2729 matches found
CVE-2018-11888
CVE-2018-11888 targets Qualcomm Snapdragon platforms, where the SCP11 Crypto Services Trust Application can be commanded by other TAs. Affects numerous Snapdragon SoCs (e.g., SD 210/212/205 through SD 835, 820/820A, 650/52, 625, 615/16, and others) across MDM9607/9650/9655, MSM8996AU, and related...
CVE-2018-11899
Technical details are not publicly available in the provided documents for CVE-2018-11899; monitor for updates.
CVE-2018-11855
If an end user makes use of SCP11 sample OCE code without modification it could lead to a buffer overflow when transmitting a CAPDU in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT and...
BBC Inside Out. Consumer advice for the ‘smart’ homeowner
We were recently asked to demonstrate security flaws in a smart home for the BBC Inside Out TV show. We’ve done this before, so what was different? This home was by far the most connected we had looked at. Typically, homes have a few smart devices; a smart thermostat, CCTV, maybe a doorbell and...
This Week in Security News: Consumer Data and Malware
Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, learn what security issues and critical threats will impact consumer data this year. Also, learn about a malicious Adobe app targeting macOS...
CVE-2018-18333
A DLL hijacking vulnerability in Trend Micro Security 2019 Consumer versions below 15.0.0.1163 and below could allow an attacker to manipulate a specific DLL and escalate privileges on vulnerable installations...
CVE-2018-18333
A DLL hijacking vulnerability in Trend Micro Security 2019 Consumer versions below 15.0.0.1163 and below could allow an attacker to manipulate a specific DLL and escalate privileges on vulnerable installations...
CVE-2018-18334
Vulnerability CVE-2018-18334 affects Trend Micro Dr. Safety for Android, Private Browser, below version 3.0.1478. The issue could allow a remote attacker to bypass Same Origin Policy (SOP) and access sensitive information via crafted JavaScript on vulnerable installations. This description is sup...
CVE-2018-18333
Summary (CVE-2018-18333) : A DLL hijacking vulnerability affects Trend Micro Security 2019 (Consumer) versions below 15.0.0.1163 and below. The issue allows an attacker to manipulate a specific DLL, resulting in privilege escalation on vulnerable installations. The existing sources describe the a...
Keys to Safeguarding Consumer Data in 2019
Businesses and providers typically collect certain details from their customers in order to support service delivery. This information has always been a top target for hackers, but given the high level and rising sophistication of threats, it's more imperative than ever to ensure it's protected...
CVE-2018-11938
Improper input validation for argument received from HLOS can lead to buffer overflows and unexpected behavior in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT,...
What Enterprise Leaders Should know about Persistent Threats in 2019
Staving off critical threats in the current cybersecurity landscape is a tall order for any size organization. As hackers continually shift and improve upon their attack and breach strategies, IT and security stakeholders must do their best to keep up and remain informed of these trends. This is...
Apple Blasts Facebook Over Data-Sucking 'Research' App
Apple has revoked Facebook’s enterprise iOS developer certificate on the heels of a “Facebook Research” VPN app that was being distributed to consumers; the app paid teens and Millennial users in exchange for being able to track their phone and web activity, and has been available since 2016. App...
A user’s right to choose: Why Malwarebytes detects Potentially Unwanted Programs (PUPs)
Potentially Unwanted Programs PUPs: the name says it all. While the programs themselves might have legitimate uses, their vendors often use inappropriate methods to drive downloads or hide within a program bundle. At Malwarebytes, we feel we have an obligation to help protect our customers from...
The California Consumer Privacy Act: Will It Apply to Your Organization?
In August 2018, California issued a revised version of a new consumer privacy law--the California Consumer Privacy Act CCPA. This statute goes into effect on January 1, 2020 and provides broad privacy protections to California consumers. This statute will have wide-ranging effects outside of...
Apple CEO Demands Federal Data Privacy Legislation
Apple CEO Tim Cook is adding his voice to the wave of tech giants, privacy watchdogs, and consumers calling for the government to roll out tightened consumer data privacy regulations. The Apple executive called on Congress to pass “comprehensive federal privacy legislation” that would effectively...
Social Network Tabs - Social Media API Key Leakage
According to the original researcher: "The Wordpress Plugin called Social Network Tabs, made by the company Design Chemical, is leaking twice the Twitter accesstoken, accesstokensecret, consumerkey and consumersecret of their user which is leading to a takeover of their Twitter account."...
Huawei E5330 21.210.09.00.158 Cross Site Request Forgery
Exploit Title: Huawei E5330 Cross-Site Request Forgery Send SMS Date: 01/07/2019 Exploit Author: Nathu Nandwani Website: http://nandtech.co/ Vendor Homepage: https://consumer.huawei.com/in/mobile-broadband/e5330/ Version: 21.210.09.00.158 Tested on: Windows 10 x64 CVE: CVE-2014-5395 Note: The...
Weather Channel App in a Deluge of Legal Trouble for Data Misuse
A lawsuit filed Thursday alleges that the popular Weather Channel App misled its users about how it would use the personal – and extremely precise – location data that it collects. IBM subsidiary The Weather Channel TWC markets its free app as the world’s most downloaded weather app, touting 45...
