5.23, a symbolic link may be used delete any arbitrary file on the system by exploiting the local quarantine system. It can also lead to privilege escalation… [...]

CVE-2023-24655

23 March 2023

Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the name parameter under the Profile Update function. [...]

CVE-2022-28494

23 March 2023

TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 is discovered to contain a command injection vulnerability in the setUpgradeFW function via the filename parameter. This vulnerability allows attackers to execute arbitrary commands via… [...]

CVE-2023-27100

22 March 2023

CVE-2022-43863

22 March 2023

IBM QRadar SIEM 7.4 and 7.5 is vulnerable to privilege escalation, allowing a user with some admin capabilities to gain additional admin capabilities. IBM X-Force ID: 239425. [...]

CVE-2023-27054

22 March 2023

CVE-2023-27060

22 March 2023

LightCMS v1.3.7 was discovered to contain a remote code execution (RCE) vulnerability via the image:make function. [...]

CVE-2023-28667

22 March 2023

The Lead Generated WordPress Plugin, version [...]

CVE-2023-28666

22 March 2023

The InPost Gallery WordPress plugin, in versions < 2.2.2, is affected by a reflected cross-site scripting vulnerability in the 'imgurl' parameter to the add_inpost_gallery_slide_item action, which can only be triggered… [...]

CVE-2023-28665

22 March 2023

The Woo Bulk Price Update WordPress plugin, in versions < 2.2.2, is affected by a reflected cross-site scripting vulnerability in the 'page' parameter to the techno_get_products action, which can only… [...]

CVE-2023-28664

22 March 2023

The Meta Data and Taxonomies Filter WordPress plugin, in versions < 1.3.1, is affected by a reflected cross-site scripting vulnerability in the 'tax_name' parameter of the mdf_get_tax_options_in_widget action, which can… [...]

CVE-2023-28659

22 March 2023

The Waiting: One-click Countdowns WordPress Plugin, version [...]

CVE-2023-28432

22 March 2023

Minio is a Multi-Cloud Object Storage framework. In a cluster deployment starting with RELEASE.2019-12-17T23-16-33Z and prior to RELEASE.2023-03-20T20-16-18Z, MinIO returns all environment variables, including `MINIO_SECRET_KEY` and `MINIO_ROOT_PASSWORD`, resulting in information… [...]

CVE-2023-0386

22 March 2023

A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernelâ€™s OverlayFS subsystem in how… [...]

CVE-2023-28434

22 March 2023

Minio is a Multi-Cloud Object Storage framework. Prior to RELEASE.2023-03-20T20-16-18Z, an attacker can use crafted requests to bypass metadata bucket name checking and put an object into any bucket while… [...]

CVE-2023-28433

22 March 2023

Minio is a Multi-Cloud Object Storage framework. All users on Windows prior to version RELEASE.2023-03-20T20-16-18Z are impacted. MinIO fails to filter the `\` character, which allows for arbitrary object placement… [...]

VU#782720: TCG TPM2.0 implementations vulnerable to memory corruption

28 February 2023

Overview Two buffer overflow vulnerabilities were discovered in the Trusted Platform Module (TPM) 2.0 reference library specification, currently at Level 00, Revision 01.59 November 2019. An attacker who has access… [...]

VU#572615: Vulnerabilities in TP-Link routers, WR710N-V1-151022 and Archer C5 V2

17 January 2023

Overview TP-Link router WR710N-V1-151022 running firmware published 2015-10-22 and Archer-C5-V2-160201 running firmware published 2016-02-01 are susceptible to two vulnerabilities: A buffer overflow during HTTP Basic Authentication allowing a remote attacker… [...]

VU#986018: New Netcomm router models NF20MESH, NF20, and NL1902 vulnerabilities

17 January 2023

Overview Netcomm router models NF20MESH, NF20, and NL1902 running software versions earlier than R6B035 contain two vulnerabilities. The first is an authentication bypass vulnerability that allows an unauthenticated user to… [...]

VU#709991: Netatalk contains multiple error and memory management vulnerabilities

16 November 2022

Overview There are six new vulnerabilities in the latest release of Netatalk (3.1.12) that could allow for Remote Code Execution as well as Out-of-bounds Read. Description Below are the new… [...]

VU#434994: Multiple race conditions due to TOCTOU flaws in various UEFI Implementations

8 November 2022

Overview Multiple Unified Extensible Firmware Interface (UEFI) implementations are vulnerable to code execution in System Management Mode (SMM) by an attacker who gains administrative privileges on the local machine. An… [...]

VU#794340: OpenSSL 3.0.0 to 3.0.6 decodes some punycode email addresses in X.509 certificates improperly

1 November 2022

Overview Two buffer overflow vulnerabilities were discovered in OpenSSL versions 3.0.0 through 3.0.6. These vulnerabilities were introduced in version 3.0.0 with the inclusion of support for punycode email address parsing… [...]

VU#730793: Heimdal Kerberos vulnerable to remotely triggered NULL pointer dereference

7 October 2022

Overview The Heimdal Software Kerberos 5 implementation is vulnerable to a null pointer dereferance. An attacker with network access to an application that depends on the vulnerable code path can… [...]

VU#915563: Microsoft Exchange vulnerable to server-side request forgery and remote code execution.

3 October 2022

Overview Microsoft Exchange Server 2019, Exchange Server 2016 and Exchange Server 2013 are vulnerable to a server-side request forgery (SSRF) attack and remote code execution. An authenticated attacker can use… [...]

VU#855201: L2 network security controls can be bypassed using VLAN 0 stacking and/or 802.3 headers

27 September 2022

Overview Layer-2 (L2) network security controls provided by various devices, such as switches, routers, and operating systems, can be bypassed by stacking Ethernet protocol headers. An attacker can send crafted… [...]

VU#309662: Signed third party UEFI bootloaders are vulnerable to Secure Boot bypass

11 August 2022

Overview A security feature bypass vulnerability exists in signed 3rd party UEFI bootloaders that allows bypass of the UEFI Secure Boot feature. An attacker who successfully exploits this vulnerability can… [...]

VU#495801: muhttpd versions 1.1.5 and earlier are vulnerable to path traversal

4 August 2022

Overview Versions 1.1.5 and earlier of the mu HTTP deamon (muhttpd) are vulnerable to path traversal via crafted HTTP request from an unauthenticated user. This vulnerability can allow unauthenticated users… [...]

VU#142546: SMA Technologies OpCon UNIX agent adds the same SSH key to all installations

21 June 2022

Overview SMA Technologies OpCon UNIX agent adds the same SSH key on every installation and subsequent updates. An attacker with access to the private key can gain root access on… [...]

VU#473698: uClibc, uClibc-ng libraries have monotonically increasing DNS transaction ID

9 May 2022

Overview The uClibc and uClibc-ng libraries, prior to uClibc-ng 1.0.41, are vulnerable to DNS cache poisoning due to the use of predicatble DNS transaction IDs when making DNS requests. This… [...]

VU#730007: Tychon is vulnerable to privilege escalation due to OPENSSLDIR location

28 April 2022

Overview Tychon contains a privilege escalation vulnerability due to the use of an OPENSSLDIR variable that specifies a location where an unprivileged Windows user may be able to place files.… [...]

VU#411271: Qt allows for privilege escalation due to hard-coding of qt_prfxpath value

28 April 2022

Overview Prior to version 5.14, Qt hard-codes the qt_prfxpath value to a fixed value, which may lead to privilege escalation vulnerabilities in Windows software that uses Qt. Description Prior to… [...]

ISC Stormcast For Thursday, March 23rd, 2023 https://isc.sans.edu/podcastdetail.html?id=8422, (Thu, Mar 23rd)

23 March 2023

Windows 11 Snipping Tool Privacy Bug: Inspecting PNG Files, (Wed, Mar 22nd)

22 March 2023

In today&#39;s Stormcast, Johannes discussed a privacy issue with Windows 11&#39;s snipping tool. [...]

ISC Stormcast For Wednesday, March 22nd, 2023 https://isc.sans.edu/podcastdetail.html?id=8420, (Wed, Mar 22nd)

22 March 2023

String Obfuscation: Character Pair Reversal, (Tue, Mar 21st)

21 March 2023

I found a malicious .LNK file on MalwareBazaar that contains an obfuscated URL. The obfuscation is a classic one, with a twist: string reversal, not per character, but per character… [...]

ISC Stormcast For Tuesday, March 21st, 2023 https://isc.sans.edu/podcastdetail.html?id=8418, (Tue, Mar 21st)

21 March 2023

From Phishing Kit To Telegram... or Not!, (Mon, Mar 20th)

20 March 2023

Phishing kits are not new, they are plenty in the wild, and my honeypot collects many samples daily. Usually, a phishing kit will collect credentials and send them to a… [...]

ISC Stormcast For Monday, March 20th, 2023 https://isc.sans.edu/podcastdetail.html?id=8416, (Mon, Mar 20th)

20 March 2023

Old Backdoor, New Obfuscation, (Sat, Mar 18th)

18 March 2023

When you&#x27re hunting, sometimes you feel lucky because you spotted something that looks brand new, but sometimes it&#x27s not new orâ€¦ the code has been changed to bypass existing detections.… [...]

ISC Stormcast For Friday, March 17th, 2023 https://isc.sans.edu/podcastdetail.html?id=8414, (Fri, Mar 17th)

17 March 2023

Simple Shellcode Dissection, (Thu, Mar 16th)

16 March 2023

Most people will never execute a suspicious program or â€œexecutableâ€. Also, most of them cannot be delivered directly via email. Most antispam and antivirus solutions block them. But, then, how… [...]

Invitation to the World Cryptologic Competition 2023

22 March 2023

Posted by Competition Administrator on Mar 21The WCC 2023 is a fully-online and open competition using GitHub. The language of the competition is English. The WCC 2023 has a total… [...]

Insecure python cgi documentation and tutorials are vulnerable to XSS.

22 March 2023

Posted by Georgi Guninski on Mar 21Is there low hanging fruit for the following observation? The documentation of the python cgi module is vulnerable to XSS (cross site scripting) https://docs.python.org/3/library/cgi.html… [...]

Re: Microsoft PlayReady security research

22 March 2023

Posted by Adam Gowdiak on Mar 21Hello, I feel obliged to provide additional comments to this paragraph as I start to believe that CANAL+ might not deserve sole blame here...… [...]

Re: Defense in depth -- the Microsoft way (part 83): instead to fix even their most stupid mistaskes, they spill barrels of snakeoil to cover them (or just leave them as-is)

22 March 2023

Posted by Arik Seils on Mar 21Hi there, One can use the Metasploit Framework Module post/windows/local/bypassua _fodhelper to achieve this. Greetings from Germany, A.Seils 17.03.2023 06:26:56 Stefan Kanthak : [...]

Re: Microsoft PlayReady security research

21 March 2023

Posted by Security Explorations on Mar 21Hello, I feel obliged to provide additional comments to this paragraph as I start to believe that CANAL+ might not deserve sole blame here...… [...]

Defense in depth -- the Microsoft way (part 83): instead to fix even their most stupid mistaskes, they spill barrels of snakeoil to cover them (or just leave them as-is)

17 March 2023

Posted by Stefan Kanthak on Mar 16Hi @ll, with Windows 2000, Microsoft virtualised the [HKEY_CLASSES_ROOT] registry branch: what was just an alias for [HKEY_LOCAL_MACHINE\SOFTWARE\Classes] before became the overlay of [HKEY_LOCAL_MACHINE\SOFTWARE\Classes]… [...]

[CFP] Security BSides Ljubljana 0x7E7 | June 16, 2023

17 March 2023

Posted by Andraz Sraka on Mar 16MMMMMMMMMMMMMMMMNmddmNMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMM MMN..-..--+MMNy:...-.-/yNMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMM MMy..ymd-.:Mm::-:osyo-..-mMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMM MM:..---.:dM/..+NNyyMN/..:MMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMM Mm../dds.-oy.-.dMh--mMds++MMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMM My:::::/ydMmo..-hMMMmo//omMs/+Mm+++++shNMN+//+//+oMNy+///ohM MMMs//yMNo+hMh---m:-:hy+sMN..+Mo..os+.-:Ny--ossssdN-.:yyo+mM... [...]

Full Disclosure - Fastly

12 March 2023

Posted by Andrey Stoykov on Mar 11Correspondence from Fastly declined to comment regarding new discovered vulnerabilities within their website. Poor practices regarding password changes. 1. Reset user password 2. Access… [...]

Full Disclosure - Shopify Application

12 March 2023

Posted by Andrey Stoykov on Mar 11Correspondence from Shopify declined to comment regarding new discovered vulnerabilities within their website. Although 'frontend' vulnerabilities are considered out of scope, person/tester foundhimself a… [...]

[CVE-2023-25355/25356] No fix available - vulnerabilities in CoreDial sipXcom sipXopenfire

7 March 2023

Posted by Systems Research Group via Fulldisclosure on Mar 06 [...]

SEC Consult SA-20230306-0 :: Multiple Vulnerabilities in Arris DG3450 Cable Gateway

7 March 2023

Posted by SEC Consult Vulnerability Lab, Research via Fulldisclosure on Mar 06SEC Consult Vulnerability Lab Security Advisory < 20230306-0 > ======================================================================= title: Multiple Vulnerabilities product: Arris DG3450 Cable Gateway vulnerable… [...]

OpenBSD overflow

7 March 2023

Posted by Erg Noor on Mar 06Hi, Fun OpenBSD bug. ip_dooptions() will allow IPOPT_SSRR with optlen = 2. save_rte() will set isr_nhops to very large value, which will cause overflow… [...]

SEC Consult SA-20230228-0 :: OS Command Injectionin Barracuda CloudGen WAN

3 March 2023

Posted by SEC Consult Vulnerability Lab, Research via Fulldisclosure on Mar 02SEC Consult Vulnerability Lab Security Advisory < 20230228-0 > ======================================================================= title: OS Command Injection product: Barracuda CloudGen WAN vulnerable… [...]

