March 30, 2020—KB4554354 (OS Build 17763.1132)

None None...

March 30, 2020—KB4554349 (OS Build 17134.1401)

None None...

Scanners-Box

This is a collection of open-source scanning tools, referred to as "Scanners Box" or "scanbox." The project is a repository of various tools for scanning and testing web applications, IoT devices, and other targets. The tools are primarily used for vulnerability scanning, penetration testing, and...

Scanners-Box

This repository, Scanners-Box, is a powerful hacker toolkit that collects more than 10 categories of open-source scanners from GitHub. It includes subdomain, database, middleware, and other modular design scanners, but excludes well-known scanning tools such as Awvs, Nmap, and W3af. The toolkit i...

Apple Unpatched VPN Bypass Bug Impacts iOS 13, Warn Researchers

An unpatched bug in the latest version of Apple’s iOS is blocking virtual private network VPN applications from cloaking some private data transmitted between a device and the servers they are requesting data from. While the bug remains unpatched, Apple is suggesting steps users can take to reduc...

[SECURITY] Fedora 32 Update: tor-0.4.2.7-1.fc32

The Tor network is a group of volunteer-operated servers that allows people to improve their privacy and security on the Internet. Tor's users employ this network by connecting through a series of virtual tunnels rather than makin g a direct connection, thus allowing both organizations and...

Ransomware Maze

ARCHIVED STORY Ransomware Maze Alexandre Mundo · MAR 26, 2020 Overview The Maze ransomware, previously known in the community as “ChaCha ransomware”, was discovered on May the 29th 2019 by Jerome Segura1. The main goal of the ransomware is to crypt all files that it can in an infected system and...

The vulnerability of the implementation of the IPSec protocol set in the Cisco IOS XR operating system allows a attacker to trigger a service failure.

The vulnerability of the implementation of the IPSec protocol set in the Cisco IOS XR operating system is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

ZendTo IP Address Spoofing Vulnerability

ZendTo is a completely free web-based system that lets you conveniently send or receive files with no limit on file size and faster speeds. An IP address spoofing vulnerability exists in lib/NSSDropbox.php in versions prior to ZendTo 5.22-2 Beta. An attacker can exploit this vulnerability via the...

The vulnerability of the Microsoft Internet Information Server (IIS) operating system on Windows allows a perpetrator to execute a type of attack known as “cross-site scripting attacks”.

The vulnerability of the Microsoft Internet Information Server IIS operating systems on Windows is related to incorrect processing of request headers. Exploiting this vulnerability allows a malicious actor to execute a type of attack known as “cross-site request forgeing” by sending specially...

CVE-2019-20606

An issue was discovered on Samsung mobile devices with any before May 2019 software. A phishing attack against OMACP can change the network and internet settings. The Samsung ID is SVE-2019-14073 May 2019...

Design/Logic Flaw

An issue was discovered on Samsung mobile devices with any before May 2019 software. A phishing attack against OMACP can change the network and internet settings. The Samsung ID is SVE-2019-14073 May 2019...

CVE-2019-20606

An issue was discovered on Samsung mobile devices with any before May 2019 software. A phishing attack against OMACP can change the network and internet settings. The Samsung ID is SVE-2019-14073 May 2019...

Working Together to Manage Global Internet Traffic Increases

As businesses and consumers around the world adjust their routines amid the various COVID-19 restrictions, the internet is being used at a scale that the world has never experienced. In addition to millions of people who are now working from home, students all over the world are going online to...

Internet Voting in Puerto Rico

Puerto Rico is considered allowing for Internet voting. I have joined a group of security experts in a letter opposing the bill. Cybersecurity experts agree that under current technology, no practically proven method exists to securely, verifiably, or privately return voted materials over the...

Working Together to Manage Global Internet Traffic Increases

As businesses and consumers around the world adjust their routines amid the various COVID-19 restrictions, the internet is being used at a scale that the world has never experienced. In addition to millions of people who are now working from...

KB4541500: Windows 7 and Windows Server 2008 R2 March 2020 Security Update

The remote Windows host is missing security update 4541500 or cumulative update 4540688. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory. The vulnerability could corrupt memory in...

Defending the power grid against supply chain attacks—Part 2: Securing hardware and software

Artificial intelligence AI and connected devices have fueled digital transformation in the utilities industry. These technological advances promise to reduce costs and increase the efficiency of energy generation, transmission, and distribution. They’ve also created new vulnerabilities...

5 Best Internet Service Locators

By Waqas By using an internet service locator will allow you to learn about all of your options for service providers before you commit to a company. This is a post from HackRead.com Read the original post: 5 Best Internet Service Locators...

Microsoft Patch Tuesday March 2020: a new record was set, SMBv3 “Wormable” RCE and updates for February goldies

SMBv3 "Wormable" RCE Without a doubt, the hottest Microsoft vulnerability in March 2020 is the "Wormable" Remote Code Execution in SMB v3 CVE-2020-0796. The most commonly used names for this vulnerability are EternalDarkness, SMBGhost and CoronaBlue. There was a strange story of how it was...