Multiple critical vulnerabilities have been discovered in the Exim email server software by the Qualys Research Team. Some of these flaws can be chained together to achieve full remote unauthenticated code execution and root privileges. Exim is a widely used mail transfer agent (MTA) that even comes pre-installed on show more ...
Dell desktops, laptops, and tablets built after 2009 can be abused to grant rogue users and malware system-administrator access. According to reports, hundreds of millions of computers can be hacked. This is possible due to by five security flaws present in a system driver, found on all DELL brand computers. Labeled show more ...
Belgium was hit by a major cyberattack on Tuesday, according to Belgian media, affecting many of the country's most important institutions. Its source is still unknown. The attack was a major distributed denial of service (DDoS) attack that took down both internal and public-facing networks. Hackers show more ...
Google's Android operating system update for May 2021 addresses a total of 42 vulnerabilities, four of which are marked as critical severity. The new security patch 2021-05-01 fixes three main critical flaws which were identified in the System component. All these three security breaches could be exploited to show more ...
Students are often encouraged to use education-focused mobile applications to help with learning, classwork, and other day-to-day activities. Many of these applications gather data from children and share it with third-party partners. The Me2B Alliance, a non-profit industry organization dedicated to respectful show more ...
You can find QR codes on everything from yogurt containers to museum exhibitions, from utility bills to lottery tickets. People use them to open websites, download apps, collect loyalty program points, make payments and transfer money, and even to give to charity. The accessible and practical technology is convenient show more ...
Phishers targeting Microsoft Office 365 users increasingly are turning to specialized links that take users to their organization’s own email login page. After a user logs in, the link prompts them to install a malicious but innocuously-named app that gives the attacker persistent, password-free access to any of show more ...
The attack comes less than a month after Glovo raised 450 million euros ($541 million) in funding, riding a wave of interest in delivery services, which have boomed during the COVID-19 pandemic.
A Northeastern University research team finds code defects -- and some vulnerabilities -- by detecting when programmers used different code snippets to perform the same functions.
Cellebrite's UFED versions 5.0 through 7.29 used four hard-coded and private RSA keys (CVE-2020-11723) to authenticate to the Android debug bridge daemon on targeted devices.
Hundreds of millions of Dell desktops, laptops, notebooks, and tablets will need to update their Dell DBUtil driver to fix a 12-year-old vulnerability that exposes systems to attacks.
During this two-month period, threat actors had modified the legitimate Codecov Bash Uploader tool to exfiltrate environment variables from Codecov customers' CI/CD environments.
Innovative twists on banking scams and corporate-account hunters wielding increasingly clever lures, including fake COVID-19 vaccine promises, are likely to dominate the spam and phishing landscape.
Researchers disclosed a novel malware that uses a variety of tricks to stay under the radar and evade detection, while stealthily capable of executing arbitrary commands on infected systems.
The new security patch 2021-05-01 fixes three main critical flaws identified in the System component which could be exploited to run arbitrary code on a vulnerable Android device.
The Sysrv-hello crytpojacking botnet actively scans for vulnerable Windows and Linux enterprise servers and infects them with Monero miner, as well as self-propagating malware payloads.
It has been discovered in two separate cyberattack campaigns. Both the campaigns employed unique social engineering techniques and popular products used in many organizations.
ATT&CK v9 adds container-related attack techniques, which is the result of a project conducted by MITRE’s Center for Threat-Informed Defense and sponsored by Microsoft, Citigroup, and JPMorgan Chase.
A massive distributed denial of service (DDoS) attack hit most of the Belgium government’s IT network, according to the media the attack also knocked offline internal systems.
Collectively named '21Nails,' the security flaws include 11 vulnerabilities that require local access to an Exim server and 10 other weaknesses that could be exploited remotely.
The attacks hit at least 50 organizations from a wide variety of industries in two waves, on December 2nd and between December 11th and 18th, according to a Mandiant report published today.
The National Institute of Standards and Technology is seeking public comment as it plans to update its 2008 guidance for implementing the HIPAA Security Rule, which went into effect 20 years ago.
Kaspersky researchers track the malware as Javali, one of four major banking Trojans in Brazil -- alongside Guildma, Melcoz, and Grandoreiro. It is written in Delphi and has been active since 2018.
Attacks on fully decentralized currencies are growing with several attackers launching more complex attacks to mine cryptocurrency or spread miners.
Dubbed Panda Stealer, Trend Micro researchers said this week that the malware has been found targeting individuals across countries including the US, Australia, Japan, and Germany.
This phishing attack affected the personal information of current and former USAGM, Voice of America, and Office of Cuba Broadcasting employees who worked at the agency between 2013 and 2020.
Packed.Win32.Black.d malware suffers from having an open, unauthenticated proxy.
Trojan.Win32.Agent.xdtv malware suffers from an insecure permissions vulnerability.
The maintainers of Exim have released patches to remediate as many as 21 security vulnerabilities in its software that could enable unauthenticated attackers to achieve complete remote code execution and gain root privileges. Collectively named '21Nails,' the flaws include 11 vulnerabilities that require local access to the server and 10 other weaknesses that could be exploited remotely. The
A new academic study has highlighted a number of privacy and security pitfalls associated with recycling mobile phone numbers that could be abused to stage a variety of exploits, including account takeovers, conduct phishing and spam attacks, and even prevent victims from signing up for online services. Nearly 66% of the recycled numbers that were sampled were found to be tied to previous owners
PC maker Dell has issued an update to fix multiple critical privilege escalation vulnerabilities that went undetected since 2009, potentially allowing attackers to gain kernel-mode privileges and cause a denial-of-service condition. The issues, reported to Dell by researchers from SentinelOne on Dec. 1, 2020, reside in a firmware update driver named "dbutil_2_3.sys" that comes pre-installed on
Uh oh. Not only were Peloton bikes leaking personal information about users, but when told about the problem the company was far from perfect in its response.