SRP on Windows 11

3 March 2023

Posted by Andy Ful on Mar 02The correction to: Full Disclosure: Defense in depth -- the Microsoft way (part 82): INVALID/BOGUS AppLocker rules disable SAFER on Windows 11 22H2 (seclists.org)… [...]

NetBSD overflow

3 March 2023

Posted by Erg Noor on Mar 02Hi, Trivial overflow in hfslib_reada_node_offset, while loop has no range checks. |size_t hfslib_reada_node_offsets(void* in_bytes, uint16_t* out_offset_array) { void* ptr; if (in_bytes == NULL ||… [...]

Adobe Connect 11.4.5 / 12.1.5 Local File Disclosure

22 March 2023

Topic: Adobe Connect 11.4.5 / 12.1.5 Local File Disclosure Risk: Medium Text:# Title: adobe connect - Local File Disclosure / Download [security feature bypass vulnerability] # Author: h4shur # date:20... [...]

101+ News Portal 1.0 SQL Injection

22 March 2023

Topic: 101+ News Portal 1.0 SQL Injection Risk: Medium Text:# Exploit Title: 101+ News Portal - SQLi # Date: 19/03/2023 # Exploit Author: Abdulhakim Öner # Vendor Homepage: https://ww... [...]

Yoga Class Registration System 1.0 Cross Site Scripting

22 March 2023

Topic: Yoga Class Registration System 1.0 Cross Site Scripting Risk: Low Text:# Exploit Title: Yoga Class Registration System - Cross Site Scripting Vulnerability (Authenticated) # Date: 19/03/2023 # Exp... [...]

Yoga Class Registration 1.0 SQL Injection

22 March 2023

Topic: Yoga Class Registration 1.0 SQL Injection Risk: Medium Text:## Title: Yoga Class Registration -1.0-2023 - Multiple SQLi ## Author: nu11secur1ty ## Date: 02.27.2023 ## Vendor: https://g... [...]

Linksys AX3200 V1.1.00 Command Injection

22 March 2023

Topic: Linksys AX3200 V1.1.00 Command Injection Risk: Medium Text:# Exploit Title: Linksys AX3200 V1.1.00 - Command Injection # Date: 2022-09-19 # Exploit Author: Ahmed Alroky # Author: Link... [...]

LARAVEL VEBTO MULTIPLE FILE UPLOAD

19 March 2023

Topic: LARAVEL VEBTO MULTIPLE FILE UPLOAD Risk: Medium Text:# Exploit Title: LARAVEL VEBTO MULTIPLE FILE UPLOAD # Description: THE ALL PRODUCT FROM VEBTO IS VULNERABLE TO UPLOAD THE MALI... [...]

Microsoft User Account Control Nuances

19 March 2023

Topic: Microsoft User Account Control Nuances Risk: Medium Text:Hi @ll, with Windows 2000, Microsoft virtualised the [HKEY_CLASSES_ROOT] registry branch: what was just an alias for [HKEY_... [...]

Microsoft SQL Server 2014 / 2016 / 2017 / 2019 / 2022 Audit Logging Failure

19 March 2023

Topic: Microsoft SQL Server 2014 / 2016 / 2017 / 2019 / 2022 Audit Logging Failure Risk: Medium Text:Title: Microsoft SQL Server Password Hash Exposure Product: Database Manufacturer: Microsoft ... [...]

Bitbucket Environment Variable Remote Command Injection

19 March 2023

Topic: Bitbucket Environment Variable Remote Command Injection Risk: High Text:## # This module requires Metasploit: https://metasploit.com/download # Current source: https://github.com/rapid7/metasploit-... [...]

Riello UPS Restricted Shell Bypass

19 March 2023

Topic: Riello UPS Restricted Shell Bypass Risk: Medium Text:I. VULNERABILITY - Riello UPS systems allow to easily escape the configuration shell and get access to the operating ... [...]

Medicine Tracker System - XSS

15 March 2023

Topic: Medicine Tracker System - XSS Risk: Low Text:# Title : Medicine Tracker System - XSS # Author : @Eawhitehat - Eren Arslan # Demo available : https://www.sourcecodester.co... [...]

WordPress Profile Builder 3.9.0 Missing Authorization

15 March 2023

Topic: WordPress Profile Builder 3.9.0 Missing Authorization Risk: Medium Text:Description: Profile Builder – User Profile & User Registration Forms < = 3.9.0 – Sensitive Information Disclosure via Short... [...]

Oracle DB Broken PDB Isolation / Metadata Exposure

15 March 2023

Topic: Oracle DB Broken PDB Isolation / Metadata Exposure Risk: Medium Text:Title: CVE-2021-2173 – PDB Isolation is broken through metadata exposure Product: Database Manufacturer: ... [...]

Wondershare Dr Fone 12.9.6 Weak Permissions / Privilege Escalation

14 March 2023

Topic: Wondershare Dr Fone 12.9.6 Weak Permissions / Privilege Escalation Risk: Medium Text:Executive Summary: Product Name: Wondershare Dr. Fone Vendor Home Page: https://drfone.wondershare.com Affected Version(s... [...]

Apache Tomcat Privilege Escalation

14 March 2023

Topic: Apache Tomcat Privilege Escalation Risk: Medium Text: # # This exploit sample shows how an exploit module could be written to exploit # a bug in a command on… [...]

Web-Based Student Clearance System - XXE Injection

14 March 2023

Topic: Web-Based Student Clearance System - XXE Injection Risk: High Text:# Title: Web-Based Student Clearance System - XXE Injection # Author: @Eawhitehat - Eren Arslan # Demo available : https://ww... [...]

Employee Payslip - XSS Polyglots

14 March 2023

Topic: Employee Payslip - XSS Polyglots Risk: Low Text:# Title: Employee Payslip - XSS Polyglots # Author: @Eawhitehat - Eren Arslan # Demo available : https://www.sourcecodester.c... [...]

Web-Based Student Clearance System - XXE Injection

14 March 2023

Topic: Web-Based Student Clearance System - XXE Injection Risk: High Text:# Title : Web-Based Student Clearance System - XXE Injection # Author : @Eawhitehat - Eren Arslan # Demo available… [...]

Shopify Cross Site Scripting

14 March 2023

Topic: Shopify Cross Site Scripting Risk: Low Text:Correspondence from Shopify declined to comment regarding new discovered vulnerabilities within their website. Although 'fr... [...]

Smart Hospital : Hospital Management System - Multiple XSS

12 March 2023

Topic: Smart Hospital : Hospital Management System - Multiple XSS Risk: Low Text:# Title: Smart Hospital : Hospital Management System - Multiple XSS # Author: @Eawhitehat - Eren Arslan #… [...]

Real Time Automation 460MCBS 5.2.14 Cross Site Scripting

12 March 2023

Topic: Real Time Automation 460MCBS 5.2.14 Cross Site Scripting Risk: Low Text:Exploit Title: Real Time Automation 460MCBS Cross Site Scripting (XSS) Date: 2023-03-09 Exploit Author: Yehia Elghaly Vendo... [...]

No Title

12 March 2023

Topic: Risk: Low Text:... [...]

VX Search 13.8 Unquoted Service Path

12 March 2023

Topic: VX Search 13.8 Unquoted Service Path Risk: Medium Text:Executive Summary: Product Name: VX Search Vendor Home Page: https://www.vxsearch.com/ Affected Version(s): VX Search v13... [...]

Webpower UPS 5.53 Denial Of Service

12 March 2023

Topic: Webpower UPS 5.53 Denial Of Service Risk: Medium Text:# Exploit Title: Webpower UPS v5.53 HTTP Denial of Service # Date: 2023-03-09 # Exploit Author: Yehia Elghaly # Vendor Homep... [...]

Online Graduate Tracer System for College of ICT Alumni - Vulnerability SQLi + XSS

12 March 2023

Topic: Online Graduate Tracer System for College of ICT Alumni - Vulnerability SQLi + XSS Risk: Medium Text:# Title: Online Graduate Tracer System for College of ICT Alumni - Vulnerability… [...]

Oracle9: ELSA-2023-1407: thunderbird Important Security Update

23 March 2023

The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network: [...]

Oracle8: ELSA-2023-1403: thunderbird Important Security Update

23 March 2023

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network: [...]

Oracle8: ELSA-2023-1405: openssl security Important Security Update

23 March 2023

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network: [...]

Oracle7: ELSA-2023-1401: thunderbird Important (aarch64) Security Update

23 March 2023

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network: [...]

Oracle7: ELSA-2023-1401: thunderbird Important Security Update

23 March 2023

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network: [...]

Fedora 37: tar 2023-123778d70d

23 March 2023

Fix for CVE-2022-48303 [...]

1.424

23 March 2023

Newly Added (3)Exposure of Sensitive Information to an Unauthorized Actor Vulnerability for WellinTech KingHistorianSigned to Unsigned Conversion Error Vulnerability for WellinTech KingHistorianSecurity Update 2023-03-21 from Google ChromeModified (1)Microsoft Outlook Elevation… [...]

1.423

22 March 2023

Newly Added (2)Command Injection Vulnerability for Docker DesktopOut-of-bounds Read Vulnerability for NVIDIA CUDA Toolkit [...]

1.422

21 March 2023

Newly Added (1)Improper Protection of Alternate Path Vulnerability for Docker DesktopModified (1)Microsoft Outlook Elevation of Privilege Vulnerability [...]

1.421

18 March 2023

Modified (1)Multiple Security Updates for Trend Micro Apex One [...]

1.420

17 March 2023

Newly Added (4)Incorrect Calculation Vulnerability for Go Programming LanguageImproper Access Control Vulnerability for Devolutions ServerUncontrolled Search Path Element Vulnerability for Trend Micro Apex OneSecurity Vulnerabilities fixed in Thunderbird 102.9 [...]

1.419

16 March 2023

Newly Added (14)Azure Service Fabric Spoofing VulnerabilityUntrusted Search Path Vulnerability for GitPath Traversal Vulnerability for GitLink Following Vulnerability for GitMicrosoft Edge (Chromium-based) Webview2 Spoofing VulnerabilityDLL Side Loading Vulnerability for GitUse… [...]

1.418

15 March 2023

Newly Added (67)Microsoft Windows Point-to-Point Protocol over Ethernet (PPPoE) Elevation of Privilege VulnerabilityMicrosoft Windows Bluetooth Driver Elevation of Privilege VulnerabilityMicrosoft HTTP Protocol Stack Remote Code Execution VulnerabilityMicrosoft Windows BrokerInfrastructure Service… [...]

1.417

14 March 2023

Newly Added (6)Missing Authentication for Critical Function Vulnerability for Veeam Backup and ReplicationNULL Pointer Dereference Vulnerability for NVIDIA CUDA ToolkitUncontrolled Resource Consumption Vulnerability for Go Programming LanguageUncontrolled Resource Consumption Vulnerability… [...]

1.416

11 March 2023

Newly Added (1)Visual Studio Code Vulnerability CVE-2020-1416 [...]

1.415

10 March 2023

Newly Added (3)Uncontrolled Resource Consumption Vulnerability for Go Programming LanguageCross-site Scripting Vulnerability for GrafanaOSSCross-site Scripting Vulnerability for GrafanaOSS [...]

CVE-2022-36123 – A vulnerability in Linux kernel mainline v5.18-rc1 through v5.19-rc6 does not clear statically allocated variables in the block starting symbol (.bss) due to a failed early_xen_iret_patch leading to an asm_exc_page_fault, or arbitrary code execution

29 July 2022

Title A vulnerability in Linux kernel mainline v5.18-rc1 through v5.19-rc6 does not clear statically allocated variables in the block starting symbol (.bss) due to a failed early_xen_iret_patch leading to an… [...]

CVE-2022-35414 – QEMU 4.1.50 through QEMU 7.0.0 – address_space_translate_for_iotlb allows a guest user to crash a host resulting in a denial of service.

11 July 2022

Title CVE-2022-35414 – QEMU 4.1.50 through QEMU 7.0.0 – address_space_translate_for_iotlb allows a guest user to crash a host resulting in a denial of service. CVE ID CVE-2022-35414 CVSS Score N/A… [...]

Sick Codes @ DEF CON 30 August 11-14 2022!

30 June 2022

Pleased to announce we will be speaking at this year’s DEF CON 30 conference in Las Vegas, which will be an in-person event! You can purchase tickets at: https://defcon.org/ and… [...]

CVE-2021-33318 IpMatcher v1.0.4.1 and below for .NET Core 2.0 and .NET Framework 4.5.2. incorrectly validates octal & hexadecimal input data, leading to indeterminate SSRF, LFI, RFI, and DoS vectors.

15 May 2022

Title CVE-2021-33318 IpMatcher v1.0.4.1 and below for .NET Core 2.0 and .NET Framework 4.5.2. incorrectly validates octal & hexadecimal input data, leading to indeterminate SSRF, LFI, RFI, and DoS vectors.… [...]

CVE-2022-28345 – Signal client for iOS version 5.33.2 and below are vulnerable to RTLO Injection URI Spoofing using malicious URLs such as gepj.net/selif#/moc.elpmaxe which would appear as example.com/#files/ten.jpeg

14 April 2022

Title CVE-2022-28345 – Signal client for iOS version 5.33.2 and below are vulnerable to RTLO Injection URI Spoofing using malicious URLs such as gepj.net/selif#/moc.elpmaxe which would appear as example.com/#files/ten.jpeg CVE… [...]

Exploit: RTLO Injection URI Spoofing: WhatsApp, iMessage (Messages app), Instagram, Facebook Messenger. CVE-2020-20093, CVE-2020-20094, CVE-2020-20095, CVE-2020-20096

24 March 2022

The post Exploit: RTLO Injection URI Spoofing: WhatsApp, iMessage (Messages app), Instagram, Facebook Messenger. CVE-2020-20093, CVE-2020-20094, CVE-2020-20095, CVE-2020-20096 appeared first on Sick Codes - Security Research, Hardware & Software Hacking,… [...]

