3851 matches found
Transparent Tribe Mounts Ongoing Spy Campaign on Military, Government
The APT group Transparent Tribe is mounting an ongoing cyberespionage campaign, researchers said, which is aimed at military and diplomatic targets around the world. The effort features a worm that can propagate from machine to machine while stealing files from USB removable drives. Transparent...
Unauthorized Access Vulnerability in ZKNet Attendance Management System of Beijing Zhongguancun Technology Development Co.
ZKNet Attendance Management System is a cloud service management platform for enterprises, governmental organizations and other industry sectors. Ltd. ZKNet Attendance Management System suffers from an unauthorized access vulnerability that can be exploited by attackers to obtain sensitive...
Cyberattacks Hit Thousands of Canadian Tax, Benefit Accounts
Canadian authorities said almost 15,000 online accounts for various government services have been targeted in three recent waves of credential-stuffing attacks. These accounts could give attackers access to Canadians’ tax-related and benefits information, coronavirus relief fund money and more...
Threat Source newsletter for Aug. 13, 2020
Newsletter compiled by Jon Munshaw. Good afternoon, Talos readers. It’s really tough to attribute cyber attacks. We know it. You know it. But why is that, exactly? And why do we want to attribute attacks so badly anyway? In our latest blog post, we look at why attribution is challenging, and what...
TikTok Surreptitiously Collected Android User Data Using Google-Prohibited Tactic
TikTok has been collecting unique identifiers from millions of Android devices without their users’ knowledge using a tactic previously prohibited by Google because it violated people’s privacy, new research has found. Click to register! The app concealed the practice, which can track users onlin...
costarica.ms.gov.br Cross Site Scripting vulnerability OBB-1256893
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
US firm accused of secretly installing location tracking SDK in mobile apps
By Zara Khan AUS government contractor 'Anomaly Six' has location tracking software hidden in more than 500 mobile apps. This is a post from HackRead.com Read the original post: US firm accused of secretly installing location tracking SDK in mobile apps...
Collecting and Selling Mobile Phone Location Data
The Wall Street Journal has an article about a company called Anomaly Six LLC that has an SDK that's used by "more than 500 mobile applications." Through that SDK, the company collects location data from users, which it then sells. Anomaly Six is a federal contractor that provides...
CIS Releases 2019 Year in Review
The Center for Internet Security CIS has released its 2019 Year in Review. CIS is home to the Multi-State Information Sharing & Analysis Center MS-ISAC, a Cybersecurity and Infrastructure Security Agency CISA partner focused on cyber threat prevention, protection, response, and recovery for U.S...
A British AI Tool to Predict Violent Crime Is Too Flawed to Use
A government-funded system known as Most Serious Violence was built to predict first offenses but turned out to be wildly inaccurate...
Information leakage vulnerability in Credit China, a new generation public credit information service platform of Liaoning Like Information Engineering Co.
The new generation of public credit information service platform is a credit service platform that provides users with powerful functions and background management capabilities to meet the government's needs in data collection, information sharing, reward and punishment linkage, credit supervisio...
US Government Warns of a New Strain of Chinese 'Taidoor' Virus
Intelligence agencies in the US have released information about a new variant of 12-year-old computer virus used by China's state-sponsored hackers targeting governments, corporations, and think tanks. Named "Taidoor, " the malware has done an 'excellent' job of compromising systems as early as...
Chinese Malicious Cyber Activity
The Cybersecurity and Infrastructure Security Agency CISA, the Federal Bureau of Investigation FBI, and the Department of Defense DoD have identified a malware variant—referred as TAIDOOR—used by the Chinese government. In addition, U.S. Cyber Command has released the malware sample to the malwar...
boston.gov Open Redirect vulnerability OBB-1247519
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
catalogue.slwa.wa.gov.au Cross Site Scripting vulnerability OBB-1247102
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
jswm.tangxian.gov.cn Cross Site Scripting vulnerability OBB-1243988
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Code Execution Vulnerability in Government Website Intensification Platform of Anhui Longxun Information Technology Co.
The government website intensification platform uses the B/S architecture of the mainstream development direction, and the whole system is based on the application of JAVA EE technology, based on the logical distribution model of the website group and the website group VPC management mode of the...
jira.sicorp.nsw.gov.au Cross Site Scripting vulnerability OBB-1237274
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Russia's GRU Hackers Hit US Government and Energy Targets
A previously unreported Fancy Bear campaign persisted for well over a year—and indicates that the notorious group has broadened its focus...
Chinese Hackers Escalate Attacks Against India and Hong Kong Amid Tensions
An emerging threat actor out of China has been traced to a new hacking campaign aimed at government agencies in India and residents of Hong Kong intending to steal sensitive information, cybersecurity firm Malwarebytes revealed in the latest report shared with The Hacker News. The attacks were...