Lucene search
+L

539 matches found

The Hacker News
The Hacker News
added 2021/02/25 1:59 p.m.4 views

Chinese Hackers Using Firefox Extension to Spy On Tibetan Organizations

Cybersecurity researchers today unwrapped a new campaign aimed at spying on vulnerable Tibetan communities globally by deploying a malicious Firefox extension on target systems. "Threat actors aligned with the Chinese Communist Party's state interests delivered a customized malicious Mozilla...

5.9AI score
SaveExploits0
ThreatPost
ThreatPost
added 2021/02/10 7:7 p.m.213 views

Hybrid, Older Users Most-Targeted by Gmail Attackers

Users whose personal details have been exposed by a third-party breach, Australians, older folks and those who use both desktops and mobile devices are at the highest risk of becoming the victim of a malicious email attack, according to Google and researchers from Stanford, who teamed up to...

7.2AI score
SaveExploits0References8
HackRead
HackRead
added 2020/12/14 2:54 p.m.40 views

Google, YouTube, Gmail service suffered major outage worldwide

By Deeba Ahmed Google states that the problem is fixed now, and all services are back online for most users. Let us know if these services are back in your area. This is a post from HackRead.com Read the original post: Google, YouTube, Gmail service suffered major outage worldwide...

4.1AI score
SaveExploits0
Kitploit
Kitploit
added 2020/09/21 11:30 a.m.51 views

Moriarty-Project - This Tool Gives Information About The Phone Number That You Entered

What IS Moriarty? Advanced Information Gathering And Osint Tool Moriarty is a tool that tries to find good information about the phone number that you provieded; -Tries To Find Owner Of The Number -Tries To Find Risk Level Of The Number -Tries To Find Location,Time Zone Of The Number,Carrier -Tri...

7AI score
SaveExploits0References1
OSV
OSV
added 2020/09/01 3:32 p.m.35 views

GHSA-C7PP-G2V2-2766 DOM-based XSS in gmail-js

Affected versions of gmail-js are vulnerable to cross-site scripting in the tools.parseresponse, helper.get.visibleemailspost, and helper.get.emaildatapost functions, which pass user input directly into the Function constructor. Recommendation Update to version 0.6.5 or later...

6AI score0.00713EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
added 2020/09/01 3:32 p.m.37 views

DOM-based XSS in gmail-js

Affected versions of gmail-js are vulnerable to cross-site scripting in the tools.parseresponse, helper.get.visibleemailspost, and helper.get.emaildatapost functions, which pass user input directly into the Function constructor. Recommendation Update to version 0.6.5 or later...

3.5AI score0.00713EPSS
SaveExploits0References5Affected Software1
The Hacker News
The Hacker News
added 2020/08/22 7:49 a.m.62 views

A Google Drive 'Feature' Could Let Attackers Trick You Into Installing Malware

An unpatched security weakness in Google Drive could be exploited by malware attackers to distribute malicious files disguised as legitimate documents or images, enabling bad actors to perform spear-phishing attacks comparatively with a high success rate. The latest security issue—of which Google...

0.1AI score
SaveExploits0
HackRead
HackRead
added 2020/08/21 5:14 p.m.27 views

Google vulnerability allowed sending spoofed emails with Gmail ID

By Sudais Asif Google fixed the vulnerability after the security researcher ended up disclosing its technical details online. This is a post from HackRead.com Read the original post: Google vulnerability allowed sending spoofed emails with Gmail ID...

1.9AI score
SaveExploits0
Hacker One
Hacker One
added 2020/08/20 4:51 p.m.80 views

Dropcontact: User registration using public domain email like gmail in place of professional email.

Like sais in the title, we were only checking and restricting professional email in frontend, which led to being able to register with an email which is not pro because we were not checking this info in the backend. User was able to register with public domain email like gmail by response...

1.9AI score
SaveExploits0
Wired Threat Level
Wired Threat Level
added 2020/06/25 11:0 a.m.23 views

How Thousands of Misplaced Emails Took Over This Engineer's Inbox

Kenton Varda gets dozens of messages a day from Spanish-speakers around the world, all thanks to a Gmail address he registered 16 years ago...