Fix DIVD-2022-00002: Grafana versions 8.0.0-beta1 through 8.3.0 installed via dpkg/deb package. Mitigation:

21 January 2022

In response to the amazing work by @j0v0x0 “Jordy Versmissen” from Detectify, the double-amazing Dutch Institute for Vulnerability Disclosure, known as DIVD CSIRT, contacted thousands of ISP/IP/Webmasters to resolve the… [...]

CVE-2021-33669 – SAP Mobile SDK Certificate Provider – Insecure Temporary File Storage – Potential Symlink Attack & Denial of Service

4 October 2021

Title CVE-2021-33669 – SAP Mobile SDK Certificate Provider – Insecure Temporary File Storage – Potential Symlink Attack & Denial of Service CVE ID CVE-2021-33669 CVSS Score 7.8 Internal ID SICK-2021-032… [...]

CVE-2021-39246 – Tor Browser through 10.5.6 and 11.x through 11.0a4 allows a correlation attack excessive verbose logging – Windows, macOS, Linux

24 September 2021

Title CVE-2021-39246 – Tor Browser through 10.5.6 and 11.x through 11.0a4 allows a correlation attack excessive verbose logging – Windows, macOS, Linux CVE ID CVE-2021-39246 CVSS Score 6.1 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N Internal… [...]

Sick Codes Speaking @ CornCon Cyber Security Conference September 10-11, 2021 in Bettendorf, Iowa!

27 August 2021

Come see us live at CornCon September 10-11th 2021, discussing Ag Security, Supply Chain Security, and of course, tractor hacking. CornCon – Season 7 September 10-11, 2021 Event details/Tickets: https://corncon.net/… [...]

ESB-2023.1711 - [Ubuntu] Apache HTTP Server: CVSS (Max): 9.8

23 March 2023

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.1711 USN-5942-2: Apache HTTP Server vulnerability 23 March 2023 =========================================================================== AusCERT Security Bulletin Summary --------------------------------- Product: Apache HTTP… [...]

ESB-2023.1724 - [Cisco] Cisco IOS XE Software: CVSS (Max): 4.4

23 March 2023

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.1724 Cisco IOS XE Software Privilege Escalation Vulnerability 23 March 2023 =========================================================================== AusCERT Security Bulletin Summary --------------------------------- Product:… [...]

ESB-2023.1715 - [Cisco] Cisco Access Point Software: CVSS (Max): 4.6

23 March 2023

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.1715 Cisco Access Point Software Command Injection Vulnerability 23 March 2023 =========================================================================== AusCERT Security Bulletin Summary --------------------------------- Product:… [...]

ESB-2023.1713 - [Ubuntu] GitPython: CVSS (Max): 9.8

23 March 2023

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.1713 USN-5968-1: GitPython vulnerability 23 March 2023 =========================================================================== AusCERT Security Bulletin Summary --------------------------------- Product: GitPython Publisher: Ubuntu Operating… [...]

ESB-2023.1719 - [Cisco] Cisco DNA Center: CVSS (Max): 4.3

23 March 2023

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.1719 Cisco DNA Center Information Disclosure Vulnerability 23 March 2023 =========================================================================== AusCERT Security Bulletin Summary --------------------------------- Product: DNA… [...]

ESB-2023.1717 - [Cisco] Cisco Adaptive Security Appliance and Firepower Threat Defense: CVSS (Max): 5.3

23 March 2023

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.1717 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Low-Entropy Keys Vulnerability 23 March 2023 ===========================================================================… [...]

ESB-2023.1731 - [Cisco] Cisco SD-WAN vManage Software: CVSS (Max): 6.5

23 March 2023

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.1731 Cisco SD-WAN vManage Software Cross-Site Request Forgery Vulnerability 23 March 2023 =========================================================================== AusCERT Security Bulletin Summary ---------------------------------… [...]

ESB-2023.1721 - [Cisco] Cisco IOS XE SD-WAN Software: CVSS (Max): 7.8

23 March 2023

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.1721 Cisco IOS XE SD-WAN Software Command Injection Vulnerability 23 March 2023 =========================================================================== AusCERT Security Bulletin Summary ---------------------------------… [...]

ESB-2023.1733 - [SUSE] curl: CVSS (Max): 5.8

23 March 2023

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.1733 Security update for curl 23 March 2023 =========================================================================== AusCERT Security Bulletin Summary --------------------------------- Product: curl Publisher: SUSE… [...]

ESB-2023.1732 - [SUSE] container-suseconnect: CVSS (Max): 7.5

23 March 2023

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.1732 Security update for container-suseconnect 23 March 2023 =========================================================================== AusCERT Security Bulletin Summary --------------------------------- Product: container-suseconnect Publisher: SUSE… [...]

ESB-2023.1734 - [SUSE] go1.18: CVSS (Max): 7.5

23 March 2023

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.1734 Security update for go1.18 23 March 2023 =========================================================================== AusCERT Security Bulletin Summary --------------------------------- Product: go1.18 Publisher: SUSE… [...]

ESB-2023.1735 - [SUSE] oracleasm: CVSS (Max): None

23 March 2023

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.1735 Security update for oracleasm 23 March 2023 =========================================================================== AusCERT Security Bulletin Summary --------------------------------- Product: oracleasm Publisher: SUSE… [...]

ESB-2023.1736 - [SUSE] oracleasm: CVSS (Max): None

23 March 2023

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.1736 Security update for oracleasm 23 March 2023 =========================================================================== AusCERT Security Bulletin Summary --------------------------------- Product: oracleasm Publisher: SUSE… [...]

ESB-2023.1723 - [Cisco] Cisco IOS XE Software: CVSS (Max): 7.8

23 March 2023

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.1723 Cisco IOS XE Software IOx Application Hosting Environment Privilege Escalation Vulnerability 23 March 2023 =========================================================================== AusCERT Security… [...]

ESB-2023.1730 - [Cisco] Cisco IOS and IOS XE Software IPv6 DHCP (DHCPv6) Relay and Server: CVSS (Max): 8.6

23 March 2023

ESB-2023.1722 - [Cisco] Cisco IOS XE Software: CVSS (Max): 8.6

23 March 2023

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.1722 Cisco IOS XE Software Fragmented Tunnel Protocol Packet Denial of Service Vulnerability 23 March 2023 =========================================================================== AusCERT… [...]

ESB-2023.1729 - [Cisco] Cisco IOS XE Software for Wireless LAN Controllers: CVSS (Max): 7.4

23 March 2023

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.1729 Cisco IOS XE Software for Wireless LAN Controllers HTTP Client Profiling Denial of Service Vulnerability 23 March… [...]

ESB-2023.1720 - [Cisco] Cisco DNA Cente: CVSS (Max): 8.0

23 March 2023

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.1720 Cisco DNA Center Privilege Escalation Vulnerability 23 March 2023 =========================================================================== AusCERT Security Bulletin Summary --------------------------------- Product: Cisco… [...]

ESB-2023.1728 - [Cisco] Cisco IOS XE Software for Wireless LAN Controllers: CVSS (Max): 6.8

23 March 2023

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.1728 Cisco IOS XE Software for Wireless LAN Controllers CAPWAP Join Denial of Service Vulnerability 23 March 2023… [...]

ESB-2023.1718 - [Cisco] Cisco products: CVSS (Max): 6.8

23 March 2023

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.1718 Cisco Adaptive Security Appliance Software, Firepower Threat Defense Software, IOS Software, and IOS XE Software IPv6 DHCP… [...]

ESB-2023.1727 - [Cisco] Cisco IOS XE Software for Cisco Catalyst 9300 Series: CVSS (Max): 6.1

23 March 2023

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.1727 Cisco IOS XE Software for Cisco Catalyst 9300 Series Switches Secure Boot Bypass Vulnerability 23 March 2023… [...]

ESB-2023.1716 - [Cisco] Cisco Access Point Software: CVSS (Max): 6.5

23 March 2023

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.1716 Cisco Access Point Software Denial of Service Vulnerability 23 March 2023 =========================================================================== AusCERT Security Bulletin Summary ---------------------------------… [...]

ESB-2023.1726 - [Cisco] Cisco IOS XE Software: CVSS (Max): 6.5

23 March 2023

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.1726 Cisco IOS XE Software Web UI Path Traversal Vulnerability 23 March 2023 =========================================================================== AusCERT Security Bulletin Summary… [...]

ESB-2023.1714 - [Cisco] Cisco Access Point Software: CVSS (Max): 7.4

23 March 2023

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.1714 Cisco Access Point Software Association Request Denial of Service Vulnerability 23 March 2023 =========================================================================== AusCERT Security Bulletin… [...]

ESB-2023.1725 - [Cisco] Cisco IOS XE Software: CVSS (Max): 8.6

23 March 2023

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.1725 Cisco IOS XE Software Virtual Fragmentation Reassembly Denial of Service Vulnerability 23 March 2023 =========================================================================== AusCERT Security… [...]

WiFi File Transfer v1.0.8 - Cross Site Scripting Vulnerabilities

17 October 2022

The vulnerability laboratory core research team discovered a multiple persistent cross site vulnerabilities in the WiFi ... [...]

Stripe Green Downloads 2.03 - Cross Site Web Vulnerability

17 October 2022

The vulnerability laboratory core research team discovered a persistent cross site vulnerability in the Stripe Green Dow... [...]

RRX IOB LP v1.0 - DNS Cache Snooping Vulnerability

11 October 2022

The vulnerability laboratory core research team discovered a dns snooping vulnerability in the Rhein Ruhr Express (RRX I... [...]

MapTool v1.11.5 - Cross Site Scripting Vulnerabilities

11 October 2022

The vulnerability laboratory core research team discovered a persistent web vulnerability in the official MapTool v1.11.... [...]

Vicidial v2.14-783a - Multiple XSS Web Vulnerabilities

11 October 2022

The vulnerability laboratory core research team discovered multiple client-site cross site scripting vulnerabilities in ... [...]

Webile v1.0.1 - Directory Traversal Web Vulnerability

10 October 2022

The vulnerability laboratory core research team discovered a directory traversal web vulnerability in the Webile v1.0.1 ... [...]

MapTool v1.11.5 - Denial of Service Vulnerability

10 October 2022

The vulnerability laboratory core research team discovered a remote denial of service vulnerability in the official MapT... [...]

Knap (APL) v3.1.3 - Persistent Cross Site Vulnerability

10 October 2022

The vulnerability laboratory core research team discovered a persistent cross site web vulnerability in the Knap Advance... [...]

BootCommerce v3.2.1 - Multiple Persistent Vulnerabilities

7 June 2022

The vulnerability laboratory core research team discovered multiple persistent web vulnerabilities in the official BootC... [...]

Inciga Web v2.8.2 - Cross Site Scripting Vulnerability

8 April 2022

The vulnerability laboratory core research team discovered a non-persistent cross site scripting vulnerability in the In... [...]

German and South Korean Agencies Warn of Kimsuky's Expanding Cyber Attack Tactics

23 March 2023

German and South Korean government agencies have warned about cyber attacks mounted by a threat actor tracked as Kimsuky using rogue browser extensions to steal users' Gmail inboxes. The joint advisory comes from Germany's domestic… [...]

CISA Alerts on Critical Security Vulnerabilities in Industrial Control Systems

22 March 2023

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has released eight Industrial Control Systems (ICS) advisories on Tuesday, warning of critical flaws affecting equipment from Delta Electronics and Rockwell Automation. This includes… [...]

ScarCruft's Evolving Arsenal: Researchers Reveal New Malware Distribution Techniques

22 March 2023

The North Korean advanced persistent threat (APT) actor dubbed ScarCruft is using weaponized Microsoft Compiled HTML Help (CHM) files to download additional malware onto targeted machines. According to multiple reports… [...]

Preventing Insider Threats in Your Active Directory

22 March 2023

Active Directory (AD) is a powerful authentication and directory service used by organizations worldwide. With this ubiquity and power comes the potential for abuse. Insider threats offer some of the… [...]

Rogue NuGet Packages Infect .NET Developers with Crypto-Stealing Malware

22 March 2023

The NuGet repository is the target of a new "sophisticated and highly-malicious attack" aiming to infect .NET developer systems with cryptocurrency stealer malware. The 13 rogue packages, which were downloaded more than… [...]

NAPLISTENER: New Malware in REF2924 Group's Arsenal for Bypassing Detection

22 March 2023

The threat group tracked as REF2924 has been observed deploying previously unseen malware in its attacks aimed at entities in South and Southeast Asia. The malware, dubbed NAPLISTENER by Elastic Security Labs, is an… [...]

BreachForums Administrator Baphomet Shuts Down Infamous Hacking Forum

22 March 2023

In a sudden turn of events, Baphomet, the current administrator of BreachForums, said in an update on March 21, 2023, that the hacking forum has been officially taken down but… [...]

New 'Bad Magic' Cyber Threat Disrupts Ukraine's Key Sectors Amid War

21 March 2023

Amid the ongoing war between Russia and Ukraine, government, agriculture, and transportation organizations located in Donetsk, Lugansk, and Crimea have been attacked as part of an active campaign that drops a previously… [...]

New ShellBot DDoS Malware Variants Targeting Poorly Managed Linux Servers

21 March 2023

Poorly managed Linux SSH servers are being targeted as part of a new campaign that deploys different variants of a malware called ShellBot. "ShellBot, also known as PerlBot, is a DDoS… [...]

The Best Defense Against Cyber Threats for Lean Security Teams

21 March 2023

H0lyGh0st, Magecart, and a slew of state-sponsored hacker groups are diversifying their tactics and shifting their focus to… You. That is, if you're in charge of cybersecurity for a small-to-midsize… [...]

