Samsung SMR安全漏洞

Samsung Knox Guard is a security solution based on the open-source Android platform from South Korea's Samsung Samsung, which can comprehensively enhance security through a combination of physical means and software systems, and is perfectly compatible with the Android and Google ecosystems,...

CVE-2022-22268

Incorrect implementation of Knox Guard prior to SMR Jan-2022 Release 1 allows physically proximate attackers to temporary unlock the Knox Guard via Samsung DeX mode...

CVE-2022-22268

CVE-2022-22268 concerns Samsung Knox Guard. The vulnerability is described as an incorrect implementation that, on affected devices, allows a physically proximate attacker to temporarily unlock Knox Guard by using Samsung DeX mode when Knox Guard is locked. Root cause: DeX mode runs in contexts w...

CVE-2022-22268: Improper Authorization

Incorrect implementation of Knox Guard prior to SMR Jan-2022 Release 1 allows physically proximate attackers to temporary unlock the Knox Guard via Samsung DeX mode...

PT-2022-15313

Name of the Vulnerable Software and Affected Versions Knox Guard versions prior to SMR Jan-2022 Release 1 Description The issue is related to the incorrect implementation of Knox Guard, which allows physically proximate attackers to temporarily unlock the Knox Guard via Samsung DeX mode...

FBI: Another Zoho ManageEngine Zero-Day Under Active Attack

Another Zoho ManageEngine zero-day vulnerability is under active attack from an APT group, this time looking to override legitimate functions of servers running ManageEngine Desktop Central and elevate privileges — with an ultimate goal of dropping malware onto organizations’ networks, the FBI ha...

WS-2021-0438

Any logged-in user can cause denial of service against the AppSuite server by asking Guard to fetch keys from a malicious WKS server. This WKS server's response never ends, tieing up a java process and TLS connection forever. This was fixed in by Open-Xchange in GUARD-228...

The vulnerability of the Software Guard eXtensions (SGX) processor implementation lies in the insufficient validation of input data, which allows attackers to increase their privileges.

The vulnerability of the Software Guard eXtensions SGX processor implementation is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...

4 Android Banking Trojan Campaigns Targeted Over 300,000 Devices in 2021

Four different Android banking trojans were spread via the official Google Play Store between August and November 2021, resulting in more than 300,000 infections through various dropper apps that posed as seemingly harmless utility apps to take full control of the infected devices. Designed to...

CVE-2021-33097

Time-of-check time-of-use vulnerability in the Crypto API Toolkit for IntelR SGX may allow a privileged user to potentially enable escalation of privilege via network access...

CVE-2021-33097

Time-of-check time-of-use vulnerability in the Crypto API Toolkit for IntelR SGX may allow a privileged user to potentially enable escalation of privilege via network access...

CVE-2021-0186

Improper input validation in the IntelR SGX SDK applications compiled for SGX2 enabled processors may allow a privileged user to potentially escalation of privilege via local access...

CVE-2021-0186

Improper input validation in the IntelR SGX SDK applications compiled for SGX2 enabled processors may allow a privileged user to potentially escalation of privilege via local access...

Intel Crypto Api Toolkit 安全漏洞

Intel Crypto Api Toolkit is a cryptographic Api toolkit from Intel Corporation USA. The interface for securely running key generation and encryption operations enhances the security of data and key protection applications. A security vulnerability exists in Intel Crypto Api Toolkit that stems fro...

Experts Detail Malicious Code Dropped Using ManageEngine ADSelfService Exploit

At least nine entities across the technology, defense, healthcare, energy, and education industries were compromised by leveraging a recently patched critical vulnerability in Zoho's ManageEngine ADSelfService Plus self-service password management and single sign-on SSO solution. The spying...

All About Ring’s New Virtual Security Guard

By Owais Sultan Ring’s Virtual Security Guard is a live, customizable motion event monitoring service by Rapid Response that works with the external Ring cameras at home or business. This is a post from HackRead.com Read the original post: All About Rings New Virtual Security Guard...

Swap.sol implements potentially dangerous transfer

Handle elprofesor Vulnerability details Impact The use of .transfer in Swap.sol may have unintended outcomes on the eth being sent to the receiver. Eth may be irretrievable or undelivered if the msg.sender or feeRecipient is a smart contract. Funds can potentially be lost if; 1. The smart contrac...

PT-2021-7214 · Intel · Intel Processors With Sgx

Name of the Vulnerable Software and Affected Versions: Intel Processors with SGX affected versions not specified Description: The issue is related to the implementation of the JTAG interface in Intel microprogram software, which is associated with insufficient boundaries of the controlled system...

Intel SGX SDK 输入验证错误漏洞

The Intel SGX SDK is a software development kit based on SGX Intel Software Security Extensions technology from Intel U.S.A. An input validation error vulnerability exists in the Intel SGX SDK, which was reported by Intel in the Intel Software Protection Extensions SGX Software Development Kit SD...

Windows 11 is out. Is it any good for security?

Windows 11, the latest operating system OS from Microsoft, launches today, and organizations have begun asking themselves when and if they should upgrade from Windows 10 or older versions. The requirements and considerations of each organization will be different, and many things will inform the...