January 19, 2017 – Morning Cyber Coffee Headlines – “Puppies” Edition

Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! January 19, 2018 - Headlines The Five Laws Of Cybersecurity - Forbes 3 things y...

The vulnerability of the journal viewing tool of the Apache Storm distributed computing platform allows a hacker to read arbitrary files.

The vulnerability of the journal viewing tool in the Apache Storm distributed computing platform relates to deficiencies in path name restrictions for accessing the catalog. Exploiting this vulnerability allows a malicious actor to read arbitrary files using the “..” symbol as a parameter in the...

Former NSA Employee Pleads Guilty to Taking Classified Data

A former employee for the National Security Agency pleaded guilty on Friday to taking classified data to his home computer in Maryland. According to published reports, U.S. intelligence officials believe the data was then stolen from his computer by hackers working for the Russian government. Ngh...

Microsoft Windows 10 - CiSetFileCache TOCTOU Security Feature Bypass

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1332 Windows: CiSetFileCache TOCTOU Security Feature Bypass Platform: Windows 10 10586/14393/10S not tested 8.1 Update 2 or Windows 7 Class: Security Feature Bypass Summary: It’s possible to add a cached signing level to an unsigne...

rfidjournallive.com XSS vulnerability

Open Bug Bounty ID: OBB-407639 Description| Value ---|--- Affected Website:| rfidjournallive.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Che...

CAJViewer suffers from a memory corruption vulnerability (CNVD-2017-34953)

CAJviewer is a specialized full-text format reader for China Journal Network CJN, which supports TEB, NH, CAJ, KDH and PDF files of CJN. CAJviewer suffers from a memory corruption vulnerability when handling special CAJ files, which can be exploited by attackers to cause a denial of service attac...

CAJViewer suffers from a memory corruption vulnerability (CNVD-2017-34937)

CAJviewer is a specialized full-text format reader for China Journal Network CJN, which supports TEB, NH, CAJ, KDH and PDF files of CJN. CAJviewer suffers from a memory corruption vulnerability when handling special CAJ files, which can be exploited by attackers to cause a denial of service attac...

CAJViewer suffers from a memory corruption vulnerability (CNVD-2017-34936)

CAJviewer is a specialized full-text format reader for China Journal Network CJN, which supports TEB, NH, CAJ, KDH and PDF files of CJN. CAJviewer suffers from a memory corruption vulnerability when handling special CAJ files, which can be exploited by attackers to cause a denial of service...

‘BadRabbit’ Ransomware Burrows Into Russia, Ukraine

ARCHIVED STORY ‘BadRabbit’ Ransomware Burrows Into Russia, Ukraine By Raj Samani · October 24, 2017 This post was researched and written by Tim Hux, David Marcus, Charles McFarland, Douglas McKee, and Raj Samani. McAfee is currently investigating a ransomware campaign known as BadRabbit, which...

CAJViewer suffers from a memory corruption vulnerability (CNVD-2017-34954)

CAJviewer is a specialized full-text format reader for China Journal Network CJN, which supports CJN's TEB, NH, CAJ, KDH and PDF files. CAJviewer suffers from a memory corruption vulnerability when handling special CAJ files, which can be exploited by attackers to cause a denial of service...

CAJViewer suffers from a memory corruption vulnerability (CNVD-2017-34948)

CAJviewer is a specialized full-text format reader for China Journal Network CJN, which supports TEB, NH, CAJ, KDH and PDF files of CJN. CAJviewer suffers from a memory corruption vulnerability when handling special CAJ files, which can be exploited by attackers to cause a denial of service attac...

CAJViewer suffers from a memory corruption vulnerability (CNVD-2017-34934)

CAJviewer is a specialized full-text format reader for China Journal Network CJN, which supports TEB, NH, CAJ, KDH and PDF files of CJN. CAJviewer suffers from a memory corruption vulnerability when handling special CAJ files, which can be exploited by an attacker to cause a denial of service...

CAJViewer suffers from a memory corruption vulnerability (CNVD-2017-34938)

CAJviewer is a specialized full-text format reader for China Journal Network CJN, which supports TEB, NH, CAJ, KDH and PDF files of CJN. CAJviewer suffers from a memory corruption vulnerability when handling special CAJ files, which can be exploited by attackers to cause a denial of service...

CAJViewer suffers from a memory corruption vulnerability (CNVD-2017-34955)

CAJviewer is a specialized full-text format reader for China Journal Network CJN, which supports TEB, NH, CAJ, KDH and PDF files of CJN. CAJviewer suffers from a memory corruption vulnerability when handling special CAJ files, which can be exploited by attackers to cause a denial of service attac...

CAJViewer suffers from a memory corruption vulnerability (CNVD-2017-34951)

CAJviewer is a specialized full-text format reader for China Journal Network CJN, which supports TEB, NH, CAJ, KDH and PDF files of CJN. CAJviewer suffers from a memory corruption vulnerability when handling special CAJ files, which can be exploited by attackers to cause a denial of service...

Memory Corruption Vulnerability in CAJViewer

CAJviewer is a specialized full-text format reader for China Journal Network CJN, which supports TEB, NH, CAJ, KDH and PDF files of CJN. CAJviewer suffers from a memory corruption vulnerability when handling special CAJ files, which can be exploited by attackers to cause a denial of service...

CAJViewer suffers from a memory corruption vulnerability (CNVD-2017-34949)

CAJviewer is a specialized full-text format reader for China Journal Network CJN, which supports TEB, NH, CAJ, KDH and PDF files of CJN. CAJviewer suffers from a memory corruption vulnerability when handling special CAJ files, which can be exploited by attackers to cause a denial of service attac...

CAJViewer suffers from a memory corruption vulnerability (CNVD-2017-34935)

CAJviewer is a specialized full-text format reader for China Journal Network CJN, which supports TEB, NH, CAJ, KDH and PDF files of CJN. CAJviewer suffers from a memory corruption vulnerability when handling special CAJ files, which can be exploited by attackers to cause a denial of service...

CAJViewer suffers from a memory corruption vulnerability (CNVD-2017-34950)

CAJviewer is a specialized full-text format reader for China Journal Network CJN, which supports TEB, NH, CAJ, KDH and PDF files of CJN. CAJviewer suffers from a memory corruption vulnerability when handling special CAJ files, which can be exploited by attackers to cause a denial of service attac...

‘BadRabbit’ Ransomware Burrows Into Russia, Ukraine

ARCHIVED STORY ‘BadRabbit’ Ransomware Burrows Into Russia, Ukraine By Raj Samani · October 24, 2017 This post was researched and written by Tim Hux, David Marcus, Charles McFarland, Douglas McKee, and Raj Samani. McAfee is currently investigating a ransomware campaign known as BadRabbit, which...