7344 matches found
Lock and Code S1Ep5: Mythbusting and understanding VPNs with JP Taggart
This week on Lock and Code, we discuss the top security headlines generated right here on Labs and around the Internet. In addition, we talk to JP Taggart, senior security researcher at Malwarebytes, about VPNs—debunking their myths, explaining their actual capabilities, and providing some advice...
Enabling Workforce Productivity in Challenging Times
As the world shifts to an increasingly virtual environment, Akamai continues to be at the forefront of helping customers enable workforce productivity with Akamai's Enterprise Application Access and Enterprise Threat Protector. From our detailed offer to our recent Edge Live Virtual Summit, where...
AMD Radeon DirectX 11 Driver 8.17.10.0871 Memory Corruption Vulnerability
AMD Radeon DirectX 11 Driver version 8.17.10.0871 suffers from a memory corruption vulnerability. / Title : Advanced Micro Devices, Inc. Radeon DirectX 11 Driver Firefox/MS Edge Memory Corruption Exploit Author : Marcin Ressel Vendor Homepage : https://www.amd.com/ Software Link: n/a Version:...
Connected Home Hubs Open Houses to Full Remote Takeover
Three different connected home hubs – Fibaro Home Center Lite, Homematic Central Control Unit CCU2 and Elko’s eLAN-RF-003 – are vulnerable in their older versions to serious bugs that would allow information disclosure, man-in-the-middle MiTM attacks and unauthenticated remote code execution RCE,...
SAS, sweet SAS
As you may already know from our social network posts, we have rescheduled the SAS 2020 conference for November 18-21 due to the COVID-19 pandemic and to ensure your safety. Though we still think that Barcelona is a great place to meet and it will not be a "real" SAS if we cannot hug, shake hands...
What Type of Home Security System Should You Get?
By Waqas There are many reasons to invest in a home security system, especially in today’s day and age. But... This is a post from HackRead.com Read the original post: What Type of Home Security System Should You Get?...
A week in security (April 13 – 19)
Last week on Malwarebytes Labs, we looked at how to avoid Zoom bombing, weighed the risks of surveillance versus pandemics, and dug into a spot of WiFi credential theft. Other cybersecurity news: Malware creeps back into the home: With a pandemic forcing much of the workforce into remote position...
ALLPlayer 7.6 Buffer Overflow Exploit
Exploit Title: ALLPlayer v7.6 Local Buffer Overflow SEHUnicode Version: 7.6 Exploit Author: Xenofon Vassilakopoulos Tested on: Windows 7 Home Premium SP1 x86 Steps to reproduce : 1. generate the test.m3u using this exploit 2. open ALLPlayer then go to Open audio file 3. load the test.m3u file 4...
Sophos Central and Home Privilege Vulnerability
Sophos Central and Sophos Home are both products of Sophos UK.Sophos Central is a unified console program for managing Sophos products.Sophos Home is a suite of network security protection software. The product supports threat detection, virus checking and ransomware protection. A privilege-lifti...
Description of the Office 2013 update: September 10, 2013
Description of the Office 2013 update: September 10, 2013 INTRODUCTION Microsoft has released an update for Microsoft Office 2013. This update provides the latest fixes for the 32-bit and 64-bit editions of Office 2013 and Office Home and Student 2013 RT. Additionally, this update contains...
CVE-2020-10947
Mac Endpoint for Sophos Central before 9.9.6 and Mac Endpoint for Sophos Home before 2.2.6 allow Privilege Escalation...
Privilege escalation
Mac Endpoint for Sophos Central before 9.9.6 and Mac Endpoint for Sophos Home before 2.2.6 allow Privilege Escalation...
CVE-2020-10947
Mac Endpoint for Sophos Central before 9.9.6 and Mac Endpoint for Sophos Home before 2.2.6 allow Privilege Escalation...
inspirehomeautomation.co.uk Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1144529 Security Researcher 10Harshjoshi Helped patch 48 vulnerabilities Received 1 Coordinated Disclosure badges Received 5 recommendations , a holder of 1 badges for responsible and coordinated disclosure, found a security vulnerability affecting...
Residential Internet Connections are now Business Connections: What about Security and Compliance?
Near-global mandates to stay at home have completely reshaped the internet security landscape. Remote work is the new normal, inverting the traditional office model. Attackers are not relenting as they see opportunity to take advantage of a world with a singular focus. Here are a couple of recent...
Western Digital My Cloud Home and ibi Websites Clickjacking Vulnerability
Western Digital My Cloud is a personal cloud storage device from Western Digital. A security vulnerability exists in Western Digital My Cloud Home and ibi Websites versions prior to 2.2.0. An attacker could exploit the vulnerability to hijack click-through actions on the login page...
Broadcom CA API Developer Portal Input Validation Error Vulnerability (CNVD-2020-25823)
Broadcom CA API Developer Portal is an API developer portal product of Broadcom's complete API lifecycle management solution, which provides API release control, API performance monitoring and other functions. An input validation error vulnerability exists in the homeRedirect page in Broadcom CA...
CVE-2020-10951
Western Digital My Cloud Home and ibi devices before 2.2.0 allow clickjacking on sign-in pages...