No.1 Adware Removal Tool On Apple App Store Caught Spying On Mac Users

A highly popular top-tier app in Apple's Mac App Store that's designed to protect its users from adware and malware threats has been, ironically, found surreptitiously stealing their browsing history without their consent, and sending it to a server in China. What's more concerning? Even after...

Top MacOS App Exfiltrates Browser Histories Behind Users’ Backs

A top-grossing Apple App Store program called Adware Doctor is capable of sidestepping macOS security controls and surreptitiously copying a user’s entire browser history. It then sends it to a China-based domain. According to Patrick Wardle, chief research officer at Digita Security and founder ...

Popular Mac App Adware Doctor Actually Acts Like Spyware

Adware Doctor has long been one of the top-selling apps in the Mac App Store. But researchers say it harvested browsing data, and sent it to China...

China Telecom's Smart Gateway Management Platform Has Information Leakage Vulnerabilities

China Telecom Group Corporation is a large state-owned communications enterprise in China, the global partner of Shanghai World Expo, and one of the world's top 500 enterprises for many years, mainly engaged in fixed-line telephony, mobile communications, satellite communications, Internet access...

SQL Injection Vulnerability in Enterprise Torch China's Website Building System

Enterprise Torch China is a technology-based company that provides all kinds of enterprises and institutions with information technology services such as network domain name registration, web hosting rental, website construction and maintenance, website promotion and publicity, website revision a...

Hackers selling data of 130 million Chinese hotel clients on Dark Web for 8 BTC

By Waqas Now, this could easily be termed as one of the largest ever data hacks in the history of China. Reportedly, the data of roughly 130 million clients of the renowned Huazhu Hotels Group, China is up for sale at the Dark Web at the meager amount of 8 bitcoins US$56,000. The price is extreme...

CIA Network Exposed through Insecure Communications System

Interesting story of a CIA intelligence network in China that was exposed partly because of a computer security failure: Although they used some of the same coding, the interim system and the main covert communication platform used in China at this time were supposed to be clearly separated. In...

Buffer Overflow Vulnerability in Sunell Cameras

Jing Yang Sunell camera is a camera produced by Shenzhen Jing Yang Technology Co. A buffer overflow vulnerability exists in the Sunell camera, which can be exploited by attackers to cause a denial of service...

Buffer Overflow Vulnerability in CAJViewer Full Text Viewer

CAJViewer full-text viewer is a special reader for China Journal Network, supporting TEB, CAJ, PDF format files. CAJViewer Full Text Viewer suffers from a buffer overflow vulnerability that can be exploited by an attacker to cause a denial of service...

Multiple Vulnerabilities in the Mobile Maintenance APP of China Mobile Communications Group Anhui Co.

Mobile Maintenance APP is a mobile office software for China Mobile's operation and maintenance staff, providing functions including resource management, portal management, work order dispatching and attendance statistics. There are multiple vulnerabilities in the Mobile Maintenance APP of China...

Google Android System Denial of Service Vulnerability (CNVD-2019-00128)

Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. A denial of service vulnerability exists in the Google Android System. An attacker can exploit the vulnerability to launch a denial-of-service attack...

SQL Injection Vulnerability in Sichuan Yunbait CMSv1.0 to v2.0 Versions

Sichuan Yunbat CMS is a content management system developed by Sichuan Yunbat Technology Co. Sichuan Yunbat CMS v1.0 to v2.0 versions exist SQL injection vulnerability, remote attackers can exploit the vulnerability, access to sensitive database information...

SQL Injection Vulnerability in Website Building System of Ningbo Youdao Network Technology Co.

Ningbo Youdao Network Technology Co., Ltd. is an Internet company specializing in corporate brand Internet digital communication and Internet integrated marketing. Ningbo Youdao Network Technology Co., Ltd. has a SQL injection vulnerability in its website building system, which can be exploited b...

Google Secretly Planning to Launch a Censored Search Engine in China

After an eight-year-long absence from the most populated country in the world, Google search is going to dramatically make a comeback in China. Google is reportedly planning to launch a censored version of its search engine in China that is going to blacklist certain websites and search terms to...

Google Secretly Planning to Launch a Censored Search Engine in China

After an eight-year-long absence from the most populated country in the world, Google search is going to dramatically make a comeback in China. Google is reportedly planning to launch a censored version of its search engine in China that is going to blacklist certain websites and search terms to...

State Govts. Warned of Malware-Laden CD Sent Via Snail Mail from China

Here's a timely reminder that email isn't the only vector for phishing attacks: Several U.S. state and local government agencies have reported receiving strange letters via snail mail that include malware-laden compact discs CDs apparently sent from China, KrebsOnSecurity has learned. This...

F5 BIG-IP ASM Design Vulnerabilities

F5 BIG-IP ASM Application Security Manager is a Web Application Firewall WAF from F5 USA that provides secure remote access, protects email, and simplifies Web access control while enhancing network and application performance. A security vulnerability exists in the F5 BIG-IP ASM. An attacker cou...

‘Hidden Bee’ miner delivered via improved drive-by download toolkit

This blog post was authored by @hasherezade and Jérôme Segura. We recently detected a drive-by download attack trying to exploit CVE-2018-4878, a vulnerability in Flash Player, in a sequence that was not matching any of the exploit kit patterns that we currently track. Upon investigation, we...

Notification Emails From Veeam Backup for Microsoft 365 Are Sent in an Unexpected Language

Challenge Email notifications sent by Veeam Backup for Microsoft 365 unexpectedly contain Chinese characters. Cause The issue is caused by an encoding conflict. By default, Veeam Backup for Microsoft 365 uses UTF-16 character encoding, and the problem appears under the following circumstances: Us...

CVE-2018-14492

Tenda AC7 through V15.03.06.44CN, AC9 through V15.03.05.196318CN, and AC10 through V15.03.06.23CN devices have a Stack-based Buffer Overflow via a long limitSpeed or limitSpeedup parameter to an unspecified /goform URI...