From Ransomware to Cyber Espionage: 55 Zero-Day Vulnerabilities Weaponized in 2022

21 March 2023

As many as 55 zero-day vulnerabilities were exploited in the wild in 2022, with most of the flaws discovered in software from Microsoft, Google, and Apple. While this figure represents… [...]

Hackers Steal Over $1.6 Million in Crypto from General Bytes Bitcoin ATMs Using Zero-Day Flaw

21 March 2023

Bitcoin ATM maker General Bytes disclosed that unidentified threat actors stole cryptocurrency from hot wallets by exploiting a zero-day security flaw in its software. "The attacker was able to upload… [...]

New DotRunpeX Malware Delivers Multiple Malware Families via Malicious Ads

20 March 2023

A new piece of malware dubbed dotRunpeX is being used to distribute numerous known malware families such as Agent Tesla, Ave Maria, BitRAT, FormBook, LokiBot, NetWire, Raccoon Stealer, RedLine Stealer, Remcos, Rhadamanthys, and Vidar. "DotRunpeX is a new injector written in .NET using… [...]

Mispadu Banking Trojan Targets Latin America: 90,000+ Credentials Stolen

20 March 2023

A banking trojan dubbed Mispadu has been linked to multiple spam campaigns targeting countries like Bolivia, Chile, Mexico, Peru, and Portugal with the goal of stealing credentials and delivering other payloads. The… [...]

New Cyber Platform Lab 1 Decodes Dark Web Data to Uncover Hidden Supply Chain Breaches

20 March 2023

2022 was the year when inflation hit world economies, except in one corner of the global marketplace – stolen data. Ransomware payments fell by over 40% in 2022 compared to… [...]

Researchers Shed Light on CatB Ransomware's Evasion Techniques

20 March 2023

The threat actors behind the CatB ransomware operation have been observed using a technique called DLL search order hijacking to evade detection and launch the payload. CatB, also referred to as CatB99… [...]

Emotet Rises Again: Evades Macro Security via OneNote Attachments

20 March 2023

The notorious Emotet malware, in its return after a short hiatus, is now being distributed via Microsoft OneNote email attachments in an attempt to bypass macro-based security restrictions and compromise systems. Emotet, linked… [...]

Chinese Hackers Exploit Fortinet Zero-Day Flaw for Cyber Espionage Attack

18 March 2023

The zero-day exploitation of a now-patched medium-severity security flaw in the Fortinet FortiOS operating system has been linked to a suspected Chinese hacking group. American cybersecurity company Mandiant, which made the attribution,… [...]

Pompompurin Unmasked: Infamous BreachForums Mastermind Arrested in New York

18 March 2023

U.S. law enforcement authorities have arrested a 21-year-old New York man in connection with running the infamous BreachForums hacking forum under the online alias "Pompompurin." The development, first reported by Bloomberg… [...]

THN Webinar: 3 Research-Backed Ways to Secure Your Identity Perimeter

18 March 2023

Think of the typical portrayal of a cyberattack. Bad guy pounding furiously on a keyboard, his eyes peeking out from under a dark hoodie. At long last, his efforts pay… [...]

LockBit 3.0 Ransomware: Inside the Cyberthreat That's Costing Millions

18 March 2023

U.S. government agencies have released a joint cybersecurity advisory detailing the indicators of compromise (IoCs) and tactics, techniques, and procedures (TTPs) associated with the notorious LockBit 3.0 ransomware. "The LockBit 3.0… [...]

FakeCalls Vishing Malware Targets South Korean Users via Popular Financial Apps

17 March 2023

An Android voice phishing (aka vishing) malware campaign known as FakeCalls has reared its head once again to target South Korean users under the guise of over 20 popular financial… [...]

New GoLang-Based HinataBot Exploiting Router and Server Flaws for DDoS Attacks

17 March 2023

A new Golang-based botnet dubbed HinataBot has been observed to leverage known flaws to compromise routers and servers and use them to stage distributed denial-of-service (DDoS) attacks. "The malware binaries appear to… [...]

A New Security Category Addresses Web-borne Threats

17 March 2023

In the modern corporate IT environment, which relies on cloud connectivity, global connections and large volumes of data, the browser is now the most important work interface. The browser connects… [...]

Lookalike Telegram and WhatsApp Websites Distributing Cryptocurrency Stealing Malware

17 March 2023

Copycat websites for instant messaging apps like Telegram and WhatApp are being used to distribute trojanized versions and infect Android and Windows users with cryptocurrency clipper malware. "All of them… [...]

ZDI-CAN-19908: BlueZ

22 March 2023

A CVSS score 7.1 (AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) severity vulnerability discovered by 'Michael Randrianantenaina (https://elkamika.blogspot.com/)' was reported to the affected vendor on: 2023-03-22, 1 days ago. The vendor is given until 2023-07-20 to… [...]

ZDI-CAN-19836: Avira

22 March 2023

A CVSS score 7.8 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) severity vulnerability discovered by 'rac' was reported to the affected vendor on: 2023-03-22, 1 days ago. The vendor is given until 2023-07-20 to publish a… [...]

ZDI-CAN-20524: NETGEAR

22 March 2023

A CVSS score 8.8 (AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) severity vulnerability discovered by 'Xin'an Zhou and Zhiyun Qian' was reported to the affected vendor on: 2023-03-22, 1 days ago. The vendor is given until… [...]

ZDI-CAN-20228: Samba

22 March 2023

A CVSS score 6.5 (AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:L) severity vulnerability discovered by 'Florent Saudel, Arnaud Gatignol (@thalium_team)' was reported to the affected vendor on: 2023-03-22, 1 days ago. The vendor is given until… [...]

ZDI-CAN-20660: Ashlar-Vellum

22 March 2023

A CVSS score 7.8 (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) severity vulnerability discovered by 'Anonymous' was reported to the affected vendor on: 2023-03-22, 1 days ago. The vendor is given until 2023-07-20 to publish a… [...]

ZDI-CAN-20724: ICONICS

22 March 2023

A CVSS score 7.8 (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) severity vulnerability discovered by 'Piotr Bazydlo (@chudypb) of Trend Micro Zero Day Initiative' was reported to the affected vendor on: 2023-03-22, 1 days ago. The… [...]

ZDI-CAN-20229: Samba

22 March 2023

A CVSS score 5.9 (AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) severity vulnerability discovered by 'Florent Saudel (@thalium_team)' was reported to the affected vendor on: 2023-03-22, 1 days ago. The vendor is given until 2023-07-20 to… [...]

ZDI-CAN-20630: Ashlar-Vellum

22 March 2023

ZDI-CAN-20725: Microsoft

16 March 2023

A CVSS score 7.8 (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) severity vulnerability discovered by 'Michael DePlante (@izobashi) of Trend Micro's Zero Day Initiative' was reported to the affected vendor on: 2023-03-16, 7 days ago. The… [...]

ZDI-CAN-20588: Kofax

15 March 2023

A CVSS score 7.8 (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) severity vulnerability discovered by 'Mat Powell of Trend Micro Zero Day Initiative' was reported to the affected vendor on: 2023-03-15, 8 days ago. The vendor… [...]

ZDI-CAN-20622: PDF-XChange

15 March 2023

A CVSS score 3.3 (AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) severity vulnerability discovered by 'Mat Powell of Trend Micro Zero Day Initiative' was reported to the affected vendor on: 2023-03-15, 8 days ago. The vendor… [...]

ZDI-CAN-20621: PDF-XChange

15 March 2023

ZDI-CAN-20620: PDF-XChange

15 March 2023

ZDI-CAN-20574: Microsoft

15 March 2023

A CVSS score 7.8 (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) severity vulnerability discovered by 'Anonymous' was reported to the affected vendor on: 2023-03-15, 8 days ago. The vendor is given until 2023-07-13 to publish a… [...]

ZDI-CAN-20484: TP-Link

15 March 2023

A CVSS score 8.8 (AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) severity vulnerability discovered by 'Cyrille Chatras' was reported to the affected vendor on: 2023-03-15, 8 days ago. The vendor is given until 2023-07-13 to publish… [...]

ZDI-CAN-20594: PDF-XChange

15 March 2023

A CVSS score 7.8 (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) severity vulnerability discovered by 'kimiya' was reported to the affected vendor on: 2023-03-15, 8 days ago. The vendor is given until 2023-07-13 to publish a… [...]

ZDI-CAN-20624: Microsoft

15 March 2023

A CVSS score 8.1 (AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) severity vulnerability discovered by 'Piotr Bazydlo (@chudypb) of Trend Micro Zero Day Initiative' was reported to the affected vendor on: 2023-03-15, 8 days ago. The… [...]

ZDI-CAN-20610: Softing

15 March 2023

A CVSS score 4.9 (AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) severity vulnerability discovered by 'Uri Katz of Claroty Research Team82' was reported to the affected vendor on: 2023-03-15, 8 days ago. The vendor is given… [...]

ZDI-CAN-20589: TP-Link

15 March 2023

A CVSS score 6.8 (AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) severity vulnerability discovered by 'Cyrille Chatras' was reported to the affected vendor on: 2023-03-15, 8 days ago. The vendor is given until 2023-07-13 to publish… [...]

ZDI-CAN-20583: Adobe

15 March 2023

A CVSS score 7.8 (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) severity vulnerability discovered by 'Mark Vincent Yason (@MarkYason)' was reported to the affected vendor on: 2023-03-15, 8 days ago. The vendor is given until 2023-07-13… [...]

ZDI-CAN-20418: Ashlar-Vellum

13 March 2023

A CVSS score 7.8 (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) severity vulnerability discovered by 'Anonymous' was reported to the affected vendor on: 2023-03-13, 10 days ago. The vendor is given until 2023-07-11 to publish a… [...]

ZDI-CAN-20409: Ashlar-Vellum

13 March 2023

ZDI-CAN-20328: LG

10 March 2023

A CVSS score 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) severity vulnerability discovered by 'rgod' was reported to the affected vendor on: 2023-03-10, 13 days ago. The vendor is given until 2023-07-08 to publish a… [...]

ZDI-CAN-20475: Microsoft

10 March 2023

A CVSS score 7.6 (AV:A/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H) severity vulnerability discovered by 'Anonymous' was reported to the affected vendor on: 2023-03-10, 13 days ago. The vendor is given until 2023-07-08 to publish a… [...]

ZDI-CAN-20270: LG

10 March 2023

Student Loan Breach Exposes 2.5M Records

31 August 2022

2.5 million people were affected, in a breach that could spell more trouble down the line. [...]

Watering Hole Attacks Push ScanBox Keylogger

30 August 2022

Researchers uncover a watering hole attack likely carried out by APT TA423, which attempts to plant the ScanBox JavaScript-based reconnaissance tool. [...]

Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms

29 August 2022

Over 130 companies tangled in sprawling phishing campaign that spoofed a multi-factor authentication system. [...]

Ransomware Attacks are on the Rise

26 August 2022

Lockbit is by far this summer’s most prolific ransomware group, trailed by two offshoots of the Conti group. [...]

Cybercriminals Are Selling Access to Chinese Surveillance Cameras

25 August 2022

Tens of thousands of cameras have failed to patch a critical, 11-month-old CVE, leaving thousands of organizations exposed. [...]

Twitter Whistleblower Complaint: The TL;DR Version

24 August 2022

Twitter is blasted for security and privacy lapses by the company’s former head of security who alleges the social media giant’s actions amount to a national security risk. [...]

Firewall Bug Under Active Attack Triggers CISA Warning

23 August 2022

CISA is warning that Palo Alto Networks’ PAN-OS is under active attack and needs to be patched ASAP. [...]

Fake Reservation Links Prey on Weary Travelers

22 August 2022

Fake travel reservations are exacting more pain from the travel weary, already dealing with the misery of canceled flights and overbooked hotels. [...]

iPhone Users Urged to Update to Patch 2 Zero-Days

19 August 2022

Separate fixes to macOS and iOS patch respective flaws in the kernel and WebKit that can allow threat actors to take over devices and are under attack. [...]

Google Patches Chrome’s Fifth Zero-Day of the Year

18 August 2022

An insufficient validation input flaw, one of 11 patched in an update this week, could allow for arbitrary code execution and is under active attack. [...]

OpenAI’s ChatGPT and GPT-4 Used as Lure in Phishing Email, Twitter Scams to Promote Fake OpenAI Tokens

17 March 2023

OpenAI’s ChatGPT and GPT-4 Used as Lure in Phishing Email, Twitter Scams to Promote Fake OpenAI TokensHoping to cash in on the massive interest around OpenAI’s GPT-4 – ChatGPT’s new… [...]

Microsoft’s March 2023 Patch Tuesday Addresses 76 CVEs (CVE-2023-23397)

14 March 2023

Microsoft’s March 2023 Patch Tuesday Addresses 76 CVEs (CVE-2023-23397)Microsoft addresses 76 CVEs including two zero-days exploited in the wild, one of which was publicly disclosed. 9Critical 66Important 1Moderate 0Low Update… [...]

FBI and CISA Release Cybersecurity Advisory on Royal Ransomware Group

4 March 2023

FBI and CISA Release Cybersecurity Advisory on Royal Ransomware GroupThe FBI and CISA have released a joint Cybersecurity Advisory discussing the Royal ransomware group. Background As part of their #StopRansomware… [...]

South Korean and American Agencies Release Joint Advisory on North Korean Ransomware

16 February 2023

South Korean and American Agencies Release Joint Advisory on North Korean RansomwareSeveral South Korean and American agencies have released a joint cybersecurity advisory on North Korean state-sponsored ransomware operators. Background… [...]

Microsoft’s February 2023 Patch Tuesday Addresses 75 CVEs (CVE-2023-23376)

14 February 2023

Microsoft’s February 2023 Patch Tuesday Addresses 75 CVEs (CVE-2023-23376)Microsoft addresses 75 CVEs including three zero-day vulnerabilities that were exploited in the wild. 9Critical 66Important 0Moderate 0Low Microsoft patched 75 CVEs… [...]

