Malware distributor Storm-0324 facilitates ransomware access

The threat actor that Microsoft tracks as Storm-0324 is a financially motivated group known to gain initial access using email-based initial infection vectors and then hand off access to compromised networks to other threat actors. These handoffs frequently lead to ransomware deployment. Beginnin...

Microsoft Teams used to deliver DarkGate Loader malware

Researchers have found a new method by which cybercriminals are spreading the DarkGate Loader malware. Until now, DarkGate was typically distributed via phishing emails. The malspam campaign used stolen email threads to lure victims into clicking a hyperlink, which downloaded the malware. But...

org.drools.planner:drools-planner-core (5.4.0.beta2), org.drools.planner:drools-planner-distribution (5.4.0.beta2) +23 more potentially affected by CVE-2022-1415 via org.drools:drools-core (5.4.0.beta2)

org.drools:drools-core MAVEN version 5.4.0.beta2 is affected by a known vulnerability. The following packages have a transitive dependency on org.drools:drools-core and may be impacted: - org.drools.planner:drools-planner-core 5.4.0.beta2 - org.drools.planner:drools-planner-distribution 5.4.0.bet...

org.drools.planner:drools-planner-core (5.3.0.cr1), org.drools.planner:drools-planner-distribution (5.3.0.cr1) +22 more potentially affected by CVE-2022-1415 via org.drools:drools-core (5.3.0.cr1)

org.drools:drools-core MAVEN version 5.3.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.drools:drools-core and may be impacted: - org.drools.planner:drools-planner-core 5.3.0.cr1 - org.drools.planner:drools-planner-distribution 5.3.0.cr1 -...

org.drools.planner:drools-planner-core (5.3.0.beta1), org.drools.planner:drools-planner-distribution (5.3.0.beta1) +20 more potentially affected by CVE-2022-1415 via org.drools:drools-core (5.3.0.beta1)

org.drools:drools-core MAVEN version 5.3.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.drools:drools-core and may be impacted: - org.drools.planner:drools-planner-core 5.3.0.beta1 - org.drools.planner:drools-planner-distribution 5.3.0.bet...

org.drools.planner:drools-planner-core (5.2.0.cr1), org.drools.planner:drools-planner-distribution (5.2.0.cr1) +25 more potentially affected by CVE-2022-1415 via org.drools:drools-core (5.2.0.cr1)

org.drools:drools-core MAVEN version 5.2.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.drools:drools-core and may be impacted: - org.drools.planner:drools-planner-core 5.2.0.cr1 - org.drools.planner:drools-planner-distribution 5.2.0.cr1 -...

From Caribbean shores to your devices: analyzing Cuba ransomware

Introduction Knowledge is our best weapon in the fight against cybercrime. An understanding of how various gangs operate and what tools they use helps build competent defenses and investigate incidents. This report takes a close look at the history of the Cuba group, and their attack tactics,...

Fast DDS Buffer Overflow DoS

The vulnerability of the Fast DDS library arises from an overflow in the buffer in the dynamic memory. Exploiting this vulnerability can allow a malicious actor to cause a service failure...

Fast DDS Exclusive State DoS

The vulnerability of the Fast DDS library is related to deficiencies in the handling of exceptional states. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

Compound charges are sent to GeVault, making them potentially vulnerable to theft

Lines of code Vulnerability details Impact In the previous version, the compound fee would be saved in the TokenisableRange before being deposited into LP, and would be deposited into LP after reaching 1%. After reconstruction, the fees are sent directly to GeVault for distribution through getTVL...

Dover Fueling Solutions MAGLINK LX Console Security Vulnerability

The Dover Fueling Solutions MAGLINK LX Console is Dover Fueling Solutions' integrated console for fuel stations and oil distribution. This console is designed to help manage various operations at fuel stations, including refueling, payment, data monitoring, and oil management. A security...

Cosmos-SDK Cosmovisor component may be vulnerable to denial of service

Component: Cosmovisor Criticality: Medium Affected Versions: Cosmovisor v1.0.0 distributed with Cosmos-SDK 0.46 Affected Users: Validators and Node operators utilizing unsupported versions of Cosmovisor Impact: DOS, potential RCE on node depending on configuration An issue has been identified on...

New BLISTER Malware Update Fuelling Stealthy Network Infiltration

An updated version of a malware loader known as BLISTER is being used as part of SocGholish infection chains to distribute an open-source command-and-control C2 framework called Mythic. "New BLISTER update includes keying feature that allows for precise targeting of victim networks and lowers...

Libraries Component DoS

The vulnerability of the Libraries component of the Oracle Java SE software platform and the Oracle GraalVM Enterprise Edition virtual machine is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Oracle Java SE JAXP DoS

The vulnerability of the JAXP component in the Oracle Java SE software platform and the Oracle GraalVM Enterprise Edition virtual machine is related to unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

ImageIO DoS

The vulnerability of the ImageIO component in Oracle Java SE and the Oracle GraalVM Enterprise Edition software platform is related to unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Libraries Component DoS

The vulnerability of the Libraries component of the Oracle Java SE software platform and the Oracle GraalVM Enterprise Edition virtual machine is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

How to change preferred DDC server

Change preferred DDC server...

ImageIO DoS

The vulnerability of the ImageIO component in Oracle Java SE and the Oracle GraalVM Enterprise Edition software platform is related to unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Parasolid 3D geometric modeling tool Teamcenter Visualization DoS

The vulnerability of Parasolid’s 3D geometric modeling tool and the Teamcenter Visualization product lifecycle management system lies in the unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...