The Rotexy mobile Trojan – banker and ransomware

On the back of a surge in Trojan activity, we decided to carry out an in-depth analysis and track the evolution of some other popular malware families besides Asacub. One of the most interesting and active specimens to date was a mobile Trojan from the Rotexy family. In a three-month period from...

TIBCO MessagiTIBCO Messaging - Apache Kafka Distribution - Schema Repository Cross-Site Request Forgery Vulnerability

TIBCO Messaging - Apache Kafka Distribution - Schema Repository is a suite of application development and deployment solutions from TIBCO Software. A cross-site request forgery vulnerability exists in the Schema repository server component in TIBCO Messaging - Apache Kafka Distribution - Schema...

CVE-2018-12413: Cross-Site Request Forgery (CSRF)

The Schema repository server tibschemad component of TIBCO Software Inc.'s TIBCO Messaging - Apache Kafka Distribution - Schema Repository - Community Edition, and TIBCO Messaging - Apache Kafka Distribution - Schema Repository - Enterprise Edition contains a vulnerability which may allow an...

CVE-2018-12413

The Schema repository server tibschemad component of TIBCO Software Inc.'s TIBCO Messaging - Apache Kafka Distribution - Schema Repository - Community Edition, and TIBCO Messaging - Apache Kafka Distribution - Schema Repository - Enterprise Edition contains a vulnerability which may allow an...

PT-2018-11154

Name of the Vulnerable Software and Affected Versions TIBCO Messaging - Apache Kafka Distribution - Schema Repository - Community Edition version 1.0.0 TIBCO Messaging - Apache Kafka Distribution - Schema Repository - Enterprise Edition version 1.0.0 Description The issue allows an attacker to...

[SECURITY] Fedora 29 Update: mosquitto-1.5.3-1.fc29

Mosquitto is an open source message broker that implements the MQ Telemetry Transport protocol version 3.1 and 3.1.1 MQTT provides a lightweight method of carrying out messaging using a publish/subscribe model. This makes it suitable for "machine to machine" messaging such as with low power senso...

Signal App’s New Privacy Feature Conceals Sender ID from Metadata

By Waqas Messaging apps are now becoming more and more secure to make it difficult or rather impossible for anyone to access your conversations. Switching to end-to-end encryption although offered a stronger layer of protection but still the unencrypted metadata like sender/receiver information,...

Signal's "Sealed Sender" Is a Clever New Way to Shield Your Identity

"Sealed sender" gives the leading encrypted messaging app an important boost, hiding metadata around who sent a given message...

[SECURITY] Fedora 28 Update: mosquitto-1.5.3-1.fc28

Mosquitto is an open source message broker that implements the MQ Telemetry Transport protocol version 3.1 and 3.1.1 MQTT provides a lightweight method of carrying out messaging using a publish/subscribe model. This makes it suitable for "machine to machine" messaging such as with low power senso...

at.chrl:chrl-jms (1.1.0), at.researchstudio.sat:won-core (>=0.2, <=0.3) +1867 more potentially affected by CVE-2018-1270 +1 more via org.springframework:spring-messaging (>=4.0.1.release, <=4.3.15.release)

org.springframework:spring-messaging MAVEN version =4.0.1.release, =0.2, =0.2, =0.2, =0.2, =0.3 - at.researchstudio.sat:won-node 0.3 - at.researchstudio.sat:won-node-webapp 0.3 - at.researchstudio.sat:won-owner 0.3 - at.researchstudio.sat:won-owner-webapp 0.3 and more Source cves: CVE-2018-1270,...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (3.4.0), ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (>=3.1.0, <=3.4.0) +121 more potentially affected by CVE-2018-1270 via org.springframework:spring-messaging (>=5.0.0.release, <=5.0.4.release)

org.springframework:spring-messaging MAVEN version =5.0.0.release, =3.1.0, =0.2.0, =0.1.0-rc1, =3.0.0-alpha.1, =3.0.1 and more Source cves: CVE-2018-1270 Source advisory: GHSA-P5HG-3XM3-GCJG...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (3.4.0), ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (>=3.1.0, <=3.4.0) +121 more potentially affected by CVE-2018-1270 via org.springframework:spring-messaging (>=5.0.0.release, <=5.0.4.release)

org.springframework:spring-messaging MAVEN version =5.0.0.release, =3.1.0, =0.2.0, =0.1.0-rc1, =3.0.0-alpha.1, =3.0.1 and more Source cves: CVE-2018-1270 Source advisory: OSV:GHSA-P5HG-3XM3-GCJG...

Denial of Service in org.springframework:spring-core

Spring Framework, versions 5.0.x prior to 5.0.6, versions 4.3.x prior to 4.3.17, and older unsupported versions allows applications to expose STOMP over WebSocket endpoints with a simple, in-memory STOMP broker through the spring-messaging module. A malicious user or attacker can craft a message ...

Just Answering A Video Call Could Compromise Your WhatsApp Account

What if just receiving a video call on WhatsApp could hack your smartphone? This sounds filmy, but Google Project Zero security researcher Natalie Silvanovich found a critical vulnerability in WhatsApp messenger that could have allowed hackers to remotely take full control of your WhatsApp just b...

From Now On, Only Default Android Apps Can Access Call Log and SMS Data

A few hours ago the company announced its "non-shocking" plans to shut down Google+ social media network following a "shocking" data breach incident. Now to prevent abuse and potential leakage of sensitive data to third-party app developers, Google has made several significant changes giving user...

ArchestrA Network Service DoS

The vulnerability of the network service component of the ArchestrA system for message exchange between components is due to uncontrolled memory consumption. Exploiting this vulnerability allows a malicious actor to cause a service failure by sending a specially crafted request...

[SECURITY] Fedora 29 Update: matrix-synapse-0.33.3.1-1.fc29

Matrix is an ambitious new ecosystem for open federated Instant Messaging a nd VoIP. Synapse is a reference "homeserver" implementation of Matrix from the core development team at matrix.org, written in Python/Twisted. It is inten ded to showcase the concept of Matrix and let folks see the spec i...

Symantec Messaging Gateway Authentication Bypass Vulnerability

Symantec Messaging Gateway is a suite of anti-spam, anti-virus, advanced content filtering and data leakage protection technologies from Symantec. A security vulnerability exists in Symantec Messaging Gateway versions prior to 10.6.6. An attacker could use this vulnerability to bypass security...

Symantec Messaging Gateway 10.x < 10.6.6 Multiple Vulnerabilities (SYMSA1461)

According to its self-reported version number, the Symantec Messaging Gateway SMG running on the remote host is 10.x prior to 10.6.6. It is, therefore, affected by multiple vulnerabilities as described in the vendor advisory. Note that Nessus has not tested for these issues but has instead relied...

CVE-2018-12242

The Symantec Messaging Gateway product prior to 10.6.6 may be susceptible to an authentication bypass exploit, which is a type of issue that can allow attackers to potentially circumvent security mechanisms currently in place and gain access to the system or network...