ProxyNotShell, OWASSRF, TabShell: Patch Your Microsoft Exchange Servers Now

31 January 2023

ProxyNotShell OWASSRF, TabShell: Patch Your Microsoft Exchange Servers NowSeveral flaws in Microsoft Exchange Server disclosed over the last two years continue to be valuable exploits for attackers as part of… [...]

Sandworm APT Deploys New SwiftSlicer Wiper Using Active Directory Group Policy

27 January 2023

Sandworm APT Deploys New SwiftSlicer Wiper Using Active Directory Group PolicySandworm, the Russian-backed APT responsible for NotPetya in 2017, has recently attacked an Ukrainian organization using a new wiper, SwiftSlicer.… [...]

Oracle January 2023 Critical Patch Update Addresses 183 CVEs

19 January 2023

Oracle January 2023 Critical Patch Update Addresses 183 CVEsOracle addresses 183 CVEs in its first quarterly update of quarterly with 327 patches, including 71 critical updates. Background On January 17,… [...]

Microsoft’s January 2023 Patch Tuesday Addresses 98 CVEs (CVE-2023-21674)

10 January 2023

Microsoft’s January 2023 Patch Tuesday Addresses 98 CVEs (CVE-2023-21674)Microsoft addresses 98 CVEs including a zero-day vulnerability that was exploited in the wild. 11Critical 87Important 0Moderate 0Low Microsoft patched 98 CVEs… [...]

CVE-2022-47523: ManageEngine Password Manager Pro, PAM360 and Access Manager Plus SQL Injection Vulnerability

5 January 2023

CVE-2022-47523: ManageEngine Password Manager Pro, PAM360 and Access Manager Plus SQL Injection VulnerabilityZoho patches a newly disclosed high-severity SQL injection flaw in several ManageEngine products; attackers have historically targeted several… [...]

Celebrating Women’s History Month at Rapid7

22 March 2023

On March 8th, Rapid7 hosted an International Women's Day panel, which focused equity, inclusion, and advocacy in the workplace. [...]

CVE-2023-0391: MGT-COMMERCE CloudPanel Shared Certificate Vulnerability and Weak Installation Procedures

21 March 2023

Rapid7 has discovered three security concerns in CloudPanel from MGT-COMMERCE, a self-hosted web administration solution. [...]

Rapid7 Observed Exploitation of Adobe ColdFusion

21 March 2023

Rapid7’s Threat Intelligence and Detection Engineering team has identified active exploitation of Adobe ColdFusion in multiple customer environments. [...]

Practice Operations Manager Looks Back On First Five Months With Rapid7

20 March 2023

Elianna Sfez is a Threat Intelligence Practice Operations Manager at Rapid7. We sat down to chat about her new hire journey, company culture, and more. [...]

Metasploit Weekly Wrap-Up

17 March 2023

FortiNAC EITW Content Added Whilst we did have a few cool new modules added this week, one particularly interesting one was a Fortinet FortiNAC vulnerability, CVE-2022-39952, that was added in… [...]

MITRE ATT&CK® Mitigations: Thwarting Cloud Threats With Preventative Policies and Controls

16 March 2023

It's essential to implement robust security measures to protect your organization. One way to do this is to utilize the MITRE ATT&CK framework. [...]

Rapid7 Threat Command Delivered 311% ROI: 2023 Forrester Consulting Total Economic Impact™ Study

15 March 2023

Security decision-makers are more concerned about external attacks than any other attack vector, according to the new Forrester Consulting study commissioned by Rapid7. [...]

Build Security Muscle Memory With Tabletop Exercises

15 March 2023

What scrimmages were to football, tabletop exercises (TTX) are to incident response, business continuity, disaster recovery, vulnerability management, and other critical components of your organization’s security program. [...]

Three Steps for Ramping Up to Fully Automated Remediation

15 March 2023

Implementing automated remediation doesn't happen overnight—it takes time and a good roadmap. This article offers an incremental crawl, walk, run approach. [...]

Patch Tuesday - March 2023

14 March 2023

Microsoft March 2023 Patch Tuesday fixes 101 security issues, including a Critical zero-day vulnerability in Outlook which has been exploited by Russia-based actors against European government & critical infrastructure targets. [...]

Microsoft Defender for Cloud Management Port Exposure Confusion

14 March 2023

Microsoft Defender for Cloud, until recently, didn't distinguish "0.0.0.0/0" as a synonym for "any" when checking for management port exposures for Azure instances. [...]

Executive Webinar: Confronting Security Fears to Control Cyber Risk, Part Two

14 March 2023

Jason Hart, Rapid7’s Chief Technology Officer, EMEA, will discuss how organisations can develop the ability to adapt in times of great stress and impact. [...]

Cloud Security Strategies for Healthcare

14 March 2023

The healthcare industry must innovate in the cloud to meet patient needs, but organizations need to do so without creating unnecessary or unmanaged risk. [...]

Metasploit Weekly Wrap-Up

10 March 2023

Wowza, a new credential gatherer and login scanner! This week Metasploit Framework gained a credential gatherer for Wowza Streaming Engine Manager. Credentials for this application are stored in a file… [...]

[The Lost Bots] S03E01: Tech Stack Consolidation and Bacon

9 March 2023

Jeffrey Gardner, D&R Practice Advisor and Stephen Davis, Lead D&R Sales Technical Advisor, discuss consolidation benefits and potential "gotchas". [...]

Making the digital world safer, one Tesla at a time

27 March 2023

Contestants gather at Pwn2Own Vancouver to showcase their skills and uncover... [...]

Developing an incident response playbook

23 March 2023

An incident response playbook is a predefined set of actions to address a specific security incident such as malware infection, violation of security policies, DDoS attack, etc. Its main goal… [...]

ixob.fr Cross Site Scripting vulnerability OBB-3230398

23 March 2023

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator… [...]

German and South Korean Agencies Warn of Kimsuky's Expanding Cyber Attack Tactics

23 March 2023

pathcore.hms.harvard.edu IFRAME Injection vulnerability OBB-3230397

23 March 2023

Exploit for Out-of-bounds Write in Fortinet Fortios

23 March 2023

CVE-2022-42475-RCE-POC 漏洞名称 CVE-2022-42475 飞塔RCE漏洞 POC 漏洞成因由于sslvpnd对用户输入的内容验证存在缺陷，未经身份验证的攻击者通过发送特制数据包触发缓冲区溢出，最终可实现在目标系统上执行任意代码。受影响版本 2.0 <= FortiOS <= 7.2.2 0.0 <= FortiOS <= 7.0.8 4.0 <= FortiOS <= 6.4.10 2.0 <= FortiOS <= 6.2.11 0.0 <=… [...]

mczbase.mcz.harvard.edu IFRAME Injection vulnerability OBB-3230393

23 March 2023

zuari-furniture.com Improper Access Control vulnerability OBB-3230392

23 March 2023

ptrcompany.com Improper Access Control vulnerability OBB-3230390

23 March 2023

tnmcnair.edu.in Cross Site Scripting vulnerability OBB-3230389

23 March 2023

kiki.huh.harvard.edu IFRAME Injection vulnerability OBB-3230388

23 March 2023

sunrisepolymers.com Improper Access Control vulnerability OBB-3230386

23 March 2023

lentoindia.com Improper Access Control vulnerability OBB-3230381

23 March 2023

vvfagranville.org Improper Access Control vulnerability OBB-3230380

23 March 2023

sfao.muet.edu.pk Improper Access Control vulnerability OBB-3230376

23 March 2023

alumindo.com Improper Access Control vulnerability OBB-3230373

23 March 2023

coinsart.in Improper Access Control vulnerability OBB-3230375

23 March 2023

dutraincorporacoes.com.br Improper Access Control vulnerability OBB-3230372

23 March 2023

amchamhonduras.org Improper Access Control vulnerability OBB-3230371

23 March 2023

CVE-2023-26282

23 March 2023

This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this… [...]

dlinfra.com Improper Access Control vulnerability OBB-3230369

23 March 2023

CVE-2023-28512

23 March 2023

This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this… [...]

jcboseust.ac.in Improper Access Control vulnerability OBB-3230368

23 March 2023

CVE-2023-27545

23 March 2023

This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this… [...]

urogyn.coloradowomenshealth.com Improper Access Control vulnerability OBB-3230367

23 March 2023

DataSurgeon – Extract Sensitive Information (PII) From Logs

20 March 2023

DataSurgeon (ds) is a versatile tool designed to Extract Sensitive Information (PII) From Logs, it's intended to be used for incident response, penetration testing, and CTF challenges. [...]

Pwnagotchi – Maximize Crackable WPA Key Material For Bettercap

12 February 2023

Pwnagotchi is an A2C-based "AI" leveraging bettercap that learns from its surrounding WiFi environment to maximize crackable WPA key material it captures [...]

HardCIDR – Network CIDR and Range Discovery Tool

29 December 2022

HardCIDR is a Linux Bash script to discover the netblocks, or ranges, (in CIDR notation) owned by the target organization during the intelligence gathering phase of a penetration test. [...]

Socialscan – Command-Line Tool To Check For Email And Social Media Username Usage

29 April 2022

socialscan is an accurate command-line tool to check For email and social media username usage on online platforms, given an email address or username, socialscan returns whether it is available,… [...]

CFRipper – CloudFormation Security Scanning & Audit Tool

23 January 2022

CFRipper is a Python-based Library and CLI security analyzer that functions as an AWS CloudFormation security scanning and audit tool, it aims to prevent vulnerabilities from getting to production infrastructure… [...]

CredNinja – Test Credential Validity of Dumped Credentials or Hashes

5 January 2022

CredNinja is a tool to quickly test credential validity of dumped credentials (or hashes) across an entire network or domain very efficiently. At the core of it, you provide it… [...]

assetfinder – Find Related Domains and Subdomains

29 December 2021

assetfinder is a Go-based tool to find related domains and subdomains that are potentially related to a given domain from a variety of sources including Facebook, ThreatCrowd, Virustotal and more.… [...]

Karkinos – Beginner Friendly Penetration Testing Tool

30 August 2021

Karkinos is a light-weight Beginner Friendly Penetration Testing Tool, which is basically a ‘Swiss Army Knife’ for pen-testing and/or hacking CTF’s. Karkinos Beginner Friendly Penetration Testing Tool Features Encoding/Decoding characters… [...]

Aclpwn.Py – Exploit ACL Based Privilege Escalation Paths in Active Directory

6 July 2021

Aclpwn.py is a tool that interacts with BloodHound to identify and exploit ACL based privilege escalation paths. It takes a starting and ending point and will use Neo4j pathfinding algorithms… [...]

Vulhub – Pre-Built Vulnerable Docker Environments For Learning To Hack

27 May 2021

Vulhub is an open-source collection of pre-built vulnerable docker environments for learning to hack. No pre-existing knowledge of docker is required, just execute two simple commands and you have a… [...]

What is the Purpose of Employee Monitoring Software?

22 March 2023

All companies, no matter their size or structure have two goals above all others, and… What is the Purpose of Employee Monitoring Software? on Latest Hacking News | Cyber Security… [...]

CASPER Attack Targets Air-Gapped Systems Via Internal Speakers

21 March 2023

Researchers have found another way that potentially risks the security of air-gapped systems. Dubbed as… CASPER Attack Targets Air-Gapped Systems Via Internal Speakers on Latest Hacking News | Cyber Security… [...]

Building Your Dream Network by Custom Net Development Company

21 March 2023

In the modern world of digital technology, having a solid online presence is crucial for… Building Your Dream Network by Custom Net Development Company on Latest Hacking News | Cyber… [...]

NordVPN Rolls Out Meshnet For Public, Including Non-Subscribers

20 March 2023

After rolling out the feature to its subscribers, NordVPN has now announced expanding Meshnet accessibility… NordVPN Rolls Out Meshnet For Public, Including Non-Subscribers on Latest Hacking News | Cyber Security… [...]

After Bing, Brave And DuckDuckGo Also Integrate AI For Better Search

12 March 2023

With a few days gap, the two privacy-focused search services, Brave and DuckDuckGo, have announced… After Bing, Brave And DuckDuckGo Also Integrate AI For Better Search on Latest Hacking News… [...]

Google Fixed Two Critical Vulnerabilities With Android March 2023 Update

9 March 2023

Google has recently rolled out the scheduled Android security update for March 2023, fixing numerous… Google Fixed Two Critical Vulnerabilities With Android March 2023 Update on Latest Hacking News |… [...]

Vulnerabilities In TPM 2.0 Could Expose Cryptographic Keys

8 March 2023

Researchers found a few vulnerabilities affecting TPM 2.0, exploiting which could risk device security and… Vulnerabilities In TPM 2.0 Could Expose Cryptographic Keys on Latest Hacking News | Cyber Security… [...]

Pros & cons of using free VPNs in 2023

8 March 2023

To amplify online safety and privacy, many people turn to VPNs to help them out.… Pros & cons of using free VPNs in 2023 on Latest Hacking News | Cyber… [...]

Snapchat Vulnerability Could Allow Deleting Users’ Content Spotlight

8 March 2023

A researcher highlighted a vulnerability in Snapchat that could allow a remote attacker to delete… Snapchat Vulnerability Could Allow Deleting Users’ Content Spotlight on Latest Hacking News | Cyber Security… [...]

Why Your Business Needs IT Management

6 March 2023

Many businesses have IT systems they use to carry out their daily operations. Some are… Why Your Business Needs IT Management on Latest Hacking News | Cyber Security News, Hacking… [...]

Developing an incident response playbook

23 March 2023

Incident response playbooks help optimize the SOC processes, and are a major step forward to SOC maturity, but can be challenging for a company to develop. In this article, I… [...]

Bad magic: new APT found in the area of Russo-Ukrainian conflict

21 March 2023

In October 2022, we identified an active infection of government, agriculture and transportation organizations located in the Donetsk, Lugansk, and Crimea regions. [...]

