Apple loses lawsuit against cyber security startup Corellium

By Deeba Ahmed A federal judge dismissed Apple's claim that virtualization startup Corellium was involved in copyright infringement and violated the DMCA. This is a post from HackRead.com Read the original post: Apple loses lawsuit against cyber security startup Corellium...

CVE-2020-2499

CVE-2020-2499 affects QNAP QES prior to 2.1.1 Build 20200515, due to a hard-coded credential in earlier QES releases. The issue could allow login with the hard-coded password. QNAP fixed the vulnerability in QES 2.1.1 Build 20200515 and later. Based on connected sources (NVD/Nessus plugin and rel...

CVE-2020-10565

creationtimestamp| type| source ---|---|--- 2020-12-21 03:22:31+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/1609...

CVE-2020-15531

creationtimestamp| type| source ---|---|--- 2020-12-21 03:21:56+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/1595...

NCSC: Be Cyber Aware, especially during the Christmas season

In early December, the National Cyber Security Centre, a UK-based cybersecurity body and a part of GCHQ, kicked off the next chapter of its Cyber Aware campaign initiative, focusing on online shopping threats during the Christmas season. Cyber Aware is the UK government’s "national campaign on...

Exfiltrating Data from Air-Gapped Computers via Wi-Fi Signals (Without Wi-Fi Hardware)

A security researcher has demonstrated that sensitive data could be exfiltrated from air-gapped computers via a novel technique that leverages Wi-Fi signals as a covert channel—surprisingly, without requiring the presence of Wi-Fi hardware on the targeted systems. Dubbed "AIR-FI," the attack hing...

MiniWeb HTTP Server 0.8.19 - Buffer Overflow (PoC)

Exploit Title: MiniWeb HTTP Server 0.8.19 - Buffer Overflow PoC Date: 13.12.2020 Exploit Author: securityforeveryone.com Author Mail: helloATsecurityforeveryone.com Vendor Homepage: https://sourceforge.net/projects/miniweb/ Software Link:...

MiniWeb HTTP Server 0.8.19 Buffer Overflow

Exploit Title: MiniWeb HTTP Server 0.8.19 - Buffer Overflow PoC Date: 13.12.2020 Exploit Author: securityforeveryone.com Author Mail: helloATsecurityforeveryone.com Vendor Homepage: https://sourceforge.net/projects/miniweb/ Software Link:...

Cyber Security giant FireEye hacked by a foreign government

By Sudais Asif FireEye has stated that they have been resetting the passwords of users for the previous 2 weeks as a part of its mitigatory actions. This is a post from HackRead.com Read the original post: Cyber Security giant FireEye hacked by a foreign government...

National Cyber Security Centre Cyber Awareness Campaign

The United Kingdom UK National Cyber Security Centre NCSC has launched a new cyber security campaign encouraging the public to adopt six behaviors to stay safe online. The six Cyber Aware behaviors recommended by the NSCS are: 1. Use a separate password for your email 2. Create strong passwords...

Enterprise WeChat (Windows client) suffers from dll hijacking vulnerability

Enterprise WeChat is an office communication tool for all types of business and organizational users. In addition to WeChat-like chat functions, Enterprise WeChat also integrates public phone and email functions. A dll hijacking vulnerability exists in Enterprise WeChat Windows client. An attacke...

VMware Carbon Black Recognized as “Tech Exit of the Year” at New England Venture Capital Association’s 2020 NEVY Awards

This week, the New England Venture Capital Association named VMware Carbon Black winner of “Tech Exit of the Year” at the eighth annual NEVY Awards. The NEVY Awards recognize the top innovators, investors and companies in the region, and we couldn’t be more thrilled to receive the accolade that...

Hackers Targeting Companies Involved in Covid-19 Vaccine Distribution

A global spear-phishing campaign has been targeting organizations associated with the distribution of COVID-19 vaccines since September 2020, according to new research. Attributing the operation to a nation-state actor, IBM Security X-Force researchers said the attacks took aim at the vaccine col...

Online Job Portal In PHP/PDO 1.0 SQL Injection

Title: online job portal phppdo v1.0 - SQL injection Exploit Author: Mohamed Elobeid 0b3!d Date: 2020-08-21 Vendor Homepage: https://www.sourcecodester.com/php/13850/online-job-portal-phppdo.html Software Link:...

Joe Biden Campaign Subdomain Down After Hacktivist Defacement

A subdomain used by President-elect Joe Biden’s official campaign website was defaced last week by a self-proclaimed Turkish hacktivist and still remains out of commission. The subdomain, vote.joebiden.com, was part of the official campaign website JoeBiden.com used by the Biden campaign leading ...

Car Rental Management System 1.0 - 'car_id' Sql Injection

Exploit Title: Car Rental Management System 1.0 - 'carid' Sql Injection Date: 2020-11.13 Exploit Author: Mehmet Kelepçe / Gais Cyber Security Author ID: 8763 Vendor Homepage: https://www.sourcecodester.com/php/14544/car-rental-management-system-using-phpmysqli-source-code.html Software Link:...

Car Rental Management System 1.0 Shell Upload

Exploit Title: Car Rental Management System 1.0 - Remote Code Execution Authenticated Date: 2020-11.13 Exploit Author: Mehmet Kelepçe / Gais Cyber Security Author ID: 8763 Vendor Homepage: https://www.sourcecodester.com/php/14544/car-rental-management-system-using-phpmysqli-source-code.html...

RegretLocker, new ransomware, can encrypt Windows virtual hard disks

Cybersecurity researchers discovered a new ransomware last month called RegretLocker that, despite a no-frills package, can do serious damage to virtual hard disks on Windows machines. Through a clever trick, RegretLocker can bypass the often-long encryption times required when encrypting a...

CVE-2020-27694

creationtimestamp| type| source ---|---|--- 2020-11-06 12:36:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/2051...

It’s Cybersecurity Awareness Month and there is still a lot to do

October is National Cyber Security Awareness Month NCSAM. And there is still a lot to do! For the last 17 years, the National Cybersecurity Awareness Month NCSAM campaign, driven by the Department of Homeland Security, has raised awareness about the importance of cyber security across the Nation...