Calypso APT Emerges from the Shadows to Target Governments

A newly discovered APT group, dubbed Calypso after a custom malware RAT that it uses, has been targeting state institutions in six different countries since 2016. Government organizations in India 34 percent, Brazil and Kazakhstan 18 percent respectively, Russia and Thailand 12 percent respective...

SQL Injection Vulnerability in Shenzhen AsiaNetwork's Website Building System

Ltd. provides high-quality website construction | web development | domain name application | website filing | mailbox application | server rental products and services. SQL injection vulnerability exists in the website building system of Shenzhen YANET, which can be exploited by attackers to...

Mysterious malware that re-installs itself infected over 45,000 Android Phones

Over the past few months, hundreds of Android users have been complaining online of a new piece of mysterious malware that hides on the infected devices and can reportedly reinstall itself even after users delete it, or factory reset their devices. Dubbed Xhelper , the malware has already infecte...

Qtum Resource Management Error Vulnerability

Qtum is a suite of open source blockchain application platforms. A resource management error vulnerability exists in Qtum 0.16 and earlier versions that can be exploited by an attacker to cause a denial of service...

Foxit PhantomPDF Resource Management Error Vulnerability (CNVD-2019-37958)

Foxit PhantomPDF is China's Foxit Foxit company a PDF document reader. A resource management error vulnerability exists in Foxit PhantomPDF. This vulnerability can be exploited to execute arbitrary code in the context of the current process with the help of a malicious file or page...

An unspecified vulnerability exists in Ansible (CNVD-2019-37725)

Ansible is a computer system configuration manager from the American company Ansible. The product can be used to publish, manage and organize computer systems. A security vulnerability exists in Ansible that can be exploited by an attacker to bypass access restrictions on data...

This Week in Security News: Trend Micro Launches its XDR Center in India and EU Reports 5G Cybersecurity Risks

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, learn about Trend Micro’s new XDR Center in India that will help solve data sovereignty issues. Also, read about 5G network software use bei...

Apple's Good Intentions on Privacy Stop at China's Borders

As pro-democracy protests continue in Hong Kong, the tech giant’s troubling relationship with an authoritarian regime has come into focus...

Starbucks: China - IDOR on Reservation Staging/Non Production Site - https://reservation.stg.starbucks.com.cn

xmfc discovered that the staging/non production site at https://reservation.stg.starbucks.com.cn/api/customer/reservation/history allowed anyone to retrieve fabricated test user reservation data by providing a OTP of 111111. @xmfc — thank you for reporting this vulnerability and for confirming th...

Adobe Acrobat/Reader Memory Misreference Vulnerability (CNVD-2019-35618)

Adobe Acrobat is a PDF editing software developed by Adobe.Adobe Reader also known as Acrobat Reader is a PDF file reader developed by Adobe. Adobe Acrobat/Reader has a memory misreference vulnerability. An attacker can exploit this vulnerability to execute arbitrary code...

Adobe Acrobat/Reader Type Obfuscation Vulnerability (CNVD-2019-35638)

Adobe Acrobat is a PDF editing software developed by Adobe.Adobe Reader also known as Acrobat Reader is a PDF file reader developed by Adobe. A type confusion vulnerability exists in Adobe Acrobat/Reader. An attacker can exploit this vulnerability to execute arbitrary code...

Unspecified Vulnerability in Oracle Java SE and Java SE Embedded (CNVD-2019-37224)

Java SE is short for Java Platform Standard Edition, for the development and deployment of desktop, server, and embedded devices and real-time environment of Java applications. Java SE Embedded is based on Java SE, and provides specific features and support for embedded systems. An unspecified...

LOWKEY: Hunting for the Missing Volume Serial ID

In August 2019, FireEye released the “Double Dragon” report on our newest graduated threat group: APT41. A China-nexus dual espionage and financially-focused group, APT41 targets industries such as gaming, healthcare, high-tech, higher education, telecommunications, and travel services. This blog...

cPanel Input Validation Error Vulnerability (CNVD-2019-36118)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. An input validation error vulnerability exists in cPanel. Detailed vulnerability details are not available at this time...

China's Sway Over Tech Companies Tested with Apple, Blizzard

At least two American tech companies, Apple and gaming giant Blizzard, have come under fire – from different quarters – for wading into waters surrounding the Hong Kong protests that have been ongoing since June. The situation is shaping up to be a test for the American tech sector’s commitment t...

SugarCRM PHP code injection vulnerability (CNVD-2019-34428)

SugarCRM is a set of open source customer relationship management software . A PHP code injection vulnerability exists in the EmailMan module of SugarCRM. The vulnerability stems from a lack of input validation. An attacker can exploit the vulnerability to execute arbitrary code...

Google Android Local Elevation of Privilege Vulnerability (CNVD-2019-38253)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. Google Android suffers from a local elevation of privilege vulnerability that can be exploited by an attacker to gain root access to the device...

libyal liblnk buffer overflow vulnerability (CNVD-2020-13528)

liblnk is a library for accessing the Windows shortcut file LNK format. A heap buffer overflow vulnerability exists in liblnklocationinformation.c in versions prior to liblnk 20191006 in liblnklocationinformationreaddata, which can be exploited by an attacker to cause a buffer overflow or heap...

Code execution vulnerability in HongCMS (CNVD-2019-40721)

HongCMS is an open source lightweight content management system CMS. A code execution vulnerability exists in HongCMS. An attacker can exploit this vulnerability to gain server privileges...

Unspecified Vulnerability in Moodle (CNVD-2019-35811)

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system or virtual learning environment. A security vulnerability exists in Moodle. No detailed vulnerability details are currently available...