Business on the dark web: deals and regulatory mechanisms

15 March 2023

How deals and arrangements are made on the dark web, what parties are involved, what escrow services and arbitration are and how these affect the security of deals. [...]

Malvertising through search engines

9 March 2023

Kaspersky observes a growth in malvertising activity that exploits Google search ads to promote fake software websites that deliver stealers, such as RedLine and Rhadamantys. [...]

The state of stalkerware in 2022

8 March 2023

In 2022, Kaspersky data shows that 29,312 unique individuals around the world were affected by stalkerware. We detected 182 different stalkerware apps, the most popular one was Reptilicus. [...]

Threat landscape for industrial automation systems for H2 2022

6 March 2023

In H2 2022, the percentage of ICS computers on which malicious objects were blocked increased by 3.5 percentage points compared to the previous six-month period, reaching 34.3%. [...]

The mobile malware threat landscape in 2022

27 February 2023

Android threat report by Kaspersky for 2022: malware on Google Play and inside the Vidmate in-app store, mobile malware statistics. [...]

Spam and phishing in 2022

16 February 2023

Statistics on spam and phishing with the key trends in 2022: two-stage spear phishing, hijacking of social network and instant messaging accounts, import substitution, and survey phishing. [...]

IoC detection experiments with ChatGPT

15 February 2023

We decided to check what ChatGPT already knows about threat research and whether it can help with identifying simple adversary tools and classic indicators of compromise, such as well-known malicious… [...]

Good, Perfect, Best: how the analyst can enhance penetration testing results

10 February 2023

What is the analyst on a penetration testing team, what role they perform at Kaspersky, and why is their job vital to the success of the project? [...]

ChatGPT Privacy Flaw

22 March 2023

OpenAI has disabled ChatGPT’s privacy history, almost certainly because they had a security flaw where users were seeing each others’ histories. [...]

US Citizen Hacked by Spyware

21 March 2023

The New York Times is reporting that a US citizen’s phone was hacked by the Predator spyware. A U.S. and Greek national who worked on Meta’s security and trust team… [...]

Friday Squid Blogging: New Species of Vampire Squid Lives 3,000 Feet below Sea Level

17 March 2023

At least, it seems to be a new species. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t… [...]

Upcoming Speaking Engagements

14 March 2023

This is a current list of where and when I am scheduled to speak: I’m speaking on “How to Reclaim Power in the Digital World” at EPFL in Lausanne, Switzerland,… [...]

How AI Could Write Our Laws

14 March 2023

Nearly 90% of the multibillion-dollar federal lobbying apparatus in the United States serves corporate interests. In some cases, the objective of that money is obvious. Google pours millions into lobbying… [...]

NetWire Remote Access Trojan Maker Arrested

14 March 2023

From Brian Krebs: A Croatian national has been arrested for allegedly operating NetWire, a Remote Access Trojan (RAT) marketed on cybercrime forums since 2012 as a stealthy way to spy… [...]

Friday Squid Blogging: Chinese Squid Fishing in the Southeast Pacific

10 March 2023

Chinese squid fishing boats are overwhelming Ecuador and Peru. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t… [...]

Elephant Hackers

10 March 2023

An elephant uses its right-of-way privileges to stop sugar-cane trucks and grab food. [...]

Another Malware with Persistence

10 March 2023

Here’s a piece of Chinese malware that infects SonicWall security appliances and survives firmware updates. On Thursday, security firm Mandiant published a report that said threat actors with a suspected… [...]

BlackLotus Malware Hijacks Windows Secure Boot Process

8 March 2023

Researchers have discovered malware that “can hijack a computer’s boot process even when Secure Boot and other advanced protections are enabled and running on fully updated versions of Windows.” Dubbed… [...]

ShellBot DDoS Malware Targets Linux SSH Servers

22 March 2023

By Deeba Ahmed As per a report from AhnLab Security Emergency Response Center (ASEC), poorly managed Linux SSH servers are becoming… This is a post from HackRead.com Read the original… [...]

Google Suspends Chinese Shopping App Pinduoduo Over Malware Concerns

22 March 2023

By Waqas Pinduoduo has confirmed the incident, but denied the presence of malware in its app. This is a post from HackRead.com Read the original post: Google Suspends Chinese Shopping… [...]

Windows 11 and 10’s Snipping Tools Vulnerable to Data Exposure

22 March 2023

By Waqas Microsoft has stated that they are aware of the issue and are investigating, adding that they will take action to help keep customers protected. This is a post… [...]

Ferrari Discloses Ransomware Attack; Refuses to Pay Ransom

21 March 2023

By Habiba Rashid Ferrari, the renowned Italian luxury car manufacturer, suffered a cyber incident that compromised the company’s client data. According… This is a post from HackRead.com Read the original… [...]

ChatGPT Bug Exposes Conversation History Titles

21 March 2023

By Habiba Rashid Are you wondering why your ChatGPT conversation history has been unavailable since yesterday? Well, here is why! This is a post from HackRead.com Read the original post:… [...]

Breach Forums to Remain Offline Permanently

21 March 2023

By Waqas One of the Breach Forums administrators who goes by the alias Baphomet has decided to shut down the forum permanently. This is a post from HackRead.com Read the… [...]

Crypto ATM Manufacturer General Bytes Suffers $1.5m Bitcoin Theft

21 March 2023

By Habiba Rashid The company has disclosed the wallet addresses and three IP addresses used by the attacker in the hack. This is a post from HackRead.com Read the original… [...]

Technology and Software Redefine Business Operations

21 March 2023

By Owais Sultan Revolutionizing Business Operations with Innovative Software Solutions: How Technology is Reshaping the Business Landscape. Starting a business is… This is a post from HackRead.com Read the original… [...]

DotRunpeX: The Malware That Infects Systems with Multiple Families

20 March 2023

By Deeba Ahmed Researchers suspect that the malware may be operated by Russian-speaking groups, given the references to the language in its code. This is a post from HackRead.com Read… [...]

Threat Actors Using Go-based HinataBot to launch DDoS Attacks

20 March 2023

By Deeba Ahmed HinataBot can launch Distributed Denial of Service (DDoS) attacks reaching 3.3 TBPS. This is a post from HackRead.com Read the original post: Threat Actors Using Go-based HinataBot… [...]

Backslash Snags $8M Seed Financing for AppSec Tech

22 March 2023

Backslash Security banks seed-stage capital to build new technology to identify and mitigate “toxic code flows” in cloud-native applications. The post Backslash Snags $8M Seed Financing for AppSec Tech appeared… [...]

‘Badsecrets’ Open Source Tool Detects Secrets in Many Web Frameworks

22 March 2023

Black Lantern Security introduces Badsecrets, an open source tool for identifying known or weak cryptographic secrets across multiple platforms. The post ‘Badsecrets’ Open Source Tool Detects Secrets in Many Web… [...]

High-Severity Vulnerabilities Found in WellinTech Industrial Data Historian

22 March 2023

Cisco Talos researchers found two high-severity vulnerabilities in WellinTech’s KingHistorian industrial data historian software. The post High-Severity Vulnerabilities Found in WellinTech Industrial Data Historian appeared first on SecurityWeek. [...]

Chrome 111 Update Patches High-Severity Vulnerabilities

22 March 2023

The latest Chrome update brings patches for eight vulnerabilities, including seven reported by external researchers. The post Chrome 111 Update Patches High-Severity Vulnerabilities appeared first on SecurityWeek. [...]

BreachForums Shut Down Over Law Enforcement Takeover Concerns

22 March 2023

The popular cybercrime forum BreachForums is being shut down following the arrest of Conor Brian Fitzpatrick, who is accused of running the website. The post BreachForums Shut Down Over Law… [...]

CISA Expands Cybersecurity Committee, Updates Baseline Security Goals

22 March 2023

CISA announces adding more experts to its Cybersecurity Advisory Committee and updating the Cybersecurity Performance Goals. The post CISA Expands Cybersecurity Committee, Updates Baseline Security Goals appeared first on SecurityWeek. [...]

Malware Trends: What’s Old Is Still New

22 March 2023

Many of the most successful cybercriminals are shrewd; they want good ROI, but they don’t want to have to reinvent the wheel to get it. The post Malware Trends: What’s… [...]

Burnout in Cybersecurity – Can It Be Prevented?

22 March 2023

Security professionals understand the need for resilience in their company’s security posture, but often fail to build their own psychological resilience to stress. The post Burnout in Cybersecurity – Can… [...]

Spain Needs More Transparency Over Pegasus: EU Lawmakers

22 March 2023

Spain needs more transparency over the Pegasus spyware hacking scandal, a European Parliament committee said. The post Spain Needs More Transparency Over Pegasus: EU Lawmakers appeared first on SecurityWeek. [...]

Ransomware Will Likely Target OT Systems in EU Transport Sector: ENISA

22 March 2023

Ransomware and data related attacks are the top cybersecurity threats to the transport sector in the EU, ENISA says. The post Ransomware Will Likely Target OT Systems in EU Transport… [...]

We’re going teetotal: It’s goodbye to The Daily Swig

2 March 2023

PortSwigger today announces that The Daily Swig is closing down [...]

Bug Bounty Radar // The latest bug bounty programs for March 2023

28 February 2023

New web targets for the discerning hacker [...]

Indian transport ministry flaws potentially allowed creation of counterfeit driving licenses

28 February 2023

Armed with personal data fragments, a researcher could also access 185 million citizens’ PII [...]

Password managers: A rough guide to enterprise secret platforms

27 February 2023

The second part of our password manager series looks at business-grade tech to handle API tokens, login credentials, and more [...]

Chromium bug allowed SameSite cookie bypass on Android devices

27 February 2023

Protections against cross-site request forgery could be bypassed [...]

Deserialized web security roundup: Twitter 2FA backlash, GoDaddy suffers years-long attack campaign, and XSS Hunter adds e2e encryption

24 February 2023

Your fortnightly rundown of AppSec vulnerabilities, new hacking techniques, and other cybersecurity news [...]

NIST plots biggest ever reform of Cybersecurity Framework

23 February 2023

CSF 2.0 blueprint offered up for public review [...]

Cisco ClamAV anti-malware scanner vulnerable to serious security flaw

22 February 2023

Patch released for bug that poses a critical risk to vulnerable technologies [...]

CVSS system criticized for failure to address real-world impact

21 February 2023

JFrog argues vulnerability risk metrics need complete revamp [...]

‘Most web API flaws are missed by standard security tests’ – Corey J Ball on securing a neglected attack vector

20 February 2023

API security is a ‘great gateway’ into a pen testing career, advises specialist in the field [...]

HTTP request smuggling bug patched in HAProxy

17 February 2023

Exploitation could enable attackers to access backend servers [...]

Belgium launches nationwide safe harbor for ethical hackers

15 February 2023

New legal protections for security researchers could be the strongest of any EU country [...]

Remote code execution flaw patched in Apache Kafka

15 February 2023

Possible RCE and denial-of-service issue discovered in Kafka Connect [...]

Password manager security: Which is the right option for me?

14 February 2023

The first guide of our two-part series helps consumers choose the best way to manage their login credentials [...]

Deserialized web security roundup: KeePass dismisses ‘vulnerability’ report, OpenSSL gets patched, and Reddit admits phishing hack

10 February 2023

Your fortnightly rundown of AppSec vulnerabilities, new hacking techniques, and other cybersecurity news [...]

OAuth ‘masterclass’ crowned top web hacking technique of 2022

10 February 2023

Single sign-on and request smuggling to the fore in another stellar year for web security research [...]

Radio silence from DMS vendor quartet over XSS zero-days

10 February 2023

No response or patch yet forthcoming from providers of vulnerable document management systems [...]

New XSS Hunter host Truffle Security faces privacy backlash

9 February 2023

Anonymized numbers of bug discoveries swiftly deleted after pushback [...]

Second UK Computer Misuse Act consultation reflects ‘very little progress’

8 February 2023

Campaigner bemoans glacial progress of review and urges government to set clear timetable [...]

DOM XSS vulnerability in Gartner Peer Insights widget patched

8 February 2023

Web attack vector closed after failed fix [...]

Toyota sealed up a backdoor to its global supplier management network

7 February 2023

Hacker praises carmaker’s prompt response to the (mercifully) good-faith pwnage [...]

Google engineers plot to mitigate prototype pollution

6 February 2023

Plan to create boundary between JavaScript objects and their blueprints gathers momentum [...]

Serious security hole plugged in infosec tool binwalk

3 February 2023

Path traversals could ‘void reverse engineering efforts and tamper with evidence collected’ [...]

Truffle Security relaunches XSS Hunter tool with new features

2 February 2023

Popular hacking aid now available with CORS misconfig detection function following end-of-life announcement [...]

Researcher drops Lexmark RCE zero-day rather than sell vuln ‘for peanuts’

1 February 2023

Printer exploit chain could be weaponized to fully compromise more than 100 models [...]

ACSC Essential 8 Cybersecurity Strategies, Maturity Levels, and Best Practices

21 March 2023

Originally published in 2017 as an evolution of the Australian Signals Directorate’s Strategies to Mitigate Cyber Security Incidents, the Australian Cyber Security Centre (ACSC) Essential 8 (E8) consists of a… [...]

Staying Ahead of Ransomware Threats

15 March 2023

Ransomware attacks have become a growing threat to organizations of all sizes and sectors. Many of these attacks exploit known vulnerabilities, making organizations need to quickly identify and fix these… [...]

The March 2023 Patch Tuesday Security Update Review

15 March 2023

Microsoft has released its monthly security update for March 2023. This month’s updates addressed various vulnerabilities in different products. Let’s go through this month’s Patch Tuesday details and discuss the… [...]

What’s Next After Log4Shell?

22 February 2023

How To Deal With the Next Open-Source Vulnerability Using Custom Scripts A critical vulnerability in Apache’s Log4j Java-based logging utility (CVE-2021-44228) was previously referred to as the “most critical vulnerability… [...]

