704 matches found
CVE-2020-5401
Cloud Foundry Routing Release, versions prior to 0.197.0, contains GoRouter, which allows malicious clients to send invalid headers, causing caching layers to reject subsequent legitimate clients trying to access the app...
Null pointer dereference
Cloud Foundry Routing Release, versions prior to 0.197.0, contains GoRouter, which allows malicious clients to send invalid headers, causing caching layers to reject subsequent legitimate clients trying to access the app...
New Microsoft Security innovations and partnerships
Today on the Official Microsoft Blog, Ann Johnson, Corporate Vice President of the Cybersecurity Solutions Group, shared how Microsoft is helping turn the tide in cybersecurity by putting artificial intelligence AI in the hands of defenders. She announced the general availability of Microsoft...
Google: Efforts Against Bad Android Apps on Play Store Are Working
Some of the efforts Google has made over the past few years to bolster the security of Android app users as well as the mobile apps available on its Google Play store are starting to work, according to the tech giant. The company, which historically has struggled mightily to keep bad apps and...
CVE-2019-15615
A wrong check for the system time in the Android App 3.9.0 causes a bypass of the lock protection when changing the time of the system to the past...
CVE-2019-15610
Improper authorization in the Circles app 0.17.7 causes retaining access when an email address was removed from a circle...
TikTok Riddled With Security Flaws
Researchers say they have discovered several major vulnerabilities in the short form video app TikTok. The reported vulnerabilities come as scrutiny around the Chinese-owned platform increases. Researchers say the most serious vulnerability in the platform could allow attackers to remotely take...
GraphQL Batching Attack
There is a new attack surface when the app tech stack includes GraphQL. It's Batched Attacks on GraphQL APIs. How can these apps be protected? Read more to find out. The post GraphQL Batching Attack appeared first on Wallarm Blog...
A week in security (December 2 – December 8)
Last week on Malwarebytes Labs, we took a look at a new version of the IcedID Trojan, described web skimmers up to no good, and took a deep dive into containerization. We also explored a report bringing bad news for organizations and insider threats, and threw a spotlight on a video game phish...
CVE-2019-15388
CVE-2019-15388 affects Coolpad 1851 devices with Android 8.1.0 where a pre-installed platform app com.lovelyfont.defcontainer exposes an exported service FontCoverService that accepts arbitrary commands and runs them as the system user. The attack requires no privileges and can be triggered by a ...
CVE-2019-15385
The CVE-2019-15385 issue affects the Infinix Note 5 running Android, where a pre-installed app (package com.mediatek.wfo.impl, versionCode 27, versionName 8.1.0) exposes an exported interface that allows any co-located app to modify a system property without proper authorization. This is tied to ...
CVE-2019-15352
CVE-2019-15352 affects the Coolpad 1851 Android device (build fingerprint Coolpad/android/android:8.1.0/O11019/1534834761:userdebug/release-keys). The issue centers on a pre-installed app with package name com.mediatek.wfo.impl (versionCode 27, versionName 8.1.0) that allows any co-located app to...
CVE-2019-15350
The CVE-2019-15350 entry describes a vulnerability on Tecno Camon Android devices where a pre-installed platform app (com.lovelyfont.defcontainer, versionCode 7) exposes an exported service (com.lovelyfont.manager.service.FunctionService) that allows any local app to supply a Dex file path, which...
Further enhancing security from Microsoft, not just for Microsoft
Legacy infrastructure. Bolted-on security solutions. Application sprawl. Multi-cloud environments. Company data stored across devices and apps. IT and security resource constraints. Uncertainty of where and when the next attack or leak will come, including from the inside. These are just a few of...
Samsung Rolls Out Fix For Galaxy S10 Fingerprint Sensor Glitch
Samsung has reportedly started rolling out a software patch for the Galaxy S10 and Note10, addressing glitches in both phone models that allow the bypass of their built-in fingerprint authentication sensors. The fix comes after Samsung admitted last week that anyone can bypass the Galaxy S10...
CVE-2019-16992
CVE-2019-16992 affects the Keybase iOS app (v2.13.2), where the implementation could sign a cryptocurrency attestation (that an address at keybase.io can be used for Stellar payments) using the user’s private key without clear user notice. The issue is described as a misuse/insufficient notice ab...
Top 5 use cases to help you make the most of your Cloud Access Security Broker
The number of apps and the flexibility for users to access them from anywhere continues to increase. This presents a challenge for IT departments in ensuring secure access and protecting the flow of critical data with a consistent set of controls. Cloud Access Security Brokers CASBs are a new...
Microsoft is awarded Zscaler’s Technology Partner of the Year for 2019
Last week at Zscaler’s user conference, Zenith Live, Microsoft received Zscaler’s Technology Partner of the Year Award in the Impact category. The award was given to Microsoft for the depth and breadth of integrations we’ve collaborated with Zscaler on and the positive feedback received from...
Google Targets Data-Abusing Apps with Bug Bounty Launch
Google is looking to squash vulnerabilities on its Google Play app marketplace with a new bug-bounty program aimed at identifying data-abuse issues in Android apps and Chrome extensions. The company on Thursday announced the Developer Data Protection Reward Program, which, depending on the impact...
