Oracle Banking Payments Information Disclosure Vulnerability

Oracle Banking Payments is a complete payment processing solution. An information disclosure vulnerability exists in the Payments Core component of Oracle Banking Payments. An attacker could exploit the vulnerability to compromise confidentiality...

Unspecified Vulnerability in Oracle Banking Payments (CNVD-2018-24144)

Oracle Banking Payments is a complete payment processing solution. An unspecified vulnerability exists in the Payments Core component of Oracle Banking Payments. An attacker could exploit this vulnerability to compromise confidentiality and integrity...

Unspecified Vulnerability in Oracle Banking Payments (CNVD-2018-24147)

Oracle Banking Payments is a complete payment processing solution. An unspecified vulnerability exists in the Payments Core component of Oracle Banking Payments. An attacker could exploit this vulnerability to compromise confidentiality, integrity, and availability...

Unspecified Vulnerability in Oracle Banking Payments (CNVD-2018-24153)

Oracle Banking Payments is a complete payment processing solution. An unspecified vulnerability exists in the Payments Core component of Oracle Banking Payments. An attacker could exploit this vulnerability to compromise confidentiality and integrity...

Unspecified Vulnerability in Oracle FLEXCUBE Universal Banking (CNVD-2018-24135)

Oracle FLEXCUBE Universal Banking is a real-time, online, comprehensive global core banking solution covering retail, corporate and investment banking. An unspecified vulnerability exists in the Infrastructure component of Oracle FLEXCUBE Universal Banking. An attacker could exploit this...

Unspecified Vulnerability in Oracle FLEXCUBE Universal Banking (CNVD-2018-24137)

Oracle FLEXCUBE Universal Banking is a real-time, online, comprehensive global core banking solution covering retail, corporate and investment banking. An unspecified vulnerability exists in the Infrastructure component in Oracle FLEXCUBE Universal Banking. An attacker could exploit this...

Oracle FLEXCUBE Universal Banking Information Disclosure Vulnerability (CNVD-2018-24134)

Oracle FLEXCUBE Universal Banking is a real-time, online, comprehensive global core banking solution covering retail, corporate and investment banking. An information disclosure vulnerability exists in the Infrastructure component in Oracle FLEXCUBE Universal Banking. An attacker could exploit th...

Oracle Banking Payments Denial of Service Vulnerability

Oracle Banking Payments is a complete payment processing solution. An unspecified vulnerability exists in the Payments Core component of Oracle Banking Payments. An attacker could exploit this vulnerability to affect availability...

Unspecified Vulnerability in Oracle Banking Payments (CNVD-2018-24145)

Oracle Banking Payments is a complete payment processing solution. An unspecified vulnerability exists in the Payments Core component of Oracle Banking Payments. An attacker could exploit this vulnerability to compromise confidentiality and integrity...

Unspecified Vulnerability in Oracle Banking Payments (CNVD-2018-24146)

Oracle Banking Payments is a complete payment processing solution. An unspecified vulnerability exists in the Payments Core component of Oracle Banking Payments. An attacker could exploit this vulnerability to compromise integrity and availability...

Unspecified Vulnerability in Oracle Banking Payments (CNVD-2018-24148)

Oracle Banking Payments is a complete payment processing solution. An unspecified vulnerability exists in the Payments Core component of Oracle Banking Payments. An attacker could exploit this vulnerability to compromise confidentiality and integrity...

DanaBot Trojan Targets Bank Customers In Phishing Scam

The recently-discovered DanaBot banking trojan is making the rounds in a phishing campaign that targets potential victims with fake invoices from software company MYOB. The emails purport to be invoices from MYOB, an Australian multinational corporation that provides tax, accounting and other...

ThreatList: 6-Year-Old Dorkbot Banking Malware Resurfaces as Big Threat

The banking malware called Dorkbot is back. Samples of the 6-year-old malware are now ranked the second biggest banking malware headache in 2018 so far, according to new data from Check Point. “Dorkbot, known malware that dates back to 2012, has entered back the top ranks, starring in the APAC as...

Threat Roundup for June 29 to July 6th

Today, as we do every week, Talos is giving you a glimpse into the most prevalent threats we've observed this week — covering the dates between June 29 and July 6. As with previous roundups, this post isn't meant to be an in-depth analysis. Instead, it will summarize the threats we've observed by...

ThreatList: Biggest Cybercrime Developments in 2018, So Far

Despite several successful crackdowns on several cybercriminal underworld gangs, miscreants have been highly active during the first half of 2018, according Flashpoint. According to Flashpoint’s mid-year Business Risk Intelligence report, released last month, the major developments in the...

Apache CXF CVE-2018-8039 TLS Hostname Verification Security Bypass Vulnerability

Description Apache CXF is prone to a security-bypass vulnerability. Successfully exploiting this issue may allow attackers to obtain sensitive information by conducting a man-in-the-middle attack. This may lead to other attacks. The following versions of product are vulnerable: Apache CXF 3.1.16...

Thousands of Mobile Apps Expose Their Unprotected Firebase Hosted Databases

Mobile security researchers have discovered unprotected Firebase databases of thousands of iOS and Android mobile applications that are exposing over 100 million data records, including plain text passwords, user IDs, location, and in some cases, financial records such as banking and cryptocurren...

Perverse Vulnerability from Interaction between 2-Factor Authentication and iOS AutoFill

Apple is rolling out an iOS security usability feature called Security code AutoFill. The basic idea is that the OS scans incoming SMS messages for security codes and suggests them in AutoFill, so that people can use them without having to memorize or type them. Sounds like a really good idea, bu...

New Banking Trojan Can Launch Overlay Attacks on Latest Android Versions

Researchers have discovered a new Android banking trojan that holds striking similarities to the infamous Lokibot – but packed with new tricky features, most notably its ability to implement an overlay attack on Android 7 and 8. Researchers at ThreatFabric, who discovered the trojan, said...

Machine learning vs. social engineering

Machine learning is a key driver in the constant evolution of security technologies at Microsoft. Machine learning allows Microsoft 365 to scale next-gen protection capabilities and enhance cloud-based, real-time blocking of new and unknown threats. Just in the last few months, machine learning h...