Forta GoAnywhere Zero-Day Exploited By Threat Actors

15 February 2023

On February 1st, 2023, Forta released an advisory behind an auth wall notifying their customers of a remote code execution zero-day exploit affecting their GoAnywhere Managed File Transfer (MFT) application.… [...]

The February 2023 Patch Tuesday Security Update Review

15 February 2023

Microsoft and Adobe have released several monthly security fixes and updates for their products. Let’s take a look at the highlights of this month’s Patch Tuesday as we review and… [...]

Ransomware Targets Outdated VMware ESXi Hypervisors: Protect Your Systems Now!

8 February 2023

Updated on February 8, 2023 at 2:40 PM Pacific Standard Time: This article has been updated with EVALUATE Vendor-Suggested Mitigation with Policy Compliance (PC) Updated on February 7, 2023 at… [...]

CVE-2023-25136: Pre-Auth Double Free Vulnerability in OpenSSH Server 9.1

3 February 2023

OpenSSH, the widely used open-source implementation of the Secure Shell (SSH) protocol, recently released version 9.2 on 2023-02-02 to address a pre-authentication vulnerability in the OpenSSH server version 9.1. This… [...]

The January 2023 Oracle Critical Patch Update

18 January 2023

This Oracle Critical Patch Update contains a group of patches for multiple security vulnerabilities that address 327 new security patches. Some of the vulnerabilities addressed this month impact various products.… [...]

Detection of Vulnerabilities in JavaScript Libraries

16 January 2023

JavaScript is a popular programming language which is an integral component while developing interactive and dynamic web applications. It allows developers to create engaging and responsive user interfaces, handling complex… [...]

CVE-2022-25168: Apache Hadoop Command Injection Vulnerability

5 August 2022

Recently, Apache Hadoop fixed a command injection vulnerability. Since Apache Hadoop’s FileUtil.unTar API does not escape the input filename before... The post CVE-2022-25168: Apache Hadoop Command Injection Vulnerability appeared first… [...]

Three Sentenced for Operating the "Reboot” Store on Hydra

5 August 2022

Three drug dealers were sentenced to prison in Russia for operating a store on the Hydra darkweb marketplace. In April... The post Three Sentenced for Operating the “Reboot” Store on… [...]

scan4all v2.7.2 releases: Vulnerabilities Scan: 15000+PoCs; 7000+Web fingerprints

5 August 2022

scan4all Vulnerabilities Scan: 15000+PoCs; 20 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port scanning; Fuzz,... The post scan4all v2.7.2 releases: Vulnerabilities Scan: 15000+PoCs; 7000+Web fingerprints… [...]

RedGuard: C2 front flow control tool to avoid Blue Teams, AVs, EDRs check

5 August 2022

RedGuard – Excellent C2 Front Flow Control tool RedGuard is a derivative work of the C2 facility pre-flow control technology.... The post RedGuard: C2 front flow control tool to avoid… [...]

Cirrusgo – A Fast Tool To Scan SAAS, PAAS App Written In Go

4 August 2022

A fast tool to scan SAAS,PAAS App written in Go SAAS App Support : salesforce contentful (next version) Note flag... The post Cirrusgo – A Fast Tool To Scan SAAS,… [...]

Counterfeit Euro Use in Germany Is on the Decline

4 August 2022

The number of counterfeit banknotes in circulation in Germany fell to the lowest since 2013. According to Germany’s central bank,... The post Counterfeit Euro Use in Germany Is on the… [...]

dnsrecon v1.1.2 releases: DNS Enumeration Script

4 August 2022

DNSRecon DNSRecon is a Python port of a Ruby script that I wrote to learn the language and about DNS... The post dnsrecon v1.1.2 releases: DNS Enumeration Script appeared first… [...]

Washington Doctor Might Plead Guilty in Murder For Hire Case

3 August 2022

A neonatologist who allegedly tried to hire a hitman on the darkweb to kidnap his wife and assault a colleague... The post Washington Doctor Might Plead Guilty in Murder For… [...]

Kage – Graphical User Interface For Metasploit Meterpreter And Session Handler

3 August 2022

Kage (ka-geh) is a tool inspired by AhMyth designed for Metasploit RPC Server to interact with meterpreter sessions and generate... The post Kage – Graphical User Interface For Metasploit Meterpreter… [...]

Jersey Teen Sentenced for Buying Amphetamine on Darkweb

3 August 2022

A teenager who bought drugs on the darkweb was given 150 hours of community service. A Jersey teenager who bought... The post Jersey Teen Sentenced for Buying Amphetamine on Darkweb… [...]

Security Scorecards v4.5 releases: OSS Security Scorecards

3 August 2022

Security Scorecards Goals Automate analysis and trust decisions on the security posture of open source projects. Use this data to... The post Security Scorecards v4.5 releases: OSS Security Scorecards appeared… [...]

Apache Tomcat Scanner: scan for Apache Tomcat server vulnerabilities

3 August 2022

Apache Tomcat Scanner A python script to scan for Apache Tomcat server vulnerabilities. Features Multithreaded workers to search for Apache... The post Apache Tomcat Scanner: scan for Apache Tomcat server… [...]

CVE-2022-31656: critical auth bypass flaw in multiple VMware products

3 August 2022

VMware on Tuesday announced patches for several critical and high-severity vulnerabilities affecting VMware Workspace ONE Access, Identity Manager, vRealize Automation,... The post CVE-2022-31656: critical auth bypass flaw in multiple VMware… [...]

CVE-2022-29154: Rsync client-side arbitrary file write vulnerability

2 August 2022

The developer of the rsync project has just released new versions of their software to patch a vulnerability (CVE-2022-29154) that... The post CVE-2022-29154: Rsync client-side arbitrary file write vulnerability appeared… [...]

ForceAdmin: Create infinite UAC prompts forcing a user to run as admin

2 August 2022

ForceAdmin ForceAdmin is a c# payload builder, creating infinite UAC pop-ups until the user allows the program to be run.... The post ForceAdmin: Create infinite UAC prompts forcing a user… [...]

Woman Heads to Prison for Hiring a "Hitman” on the Darkweb

2 August 2022

A Pelahatchie, Mississippi, woman will spend ten years in prison for trying to hire a hitman on the darkweb to... The post Woman Heads to Prison for Hiring a “Hitman”… [...]

ESP32 Marauder v0.9.12 releases: suite of WiFi/Bluetooth offensive and defensive tools for the ESP32

2 August 2022

ESP32 Marauder The ESP32 Marauder is a suite of WiFi/Bluetooth offensive and defensive tools created for the ESP32 and was... The post ESP32 Marauder v0.9.12 releases: suite of WiFi/Bluetooth offensive… [...]

CVE-2022-2560: CompleteFTP Directory Traversal Arbitrary File Deletion Flaw

2 August 2022

A high EnterpriseDT CompleteFTP vulnerability (CVE-2022-2560), which was discovered by rgod on Jun 7, 2022, just goes public today on... The post CVE-2022-2560: CompleteFTP Directory Traversal Arbitrary File Deletion Flaw… [...]

Three Sentenced in the UK for Selling Drugs on the Darkweb

1 August 2022

Three drug dealers were sentenced to prison for producing and selling kilogram quantities of drugs on the darkweb. In October... The post Three Sentenced in the UK for Selling Drugs… [...]

SilentHound – Quietly Enumerate An Active Directory Domain Via LDAP Parsing Users, Admins, Groups, Etc.

1 August 2022

Quietly enumerate an Active Directory Domain via LDAP parsing users, admins, groups, etc. Created by Nick Swink from Layer 8... The post SilentHound – Quietly Enumerate An Active Directory Domain… [...]

Google to Reduce SSL Certificate Lifespan to 90 Days

22 March 2023

Recently, Google declared its plan to reduce the maximum validity for public TLS (SSL) certificates from 398 to 90 days. Under its “Moving Forward, Together” plan, Google intended to limit… [...]

Hackers Weaponized and Exploited Over 55 Zero-days in Microsoft, Google, and Apple

22 March 2023

Mandiant researchers have recently reported that 55 zero-day vulnerabilities were actively exploited in 2022, most against the following brands and their products:- Researchers state that hackers are still targeting zero-day… [...]

BFSI Sector at the Forefront of Cyberattacks

21 March 2023

In recent years, the BFSI Sector (Banking, Financial Services, and Insurance) has become a primary target for cyber attackers. A 2022 report by IBM revealed that the average cost of… [...]

Ferrari Hacked – Attackers Gained Access to Company’s IT Systems

21 March 2023

A threat actor recently contacted Ferrari S.p.A., an Italian luxury sports car manufacturer headquartered in Maranello, demanding a ransom for access to specific client contact information. The company suffered a… [...]

HinataBot – A New Botnet Could Launch Massive 3.3 Tbps DDoS Attacks

20 March 2023

HinataBot The post HinataBot – A New Botnet Could Launch Massive 3.3 Tbps DDoS Attacks appeared first on GBHackers - Latest Cyber Security News | Hacker News. [...]

NBA Cyber Incident – Fans’ Personal Information Exposed

20 March 2023

As a result of a recent data breach, the NBA notified all its fans about the fact that a significant amount of personal information was compromised. While using the information… [...]

Beware of New Trigona Ransomware Attacking Finance and Marketing Industries

18 March 2023

The relatively new Trigona ransomware strain, according to Unit 42 researchers, was particularly active in December 2022, targeting industries in the manufacturing, finance, construction, agriculture, marketing, and high technology industries.… [...]

Fake Calls Android Malware Attacking Android Users to Steal Banking Details

17 March 2023

An Android Trojan dubbed “FakeCalls” was spotted by the Check Point Research team. This malware can pretend to be one of more than 20 financial applications and imitate phone conversations… [...]

CISA Urgent Warning: Adobe ColdFusion Bug Exploited As A Zero-day in the Wild

16 March 2023

CISA has updated its list of security flaws that have been actively exploited, including a critical vulnerability affecting Adobe ColdFusion versions 2021 and 2018. The vulnerability is tracked as (CVE-2023-26360),… [...]

US Federal Agency Hacked By Exploiting Telerik Vulnerability in IIS Server

16 March 2023

As a result of a joint effort of the CISA, FBI, and MS-ISAC, a public advisory was published recently. This public advisory claims that between November 2022 and the beginning… [...]

Chrome 111 Update Patches High-Severity Vulnerabilities

23 March 2023

All seven of the externally reported issues are high-severity memory safety bugs, with four of them described as use-after-free vulnerabilities, a type of bug that could lead to arbitrary code… [...]

Netgear Orbi router vulnerable to arbitrary command execution

22 March 2023

Cisco Talos recently discovered four vulnerabilities in the Netgear Orbi mesh wireless system, including the main hub router and satellite routers that extend the network’s range. [...]

CISA Alerts on Critical Security Vulnerabilities in Industrial Control Systems

22 March 2023

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) released eight Industrial Control Systems (ICS) advisories on Tuesday, warning of critical flaws affecting equipment from Delta Electronics and Rockwell Automation. [...]

Emotet Adopts the Trend for OneNote Infection

22 March 2023

Security researcher abel took the wraps off Emotet’s new distribution technique that allows it to propagate through Microsoft OneNote email attachments. The operators have a history of deploying malicious macros… [...]

NYC Special Needs Students' Records Found Exposed on Web

22 March 2023

Tens of thousands of documents containing personal information of special education students within New York City's public school system were held in an unsecured database exposed to the internet. [...]

Security Researchers Spot $36 Million BEC Attack Against Insurance Company

22 March 2023

The email was spoofed to appear as if sent from the SVP and general counsel of a trusted, long-term partner company of the targeted enterprise, according to Abnormal Security. [...]

Trigona Evolves TTPs, Targets Orgs Worldwide

22 March 2023

Trigona ransomware, which surfaced in December 2022, targeted at least 15 organizations across different sectors in the U.S., Australia, Italy, France, New Zealand, and Germany. The malware is capable of… [...]

Update: LockBit ransomware gang now also claims City of Oakland breach

22 March 2023

This is the second ransomware gang claiming to have stolen data from the City of Oakland after Play ransomware took responsibility in early March for a mid-February cyberattack. [...]

UK: NCSC Launches Two New Tools for Small Businesses

22 March 2023

The UK’s leading cybersecurity agency has launched two new services designed to help the nation’s small businesses to more effectively enhance their cyber-risk management. [...]

How to combat hardware Trojans by detecting microchip manipulations

22 March 2023

Researchers from Ruhr University Bochum, Germany, and the Max Planck Institute for Security and Privacy (MPI-SP) are pioneering innovative detection techniques to combat these hardware Trojans. [...]

Winter Vivern APT Targets European Government Entities With Aperetif

22 March 2023

SentinelOne spotted the Winter Vivern APT group targeting Polish government agencies, Indian government entities, the Ukraine Ministry of Foreign Affairs, and the Italy Ministry of Foreign Affairs in cyberespionage campaigns… [...]

Over 2400 Fake Pages Found Targeting Job Seekers in Middle East, Africa

22 March 2023

“Should they click on the ‘apply’ button contained on these scam web pages, victims are redirected to phishing websites that the scammers create to harvest the credentials of victims’ social… [...]

CatB Ransomware Exploits MSDTC Service to Steal Data

22 March 2023

According to researchers at SentinelOne, the gang has lately shifted to DLL hijacking via Microsoft Distributed Transaction Coordinator (MSDTC) to extract and launch ransomware payloads. [...]

Windows 11 Snipping Tool privacy bug exposes cropped image content

22 March 2023

When opening a file in the Windows 11 Snipping Tool and overwriting an existing file, instead of truncating any unused data, it leaves the unused data behind, allowing it to… [...]

New NAPLISTENER Malware Used by REF2924 Group to Evade Network Detection

22 March 2023

REF2924 is the moniker assigned to an activity cluster linked to attacks against an entity in Afghanistan as well as the Foreign Affairs Office of an ASEAN member in 2022. [...]

