PT-2022-30278

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.111 Description A memory leak issue exists in the pm8001 chip fw flash update req function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prio...

PT-2022-29995

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.34 Description A memory leak issue exists in the pm8001 chip fw flash update req function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior...

PT-2022-29669

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.20 Description A memory leak issue exists in the pm8001 chip fw flash update req function. The actual impact and potential for attack have not been confirmed. Recommendations For versions prior to v5.16.20,...

PT-2022-29328

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.3 Description A memory leak issue exists in the pm8001 chip fw flash update req function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior ...

PT-2025-8047

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak issue has been identified in the Linux kernel, specifically in the pm8001 chip fw flash update req function. This issue arises when pm8001 chip fw flash update build fails,...

TangleBot Malware Reaches Deep into Android Device Functions

An Android malware called TangleBot has weaved its way onto the cyber-scene: One that researchers said can perform a bouquet of malicious actions, including stealing personal info and controlling apps and device functions. According to Cloudmark researchers, the newly discovered mobile malware is...

TAU Threat Analysis: Bundlore (macOS) mm-install-macos

The mm-install-macos variant of the Bundlore family of macOS adware has been around for many years in many variations and delivery methods. Recently, a variant with a novel installation method was discovered. Although most of the installation details were the same or similar to the samples analyz...

March 2019 Adobe Flash Security Update

This security update addresses minor security fixes, which are described in Adobe Security Bulletin APSB19-12...

TAU Threat Intelligence Notification: New macOS Malware Variant of Shlayer (OSX) Discovered

Carbon Black’s Threat Analysis Unit TAU recently discovered a new variant of a family of macOS malware which was first discovered in February of 2018 by researchers from Intego. TAU has obtained new samples of this malware and observed downloads of the malware from multiple sites, primarily...

January 2019 Adobe Flash Update

This update does not address any security vulnerabilities. For more information, please see APSB19-01. Note : Please disregard mentions of security or vulnerability in this advisory. These are hardcoded titles that we were unable to change for this non-security Adobe Flash update...

July 2018 Adobe Flash Security Update

This security update addresses the following vulnerabilities, which are described in Adobe Security Bulletin APSB18-24: CVE-2018-5007, CVE-2018-5008...

Microsoft Patch Tuesday - June 2018

Executive Summary Microsoft has released its monthly set of security advisories for vulnerabilities that have been identified and addressed in various products. This month's advisory release addresses 50 flaws, with 11 of them rated "critical," and 39 rated "important." These vulnerabilities impa...

A week in security (June 4 – June 10)

Last week on Labs, we took a look at hidden mobile ads, the perils of social media spam, and how to shore up your landline defenses. We also took a deep dive into Emotet malware analysis, and gave you some summertime safety tips. Other news Update your Adobe Flash player if you haven't already...

December 2017 Flash Security Update

This security update addresses the following vulnerability, which is described in Adobe Security Bulletin APSB17-42: CVE-2017-11305...

Equifax Website Hacked To Deliver Malware-bearing Flash Update

By Waqas In May 2017, the website of renowned credit reporting service This is a post from HackRead.com Read the original post: Equifax Website Hacked To Deliver Malware-bearing Flash Update...

September 2017 Flash Security Update

This security update addresses the following vulnerabilities, which are described in Adobe Security Bulletin APSB17-28: CVE-2017-11281, CVE-2017-11282...

March 2017 Adobe Flash Security Update

This security update addresses the following vulnerabilities, which are described in Adobe Security Bulletin APSB17-07: CVE-2017-2997, CVE-2017-2998, CVE-2017-2999, CVE-2017-3000, CVE-2017-3001, CVE-2017-3002, CVE-2017-3003...

SUSE-SU-2017:0108-1 Security update for flash-player

This update to Adobe Flash 24.0.0.194 fixes the following vulnerabilities advised under APSB17-02: - security bypass vulnerability that could lead to information disclosure CVE-2017-2938 - use-after-free vulnerabilities that could lead to code execution CVE-2017-2932, CVE-2017-2936, CVE-2017-2937...

Adobe Flash - Uninitialized Stack Parameter Access in Object.unwatch UaF Fix

Adobe Flash - Uninitialized Stack Parameter Access in Object.unwatch UaF Fix Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=716 The ActionScript parameter conversion in the fix for an issue in the December Flash bulletin...

PageFair Hack Serves Up Fake Flash Update to 500 Sites

More than 500 users of a free analytics service may have had their websites compromised over the weekend after a hacker was able to execute malicious JavaScript through the service. On Halloween night, an attacker was able to hijack a “key email account” at PageFair, an ad blocking analytics...