Unproven Coronavirus Therapy Proves Cash Cow for Shadow Pharmacies

Many of the same shadowy organizations that pay people to promote male erectile dysfunction drugs via spam and hacked websites recently have enjoyed a surge in demand for medicines used to fight malaria, lupus and arthritis, thanks largely to unfounded suggestions that these therapies can help...

Chinese COVID-19 Disinformation Campaign

The New York Times is reporting on state-sponsored disinformation campaigns coming out of China: Since that wave of panic, United States intelligence agencies have assessed that Chinese operatives helped push the messages across platforms, according to six American officials, who spoke on the...

Amid Its Covid-19 Crisis, China Was Still Hacking Uighurs’ iPhones

Security researchers reveal a months-long, indiscriminate campaign targeting the iPhones of Chinese Muslims...

New iOS vulnerability being exploited to spy on Uyghurs in China

By Sudais Asif It is being revealed that a new and critical iOS vulnerability is being exploited to spy on the Uyghurs minority in China. This is a post from HackRead.com Read the original post: New iOS vulnerability being exploited to spy on Uyghurs in China...

Starbucks: China - Open redirect at trackinghub.starbucks.com.cn

m82a1 discovered an open redirect at https://trackinghub.starbucks.com.cn/trackinstallation due to improper validation of the redirecturl parameter. @m82a1 — thank you for reporting this vulnerability...

Chinese Hackers Using New iPhone Hack to Spy On Uyghur Muslims

A Chinese hacking group has been found leveraging a new exploit chain in iOS devices to install a spyware implant targeting the Uyghur Muslim minority in China's autonomous region of Xinjiang. The findings, published by digital forensics firm Volexity, reveal that the exploit — named "Insomnia" —...

Memory corruption vulnerability in XnView Classic jpm file (CNVD-2020-31477)

XnView Classic is an image viewing software. A memory corruption vulnerability exists in the XnView Classic jpm file. An attacker can exploit the vulnerability to execute malicious code on a user's system or cause the program to perform a denial of service...

Command execution vulnerability exists in OpsManage (CNVD-2020-31455)

OpsManage is a management platform for performing device assets, code deployment, application deployment, and scheduled tasks. OpsManage suffers from a command execution vulnerability that can be exploited by an attacker to gain server administrative privileges...

Attacks on Linksys Routers Trigger Mass Password Reset

UPDATE Home Linksys router users were targeted in a cyberattack that changed router settings, and redirected requests for specific webpages and domains to malicious Coronavirus-themed landing pages that were booby-trapped with malware. Researchers identified the attack last month, and earlier thi...

iCATCH DVR Input Validation Error Vulnerability

The iCATCH DVR is a digital video recorder DVR from China Desirable International iCATCH. An input validation error vulnerability exists in the firmware of iCATCH DVR prior to version 20200103, which arises from the program failing to properly validate the parameters of a function. An attacker...

Memory corruption vulnerability exists in WPS Office (CNVD-2020-26321)

WPS Office is the office software produced by Kingsoft Office Software, which can realize the text, forms, presentations and other functions commonly used in office software. WPS Office has a memory corruption vulnerability that can be exploited by attackers to cause the program to crash...

Tencent Ups Top Bug-Bounty Award to $15K

The Tencent Security Response Center TSRC is launching an expanded bug-bounty program, via the HackerOne white-hat platform – and the company has increased its top reward to $15,000. Tencent, a China-based global internet service provider, is opening up its existing bug-bounty program to...

XSS Vulnerability in Construction System of Guangzhou Sanjin Network Technology Co.

Guangzhou Sanjin Network Technology Co., Ltd. is a one-stop provider of Internet application services, providing e-commerce solutions for Chinese enterprises. XSS vulnerability exists in the construction system of Guangzhou Sanjin Network Technology Co. Attackers can utilize the vulnerability to...

Unspecified vulnerability in Linux kernel (CNVD-2020-24137)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A security vulnerability exists in versions of Linux kernel prior to 5.2 powerpc platform. No detailed vulnerability details are provided at this time...

Update APN database entry for China Mobile Hong Kong in Windows 8.1 and Windows 8

Update APN database entry for China Mobile Hong Kong in Windows 8.1 and Windows 8 This article describes an update for China Mobile Hong Kong CMHK in Windows 8.1, Windows RT 8.1, Windows 8, and Windows RT. Before you apply this update, notice that this update has a prerequisite. About this update...

Dark_Nexus Botnet Compromises Thousands of ASUS, D-Link Routers

A new botnet has compromised hundreds of ASUS, D-Link and Dasan Zhone routers over the past three months, as well as Internet of Things IoT devices like video recorders and thermal cameras. The botnet, called darknexus based on a string it prints in its banner, uses processes similar to previous...

MediaWiki xss vulnerability

MediaWiki is a set of free and freely available web-based Wiki engines from the MediaWiki Wikimedia Foundation in the United States. It can be used to deploy in-house knowledge management and content management systems. A security vulnerability exists in MediaWiki versions prior to 1.34.1. The...

WARNING: Hackers Install Secret Backdoor on Thousands of Microsoft SQL Servers

Cybersecurity researchers today uncovered a sustained malicious campaign dating back to May 2018 that targets Windows machines running MS-SQL servers to deploy backdoors and other kinds of malware, including multi-functional remote access tools RATs and cryptominers. Named "Vollgar " after the...

Extreme Office 2019 suffers from a memory corruption vulnerability (CNVD-2020-28018)

Extreme Office is an independently controlled office learning software developed by Beijing Haiteng Times Technology Co. Extreme Office 2019 suffers from a memory corruption vulnerability that can be exploited by attackers to cause a denial of service...

Extreme Office 2019 suffers from a memory corruption vulnerability (CNVD-2020-28016)

Extreme Office is an independently controlled office learning software developed by Beijing Haiteng Times Technology Co. Extreme Office 2019 suffers from a memory corruption vulnerability that can be exploited by attackers to cause a denial of service...