Huawei HarmonyOS Denial of Service Vulnerability (CNVD-2021-60511)

Huawei HarmonyOS is an operating system from Huawei China. It provides a microkernel-based distributed operating system. Huawei HarmonyOS suffers from a denial-of-service vulnerability that can be exploited by local attackers to cause a kernel memory leak...

‘DeadRinger’ Targeted Exchange Servers Long Before Discovery

Threat actors linked to China exploited the notorious Microsoft Exchange ProxyLogon vulnerabilities long before they were publicly disclosed, in attacks against telecommunications companies aimed at stealing sensitive customer data and maintaining network persistence, researchers have found...

Foxit PDF Reader Annotation Remote Code Execution Vulnerability (CNVD-2021-59175)

Foxit PDF Reader is a PDF reader from Foxit China.A security vulnerability exists in Foxit PDF Reader Annotation, which can be exploited by attackers to execute code in the context of the current process...

Foxit PDF Reader Remote Code Execution Vulnerability

Foxit PDF Reader is a PDF reader from Foxit China. Foxit PDF Reader has a security vulnerability that can be exploited by attackers to execute code in the context of the current process...

Foxit PDF Reader 资源管理错误漏洞

Foxit PDF Reader is a PDF reader from Foxit China. Foxit PDF Reader has a security vulnerability that can be exploited by attackers to execute code in the context of the current process...

Resource Management Error Vulnerability in Foxit PDF Reader

Foxit PDF Reader is China Foxit Foxit company a PDF reader. A resource management error vulnerability exists in Foxit PDF Reader, which can be exploited by remote attackers to compromise a vulnerable system...

Delta Electronics DIAScreen Type Obfuscation Vulnerability

A security vulnerability exists in Delta Electronics DIAScreen, a smartphone builder from Delta Electronics, Taiwan, China, which stems from the fact that DIAScreen is susceptible to type obfuscation and can be exploited by attackers to The vulnerability can be exploited to remotely execute...

Delta Electronics DIAScreen Buffer Overflow Vulnerability

A buffer overflow vulnerability exists in Delta Electronics DIAScreen, a smartphone builder from Delta Electronics, Taiwan, China, which stems from the vulnerability of DIAScreen to out-of-bounds write conditions. An attacker could exploit the vulnerability to cause a system crash or remote...

Foxit PDF Reader Resource Management Error Vulnerability

Foxit PDF Reader is a PDF reader from Foxit China. Foxit PDF Reader is vulnerable to resource management errors, which can be exploited by remote attackers to execute arbitrary code on the target system...

Porn Showed Up on Legit News Sites Thanks to Internet Rot

Plus: China's pipeline probing, a Chromebook debacle, and more of the week's top security news...

Elevation of privilege vulnerabilities in multiple Huawei products

Huawei eCNS280TD is a core network device for the wireless broadband trunking system from Huawei China. Huawei ESE620X vESS is a virtual enterprise service controller from Huawei China. An elevation of privilege vulnerability exists in several Huawei products. The vulnerability stems from the fac...

Indictments, Attribution Unlikely to Deter Chinese Hacking

The federal government is fighting back against what it says are China-based cyberattacks against U.S. universities and companies with indictments and a “naming-and-shaming” approach — but researchers aren’t convinced the efforts will come to much in terms of deterring future activity. On Monday,...

US, EU, UK, NATO blame china for “reckless” Exchange attacks

Do you remember back when the latest urgent update was a vulnerability in Microsoft Exchange? How is that only four months ago? The trigger for the urgent advice in March was the fact that Microsoft detected multiple zero-day exploits being used to attack on-premises versions of Microsoft Exchang...

Tactics, Techniques, and Procedures of Indicted APT40 Actors Associated with China’s MSS Hainan State Security Department

Summary This Joint Cybersecurity Advisory was written by the Federal Bureau of Investigation FBI and the Cybersecurity and Infrastructure Security Agency CISA to provide information on a Chinese Advanced Persistent Threat APT group known in open-source reporting as APT40. This advisory provides...

Taiwan Secom Personnel Attendance Management Path Traversal Vulnerability

Taiwan Secom Personnel Attendance Management is an attendance management system of Taiwan Secom, Taiwan, China. Dr. ID Door Access Control and Personnel Attendance Management system are vulnerable to path traversal vulnerability, which stems from specific page parameters that do not filter specia...

How China’s Hacking Entered a Reckless New Phase

The country’s hackers have gotten far more aggressive since 2015, when the Ministry of State Security largely took over the country’s cyberespionage...

U.S. Government Releases Indictment and Several Advisories Detailing Chinese Cyber Threat Activity

CISA, the Federal Bureau of Investigation FBI, and the National Security Agency NSA have observed increasingly sophisticated Chinese state-sponsored activity targeting U.S. political, economic, military, educational, and critical infrastructure personnel and organizations. In response: The White...

China's New Law Requires Vendors to Report Zero-Day Bugs to Government

The Cyberspace Administration of China CAC has issued new stricter vulnerability disclosure regulations that mandate software and networking vendors affected with critical flaws to mandatorily disclose them first-hand to the government authorities within two days of filing a report. The...

Unauthorized Access Vulnerability in Clinical Browsing System of Bluebonnet Technologies Inc.

Bluebonnet Technology Co., Ltd. is a well-known medical information technology solution provider, focusing on the field of medical information technology, product development, sales and service as one of the national high-tech enterprises. An unauthorized access vulnerability exists in the clinic...

Advantech R-SeeNet Cross-Site Scripting Vulnerability

Advantech R-SeeNet is an industrial monitoring software from Advantech, Taiwan, China. The software is based on the snmp protocol for monitoring platforms and is available for Linux and Windows platforms.A cross-site scripting vulnerability exists in Advantech R-SeeNet, which stems from the lack ...