3.1AI score
SaveExploits0
ThreatPost
ThreatPost
added 2020/05/29 1:16 p.m.60 views

‘Hack-For-Hire’ Firms Spoof WHO To Target Google Credentials

“Hack-for-hire” organizations are the latest group of cybercriminals to take advantage of the ongoing coronavirus pandemic, using COVID-19 as a lure in phishing emails bent on stealing victims’ Google credentials. Researchers with Google’s Threat Analysis Group TAG warned that they’ve spotted a...

0.2AI score
SaveExploits0References12
ThreatPost
ThreatPost
added 2020/05/26 3:28 p.m.46 views

Turla APT Revamps One of Its Go-To Spy Tools

The Turla APT group has been spotted using an updated version of the ComRAT remote-access trojan RAT to attack governmental targets. Turla a.k.a. Snake, Venomous Bear, Waterbug or Uroboros, is a Russian-speaking threat actor known since 2014, but with roots that go back to 2004 and earlier,...

7.9AI score
SaveExploits0References6
The Hacker News
The Hacker News
added 2020/05/26 9:36 a.m.54 views

New ComRAT Malware Uses Gmail to Receive Commands and Exfiltrate Data

Cybersecurity researchers today uncovered a new advanced version of ComRAT backdoor, one of the earliest known backdoors used by the Turla APT group, that leverages Gmail's web interface to covertly receive commands and exfiltrate sensitive data. "ComRAT v4 was first seen in 2017 and known still ...

0.1AI score
SaveExploits0
The Hacker News
The Hacker News
added 2020/05/26 9:36 a.m.4 views

New ComRAT Malware Uses Gmail to Receive Commands and Exfiltrate Data

Cybersecurity researchers today uncovered a new advanced version of ComRAT backdoor, one of the earliest known backdoors used by the Turla APT group, that leverages Gmail's web interface to covertly receive commands and exfiltrate sensitive data. "ComRAT v4 was first seen in 2017 and known still ...

6.1AI score
SaveExploits0
Wired Threat Level
Wired Threat Level
added 2020/05/23 11:0 a.m.67 views

5 Simple Ways to Make Your Gmail Inbox Safer

These built-in features definitely protect your data, but they can help keep your inbox tidy too...

1.1AI score
SaveExploits0
HackRead
HackRead
added 2020/05/05 11:41 p.m.36 views

Sensitive user data found in Tesla car parts sold on eBay

By Deeba Ahmed A hacker found Spotify passwords, Gmail & Netflix session cookies, etc. on Tesla car parts sold on the e-commerce giant. This is a post from HackRead.com Read the original post: Sensitive user data found in Tesla car parts sold on eBay...

1.1AI score
SaveExploits0
Schneier on Security
Schneier on Security
added 2020/04/22 2:12 p.m.37 views

New iPhone Zero-Day Discovered

Last year, ZecOps discovered two iPhone zero-day exploits. They will be patched in the next iOS release: Avraham declined to disclose many details about who the targets were, and did not say whether they lost any data as a result of the attacks, but said "we were a bit surprised about who was...

2AI score
SaveExploits0
Microsoft KB
Microsoft KB
added 2020/04/13 4:7 a.m.26 views

Description of the Microsoft Office for Mac 2011 14.3.2 Update

Describes the security update for Microsoft Office for Mac 2011 14.3.2, that was released on March12, 2013.IntroductionMicrosoft has released security bulletin MS13-026. This security bulletin contains all the relevant information about the security update for Microsoft Office for Mac 2011. To vi...

0.1AI score
SaveExploits0
Microsoft KB
Microsoft KB
added 2020/04/13 4:7 a.m.35 views

MS12-051: Vulnerability in Microsoft Office for Mac could allow elevation of privilege: July 10, 2012

Describes the Microsoft Office for Mac 2011 14.2.3 Update that was released on July 10, 2012INTRODUCTIONMicrosoft has released security bulletin MS12-051. This security bulletin contains all the relevant information about the security update for Microsoft Office for Mac 2011. To view the complete...

6.9CVSS6.1AI score0.01645EPSS
SaveExploits1
Wired Threat Level
Wired Threat Level
added 2020/02/25 8:18 p.m.44 views

Gmail Is Catching More Malicious Attachments With Deep Learning

Users of Gmail get 300 billion attachments each week. To separate legitimate documents from harmful ones, Google turned to AI—and it’s working...

1.6AI score
SaveExploits0
Rows per page
Query Builder