Windows 11, Tesla, macOS & Ubuntu Desktop Hacked – Pwn2Own Day One

23 March 2023

On the first day, Pwn2Own Vancouver 2023 hacking challenge participants compromised Windows 11, Tesla, macOS, and Ubuntu Desktop. AbdulAziz Hariri of Haboob SA, who completed his attack against Adobe Reader… [...]

ChatGPT Privacy Bug Exposes Chat Histories to Other Users

22 March 2023

A severe flaw recently affecting ChatGPT, an artificial intelligence chatbot developed by OpenAI, exposed chat history and consequently caused an outage. After observing Chinese characters in the title of their… [...]

Hackers Attack Administrative Organizations Using PowerMagic and CommonMagic Malware

22 March 2023

Significant numbers of cyberattacks are executed in a political or geopolitical context that Kaspersky researchers and the international community are identifying. In recent weeks, reports have surfaced of attacks carried… [...]

Hackers Attack .NET Developers Using Malicious NuGet Repository Packages

22 March 2023

There is a concerning trend among cybercriminals targeting individuals working with the .NET framework using a sneaky tactic called typosquatting. This involves creating fake packages that mimic the names of… [...]

Ferrari Hacked – Attackers Stolen Payment Data & Demand For Ransom

21 March 2023

Recently, the renowned manufacturer of sports cars Company “Ferrari” from Italy reported that a ransomware attack targeted their IT systems and accessed or stole sensitive data. The company stated that… [...]

Meta Manager Was Hacked By Surveillance-For-Hire Software for Around One Year

21 March 2023

A U.S. and Greek national, Artemis Seaford, who worked for Meta’s trust and safety team while headquartered in Greece, was subjected to a year-long wiretap by the Greek national intelligence… [...]

Bitcoin ATMs Hacked – Attackers Exploiting a 0-Day Vulnerability in Its Platform

21 March 2023

General Bytes, a Prague-based company, announced on 18 March that it had received a hacker warning saying it had remotely uploaded a Java application to its management platform to steal… [...]

Red Team vs Blue Team Operations : How Does it Works?

21 March 2023

Security is a multifaceted field with multiple roles for carrying out diverse operations. In this article, we demystify the concept of the red and blue teams in security. First, why… [...]

RAT Developer Arrested for Hacking Over 10,000 Computers

20 March 2023

An investigative team from the Ukrainian National Cyber Police has arrested the 25-year-old developer of RAT malware, which infected over 10,000 computers while posing as a game application. Employees of… [...]

Google Uncovers 18 Zero-Day Vulnerabilities in Samsung’s Exynos Chipsets

18 March 2023

The Project Zero team at Google has recently found and reported 18 zero-day vulnerabilities in Samsung’s Exynos chipsets, which are mainly used in:- Among the 18 zero-day vulnerabilities, four vulnerabilities… [...]

Two Spring Framework flaws put your java applications in great risk

22 March 2023

Spring is a widely popular application framework that gives software developers the ability to rapidly and simply construct Java applications that include capabilities often seen in enterprise-level software. Thereafter, you’llRead… [...]

Hackers demanded $1 million from Ferrari for not leaking customers personal information

21 March 2023

Ferrari has admitted to being the victim of a data hack and an extortion demand. The threat actors may have obtained client names, addresses, email addresses, and phone numbers, accordingRead… [...]

Clop Ransomware hacks into Hitachi Energy corporation

17 March 2023

Hitachi Energy, a division of the Japanese multinational engineering and technology corporation Hitachi, has acknowledged a data breach, which occurred as a result of the Clop ransomware group exploiting aRead… [...]

Freely decrypt Conti-based ransomware files with this new decryption tool

16 March 2023

A new decryption tool that aids victims of a ransomware version that was based on previously released Conti source code has been published. Ransomware gangs like Conti have dominated the criminalRead… [...]

Two high severity vulnerabilities in Zoom app

16 March 2023

The video chat company Zoom has issued updates for various security flaws that leave users of Windows and macOS vulnerable to malicious hacker attacks. These vulnerabilities affect users of bothRead… [...]

ALPHV ransomware threatens to disclose data stolen from Amazon’s Ring security cameras

14 March 2023

The ALPHV ransomware organization is responsible for a string of ransomware operations that have been carried out via the BlackCat software, and it runs a platform that provides ransomware asRead… [...]

This Plex vulnerability could cause the same damage to your company as it did to LastPass

14 March 2023

The first problem is a high-severity vulnerability in Plex Media Server that has been tracked as CVE-2020-5741 and is defined as a deserialization issue. This flaw may be abused toRead… [...]

Data of 9 million AT&T customers leaked

10 March 2023

AT&T, the largest provider of mobile phone services in the United States, is in the process of alerting millions of its cellular customers that a data breach at a third-partyRead… [...]

Toyota Mexico leaked customer personal information via its CRM

9 March 2023

Eaton Zveare, a hobbyist white hat hacker located in Sarasota, Florida, gained access to the C360 customer relationship management online program. This tool is used by the Japanese automobile manufacturerRead… [...]

VMware NSX Manager vulnerabilities are being exploited by the threat actors in the wild

7 March 2023

There have been efforts made to exploit CVE-2022-31678 and CVE-2021-39144 in the wild, as discovered by the Wallarm Detect team. The first vulnerabilities were discovered in VMware NSX Manager towardsRead… [...]

How new ATM scam uses glue and NFC function to empty bank accounts

6 March 2023

ATMs provide a high level of convenience; yet, they have also been a traditional target for robbers. Some people will employ skimmers to get your account number, while others mayRead… [...]

ShellBot DDoS Malware Targets Poorly Managed Linux Servers

22 March 2023

A new campaign is deploying variants of the ShellBot malware, specifically targeting poorly maintained Linux SSH servers. It seems the threat actors use scanner malware to find systems that have… [...]

Another GoAnywhere Attack Affects Japanese Giant Hitachi Energy

22 March 2023

Hitachi Energy confirmed that it was the victim of a data breach, part of the GoAnywhere attacks. The Clop ransomware gang exploited a Fortra GoAnywhere MFT (Managed File Transfer) zero-day… [...]

New PowerMagic and CommonMagic Malware Used by Threat Actors to Steal Data

22 March 2023

A new backdoor dubbed PowerMagic and “a previously unseen malicious framework” named CommonMagic were utilized in assaults by an advanced threat actor, according to security researchers. Both malware pieces have… [...]

Researchers Reveal Insights into CatB Ransomware’s Advanced Evasion Methods

21 March 2023

To avoid detection and launch of the payload, threat actors behind CatB ransomware used a technique called DLL search order hijacking. Based on code-level similarities, CatB, also known as CatB99… [...]

Ferrari Announces Data Breach. Customers Risk Data Leakage

21 March 2023

On March 20th, Ferrari announced they were victims of a cyberattack that could result in customers` data leakage. Threat actors claimed to have breached some of the Ferrari IT systems… [...]

Banking Trojan Mispadu Found Responsible for 90,000+ Credentials Stolen

21 March 2023

Multiple spam campaigns targeting Bolivia, Chile, Mexico, Peru, and Portugal have been linked to a banking trojan called Mispadu that steals credentials and delivers other malicious payloads. Mispadu (aka URSA) can… [...]

A Cancer Patient’s Fight for Justice Against a Hospital Ransomware Attack

20 March 2023

A cancer patient whose naked medical photos and records were stolen by a ransomware gang and posted online has sued her healthcare provider for allowing the “preventable” and “seriously damaging”… [...]

Emotet Malware Spreads Out Through Malicious Microsoft OneNote Attachments

20 March 2023

Emotet malware returns after three months break and uses Microsoft OneNote attachments to avoid macro-based security restrictions. Threat actors initially tried to use Word and Excel docs for deploying the… [...]

HinataBot: The Latest Go-based Threat Is Launching DDoS Attacks

20 March 2023

In January, a Go-based botnet named HinataBot (named after the character from the popular anime series Naruto) was discovered exploiting old vulnerabilities and weak credentials in HTTP and SSH honeypots.… [...]

What Is Stack Smashing?

17 March 2023

Stack smashing is a type of vulnerability that can lead to serious security breaches. This vulnerability occurs when a hacker exploits a flaw in a program’s memory allocation, causing the… [...]

5 Ways Heimdal® Protects You From DNS Attacks

17 March 2023

As cyber-attacks continue to proliferate, it’s essential for organizations to stay ahead of the game when it comes to security. One area that requires particular attention is the Domain Name… [...]

AI-Generated YouTube Videos Spread Raccoon, RedLine, and Vidar Info-stealers

17 March 2023

Hackers use AI-generated YouTube videos to deploy Raccoon, RedLine, and Vidar malware. The videos look like tutorials on how to download Adobe Photoshop, Premiere Pro, Autodesk 3ds Max, AutoCAD, etc.… [...]

BianLian Ransomware: The Dangerous Shift Toward Pure Data Extortion

17 March 2023

BianLian is a ransomware group that first appeared in July 2022, successfully infiltrating several high-profile organizations. It seems that recently, the ransomware group has shifted its focus from encrypting its… [...]

Makop Ransomware: The Arsenal of Cybercriminals Becomes Known

17 March 2023

In operation since 2020, the Makop ransomware gang is classified as a tier-B ransomware gang. The threat actor has successfully targeted companies in Europe and Italy with its hybrid arsenal… [...]

DDoS-as-a-service Attacks. What Are They and How Do They Work?

17 March 2023

This is the time to remind you again that online threats are always changing and so should your cybersecurity strategy. You know all the major types of cyberattacks that could… [...]

Shopper+ - 878,290 breached accounts

11 March 2023

In March 2023, "Canada's online shopping mall" Shopper+ disclosed a data breach discovered on a public hacking forum. The breach dated back to September 2020 and included 878k customer records… [...]

HDB Financial Services - 1,658,750 breached accounts

11 March 2023

In March 2023, the Indian non-bank lending unit HDB Financial Services suffered a data breach that disclosed over 70M customer records. Containing 1.6M unique email addresses, the breach also disclosed… [...]

Eye4Fraud - 16,000,591 breached accounts

6 March 2023

In February 2023, data alleged to have been taken from the fraud protection service Eye4Fraud was listed for sale on a popular hacking forum. Spanning tens of millions of rows… [...]

iD Tech - 415,121 breached accounts

6 March 2023

In February 2023, the tech camps for kids service iD Tech had almost 1M records posted to a popular hacking forum. The data included 415k unique email addresses, names, dates… [...]

LBB - 39,288 breached accounts

5 March 2023

In August 2022, customer data of the Indian shopping site "LBB" (Little Black Book) was posted to a popular hacking forum. The data contained over 3M records with 39k unique… [...]

GunAuction.com - 565,470 breached accounts

2 March 2023

In December 2022, the online firearms auction website GunAuction.com suffered a data breach which was later discovered left unprotected on the hacker's server. The data included over 565k user records… [...]

Convex - 150,129 breached accounts

26 February 2023

In February 2023, the Russian telecommunications provider Convex was hacked by "Anonymous" who subsequently released 128GB of data publicly, alleging it revealed illegal government surveillance. The leaked data contained 150k… [...]

RealDudesInc - 101,543 breached accounts

19 February 2023

In October 2022, the GTA mod menu provider RealDudesInc suffered a data breach that exposed over 100k email addresses (many of which are temporary guest account addresses). The breach also… [...]

Weee - 1,117,405 breached accounts

8 February 2023

In February 2023, data belonging to the Asian and Hispanic food delivery service Weee appeared on a popular hacking forum. Dating back to mid-2022, the data included 1.1M unique email… [...]

LimeVPN - 23,348 breached accounts

6 February 2023

In October 2020, the VPN provider LimeVPN suffered a data breach that exposed the personal information of tens of thousands of customers. The data included email, IP and physical addresses,… [...]

Truth Finder - 8,159,573 breached accounts

4 February 2023

In 2019, the public records search service TruthFinder suffered a data breach that later came to light in early 2023. The data included over 8M unique customer email addresses, names,… [...]

Instant Checkmate - 11,943,887 breached accounts

4 February 2023

In 2019, the public records search service Instant Checkmate suffered a data breach that later came to light in early 2023. The data included almost 12M unique customer email addresses,… [...]

School District 42 - 18,850 breached accounts

2 February 2023

In January 2023, Pitt Meadows School District 42 in British Columbia suffered a data breach. The incident exposed the names and email addresses of approximately 19k students and staff which… [...]

Planet Ice - 240,488 breached accounts

31 January 2023

In January 2023, the UK-based ice skating rink booking service Planet Ice suffered a data breach. The incident exposed the personal data of 240k people including email and physical addresses,… [...]

KomplettFritid - 139,401 breached accounts

23 January 2023

In January 2023, the online Norwegian store KomplettFritid was reported as having had a data breach dating back to February 2021. The incident exposed 140k customer records including physical, email… [...]

Autotrader - 20,032 breached accounts

23 January 2023

In January 2023, 1.4M records from the Autotrader online vehicle marketplace appeared on a popular hacking forum. Autotrader stated that the "data in question relates to aged listing data that… [...]

Zurich - 756,737 breached accounts

22 January 2023

In January 2023, the Japanese arm of Zurich insurance suffered a data breach that exposed 2.6M customer records with over 756k unique email addresses. The data was subsequently posted to… [...]

DoorDash - 367,476 breached accounts

7 January 2023

In August 2022, the food ordering and delivery service DoorDash disclosed a data breach that impacted a portion of their customers. DoorDash attributed the breach to an unnamed "third-party vendor"… [...]

SlideTeam - 1,464,271 breached accounts

7 January 2023

In April 2021, the "world’s largest collection of pre-designed presentation slides" SlideTeam had 1.4M records breached and later published to a popular hacking forum the following year. Allegedly sourced from… [...]

Twitter (200M) - 211,524,284 breached accounts

5 January 2023

In early 2023, over 200M records scraped from Twitter appeared on a popular hacking forum. The data was obtained sometime in 2021 by abusing an API that enabled email addresses… [...]