CVE-2020-0096

In startActivities of ActivityStartController.java, there is a possible escalation of privilege due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

HTTP Suspicious Linux Tilde Paths

Linux tilde is a directory that represent the home directory of any currently active user. A remote attacker may create a malicious HTTP request to obtain sensitive information...

CISA-FBI Joint Announcement on PRC Targeting of COVID-19 Research Organizations

The Cybersecurity and Infrastructure Security Agency CISA and the Federal Bureau of Investigation FBI have jointly released a Public Service Announcement on the People’s Republic of China’s targeting of COVID-19 research organizations. CISA and FBI encourage COVID-19 research organizations to...

North Korean Malicious Cyber Activity

The Cybersecurity and Infrastructure Security Agency CISA, the Federal Bureau of Investigation FBI, and the Department of Defense DoD have identified three malware variants—COPPERHEDGE, TAINTEDSCRIBE, and PEBBLEDASH—used by the North Korean government. In addition, U.S. Cyber Command has released...

SkyWrapper - Tool That Helps To Discover Suspicious Creation Forms And Uses Of Temporary Tokens In AWS

SkyWrapper is an open-source project which analyzes behaviors of temporary tokens created in a given AWS account. The tool is aiming to find suspicious creation forms and uses of temporary tokens to detect malicious activity in the account. The tool analyzes the AWS account, and creating an excel...

APT trends report Q1 2020

For more than two years, the Global Research and Analysis Team GReAT at Kaspersky has been publishing quarterly summaries of advanced persistent threat APT activity. The summaries are based on our threat intelligence research and provide a representative snapshot of what we have published and...

CVE-2016-11056

creationtimestamp| type| source ---|---|--- 2020-04-28 21:05:23+00:00| seen| https://t.me/cibsecurity/11704...

CVE-2016-3393

creationtimestamp| type| source ---|---|--- 2020-04-28 08:18:15+00:00| seen| MISP/5808a24a-2ae8-45cf-85c8-2227bce2ab96 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-03 15:42:25+00:00| seen| https://t.me/arpsyndicate/969 2024-12-24 20:31:56+00:00| seen|...

CVE-2017-18706

creationtimestamp| type| source ---|---|--- 2020-04-24 19:07:17+00:00| seen| https://t.me/cibsecurity/11636...

CVE-2017-18780

creationtimestamp| type| source ---|---|--- 2020-04-22 19:37:31+00:00| seen| https://t.me/cibsecurity/11517...

Vietnamese Threat Actors APT32 Targeting Wuhan Government and Chinese Ministry of Emergency Management in Latest Example of COVID-19 Related Espionage

From at least January to April 2020, suspected Vietnamese actors APT32 carried out intrusion campaigns against Chinese targets that Mandiant Threat Intelligence believes was designed to collect intelligence on the COVID-19 crisis. Spear phishing messages were sent by the actor to China's Ministry...

Malicious Package

Overview bunto-testpluginmalicious is a malicious package. Affected versions of this package were found to be a Malicious Package, as it utilised typosquatting to run Malicious 3rd party scripts. It replaced genuine packages using an and replaced it with - and vice versa Remediation Avoid using...

CVE-2019-10575

creationtimestamp| type| source ---|---|--- 2020-04-16 17:02:29+00:00| seen| https://t.me/cibsecurity/11339...

CVE-2019-2880

creationtimestamp| type| source ---|---|--- 2020-04-15 20:14:23+00:00| seen| https://t.me/cibsecurity/11273...

Family Safety update improves web filtering and activity reporting in Windows 8.1 and Windows RT 8.1

Family Safety update improves web filtering and activity reporting in Windows 8.1 and Windows RT 8.1 This article describes an update for Microsoft Family Safety to improve web filtering and activity reporting. The update has a prerequisite. Check out the known issues for Mozilla Firefox users. Y...

CVE-2017-18669

An issue was discovered on Samsung mobile devices with N7.x software. Persona has an unprotected API that allows launch of any activity with system privileges. The Samsung ID is SVE-2017-9000 June 2017...

Official Government COVID-19 Mobile Apps Hide a Raft of Threats

A rash of COVID-19 Android mobile apps have emerged that are aimed at helping citizens in Iran, Italy and Colombia track symptoms and virus infections. However, they’re also putting people’s privacy and the security of their data at risk, researchers have found. Security researchers at the ZeroFO...

CVE-2020-11585

There is an information disclosure issue in DNN formerly DotNetNuke 9.5 within the built-in Activity-Feed/Messaging/Userid/ Message Center module. A registered user is able to enumerate any file in the Admin File Manager other than ones contained in a secure folder by sending themselves a message...

CVE-2020-11585

There is an information disclosure issue in DNN formerly DotNetNuke 9.5 within the built-in Activity-Feed/Messaging/Userid/ Message Center module. A registered user is able to enumerate any file in the Admin File Manager other than ones contained in a secure folder by sending themselves a message...

Information disclosure

There is an information disclosure issue in DNN formerly DotNetNuke 9.5 within the built-in Activity-Feed/Messaging/Userid/ Message Center module. A registered user is able to enumerate any file in the Admin File Manager other than ones contained in a secure folder by sending themselves a message...