July 29, 2021—KB5005393 (OS Build 14393.4532) Out-of-band

None None...

KB5005390: Noncompliant devices might not work when using PIV after installing the July 13, 2021 update for Windows Server 2008 SP2

KB5005390: Noncompliant devices might not work when using PIV after installing the July 13, 2021 update for Windows Server 2008 SP2 Summary This update addresses the following issue: Temporarily addresses an issue with devices that do not comply with section 3.2.1 of the RFC 4556 specification,...

KB5005391: Noncompliant devices might not work when using PIV after installing the July 13, 2021 update for Windows 8.1 or Windows Server 2012 R2

KB5005391: Noncompliant devices might not work when using PIV after installing the July 13, 2021 update for Windows 8.1 or Windows Server 2012 R2 Summary This update addresses the following issue: Temporarily addresses an issue with devices that do not comply with section 3.2.1 of the RFC 4556...

CVE-2021-0288

A vulnerability in the processing of specific MPLS packets in Juniper Networks Junos OS on MX Series and EX9200 Series devices with Trio-based MPCs Modular Port Concentrators may cause FPC to crash and lead to a Denial of Service DoS condition. Continued receipt of this packet will sustain the...

Is crypto’s criminal rollercoaster approaching a terminal dip?

It’s a turbulent time in the cryptomining realm, especially for malware authors. Some big attacks and a lot of publicity has resulted in prolific groups promising to disband, even if potentially only temporarily. Running a tighter ship The mining banhammer continues to swing as China keeps puttin...

Cybercriminals using Marvel’s Black Widow movie to spread malware

By Waqas Apart from malware, offers to watch the online premiere of the Black Widow movie are being used to steal payment card data. This is a post from HackRead.com Read the original post: Cybercriminals using Marvels Black Widow movie to spread malware...

July 13, 2021—KB5004305 (Monthly Rollup)

None None...

July 13, 2021—KB5004302 (Security-only update)

None None...

July 13, 2021—KB5004299 (Security-only update)

None None...

July 13, 2021—KB5004285 (Security-only update)

None None...

July 13, 2021—KB5004307 (Security-only update)

None None...

July 13, 2021—KB5004294 (Monthly Rollup)

None None...

Magecart Hackers Hide Stolen Credit Card Data Into Images for Evasive Exfiltration

Cybercrime actors part of the Magecart group have latched on to a new technique of obfuscating the malware code within comment blocksBlockcomment and encoding stolen credit card data into images and other files hosted on the server, once again demonstrating how the attackers are continuously...

Security Bulletin: Vulnerability in RC4 stream cipher affects IBM InfoSphere Optim Performance Manager (CVE-2015-2808)

Summary The RC4 “Bar Mitzvah” Attack for SSL/TLS affects IBM InfoSphere Optim Performance Manager. Vulnerability Details CVEID: CVE-2015-2808 DESCRIPTION: The RC4 algorithm, as used in the TLS protocol and SSL protocol, could allow a remote attacker to obtain sensitive information. An attacker...

Interpol Arrests Moroccan Hacker Engaged in Nefarious Cyber Activities

Law enforcement authorities with the Interpol have apprehended a threat actor responsible for targeting thousands of unwitting victims over several years and staging malware attacks on telecom companies, major banks, and multinational corporations in France as part of a global phishing and credit...

SQL Injection Vulnerability in the Integrated Management System of Beijing Smart Vision Technology Industry Co.

Beijing Intelligent Vision Technology One Card Integrated Management System is a private cloud platform with Intelligent Vision Intelligent Identification Control Platform as the core engine. Beijing Intelligent Vision Technology Industry Co., Ltd. one card integrated management system there is a...

SQL Injection Vulnerability in WDECP-IC IC Card Prepaid Monitoring Platform

WDECP-IC IC card prepaid monitoring platform is a management platform developed by the application of IC card technology in the field of intelligent water conservancy. WDECP-IC IC card prepaid monitoring platform has a SQL injection vulnerability, which can be exploited by attackers to obtain...

Lil’ skimmer, the Magecart impersonator

This blog post was authored by Jérôme Segura A very common practice among criminals consists of mimicking legitimate infrastructure when registering new domain names. This is very true for Magecart threat actors who love to impersonate Google, jQuery and many other popular brands. In this post we...

NFC Flaws in POS Devices and ATMs

Its a series of vulnerabilities: Josep Rodriguez, a researcher and consultant at security firm IOActive, has spent the last year digging up and reporting vulnerabilities in the so-called near-field communications reader chips used in millions of ATMs and point-of-sale systems worldwide. NFC syste...

FIN7 ‘Pen Tester’ Headed to Jail Amid $1B in Losses

A so-called “pen-tester” for the financial cybergang known as FIN7 will spend seven years in the slammer after being convicted for payment-card theft. According to the Department of Justice, Andrii Kolpakov, a Ukrainian national, was also ordered to pay a tidy $2.5 million in restitution for his...