4439 matches found
Microsoft Calls For Facial Recognition Tech Regulation
As facial recognition continues to gain traction in public use cases, Microsoft on Thursday called for regulation of the technology, citing heightened concerns around privacy and consent. Over the past year, facial recognition technology has started to pop up in various government-related...
Command Execution Vulnerability in China Telecom's Smart Gateway Management Platform
China Telecom Group Corporation is a large state-owned communications enterprise in China, a global partner of Shanghai World Expo, and one of the "World's Top 500 Enterprises" for many years in a row. It mainly operates integrated information services such as fixed-line telephony, mobile...
Google Android out-of-bounds write vulnerability (CNVD-2019-01560)
Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An out-of-bounds write vulnerability exists in the CAacDecoderInit of the aacdecoder.cpp file in Android version 9, which stems from the program's lack of boundary detection. A...
Logic Flaw Vulnerability in Maipu MPSec VPN Series Security Gateway
Mapletree Technology Co., Ltd. is a mainstream network and industry application solution provider in China. A logic flaw vulnerability exists in the Maipu MPSec VPN series security gateway. An attacker can exploit this vulnerability to achieve arbitrary administrator login...
New Ransomware Spreading Rapidly in China Infected Over 100,000 PCs
A new piece of ransomware is spreading rapidly across China that has already infected more than 100,000 computers in the last four days as a result of a supply-chain attack... and the number of infected users is continuously increasing every hour. What's Interesting? Unlike almost every ransomwar...
New Ransomware Spreading Rapidly in China Infected Over 100,000 PCs
A new piece of ransomware is spreading rapidly across China that has already infected more than 100,000 computers in the last four days as a result of a supply-chain attack... and the number of infected users is continuously increasing every hour. What's Interesting? Unlike almost every ransomwar...
INVT Electric VT-Designer
1. EXECUTIVE SUMMARY CVSS v3 6.3 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: INVT Electric Equipment: VT-Designer Vulnerabilities: Deserialization of Untrusted Data, Heap-based Buffer Overflow 2. RISK EVALUATION Successful exploitation of these vulnerabilities could cause...
china.ibuildapp.com XSS vulnerability
Open Bug Bounty ID: OBB-703572 Description| Value ---|--- Affected Website:| china.ibuildapp.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...
Stopping the Infiltration of Things
The Internet of Things – connected devices that contain network sensors to allow for remote monitoring and control, are expected to hit 75-billion devices installed by 2025. These devices include everything from home routers, remote cameras to healthcare devices. This wide-ranging...
Singles' Day Blows Away Its Own Records
Singles' Day in China is the world's largest shopping event. Since its beginnings in 1993 at Nanjing University, it has grown to become a national phenomenon. Singles' Day was originally started as a way to celebrate singles and as a protest against couple-centric festivals. The date 11/11 was...
Starbucks: Starbucks China Android app cloud storage service leaks a credential.
k3mlol found a credential encoded in the Starbucks China mobile application for Android phones, which provided access to a cloud-hosted service that was used to upload information for customer service requests. This credential allowed for read/write access. The credential has since been disabled,...
Why Google Internet Traffic Rerouted Through China and Russia
For two hours Monday, Google internet traffic rerouted through China, Russia, and elsewhere. Here's why...
Headmaster caught mining cryptocurrency at school; gets fired
By Uzair Amir A Chinese school headmaster Lei Hua was caught mining cryptocurrency using the school's electricity. As a result, he had to lose his job. It happened at Puman Middle School in Hunan province of China. Initially, teachers complained about the loud noise that continued day and night...
Recently-Patched Adobe ColdFusion Flaw Exploited By APT
An Adobe ColdFusion vulnerability, patched two months ago, was being exploited in the wild by a China-linked APT group, researchers found. The vulnerability, CVE-2018-15961, is a critical unrestricted file upload bug that could also lead to arbitrary code-execution, researchers at Volexity, who...
SQL Injection Vulnerability in Nanjing Yunhuatong Network Technology Website Building System
Nanjing Yunhuatong Network Technology Station Building System is an enterprise station building system developed by Nanjing Yunhuatong Network Technology Co. There is a SQL injection vulnerability in Nanjing Yunhuatong Network Technology website building system, which can be exploited by attacker...
Sourcetree for macOS parameter injection vulnerability (CNVD-2019-09132)
Sourcetree is a free Mercurial and Git client for Windows and Mac. Sourcetree for macOS suffers from a parameter injection vulnerability that can be exploited by an attacker to execute code on a system via a Git subrepository in a Mercurial repository...
ThreatList: Fewer Big DDoS Attacks in Q3, Overall Rate Holds Steady
When it comes to distributed denial of service DDoS attacks, the third quarter of 2018 marked an apparent lull in the action, with fewer huge, multi-day attacks than in previous quarters. Researchers however warn against having a false sense of security: The total number of attacks in the quarter...
Chinese Threat Actors Indicted For Stealing Aviation Trade Secrets
Hot on the heels of the Carbon Black Quarterly IR Threat Report, specifically calling out increased cybercrime activity from China, the US Department of Justice has indicted ten Chinese Nationals for perpetrating attacks against U.S. and French aviation companies in a stunning display of state...