Instagram down: Social networking site suffering service outage

By Uzair Amir Instagram down? You are not alone; Instagram is down for everyone. Another day, another service outage at social media giant Facebook. Yes, the photo and video-sharing social networking service Instagram has been hit by a worldwide service outage forcing its website and applications...

Telegram Suffers 'Powerful DDoS Attack' From China During Hong Kong Protests

Telegram, one of the most popular encrypted messaging app, briefly went offline yesterday for hundreds of thousands of users worldwide after a powerful distributed denial-of-service DDoS attack hit its servers. Telegram founder Pavel Durov later revealed that the attack was mainly coming from the...

How a Google Cloud Catch-22 Broke the Internet

A Google Cloud outage that knocked huge portions of the internet offline also blocked access to the tools Google needed to fix it...

Race condition

A vulnerability in the authentication service of the Cisco Unified Communications Manager IM and Presence Unified CM IM&P Service, Cisco TelePresence Video Communication Server VCS, and Cisco Expressway Series could allow an unauthenticated, remote attacker to cause a service outage for users...

A week in security (May 27 – June 2)

Last week on Malwarebytes Labs, we took readers through a deep dive—way down the rabbit hole—into the novel malware called “Hidden Bee.” We also looked at the potential impact of a government agency’s privacy framework, and delivered to readers everything they needed to know about ATM attacks and...

Salesforce Woes Linger as Admins Clean Up After Service Outage

After a massive service outage on Friday, software-as-a-service giant Salesforce restored partial access to its affected customers over the weekend, while admins continued with cleanup into Monday. The outage was brought on by a scripting error that affected all Pardot marketing automation softwa...

Baltimore City Shuts Down Most of Its Servers After Ransomware Attack

For the second time in just over a year, the city of Baltimore has been hit by a ransomware attack, affecting its computer network and forcing officials to shut down a majority of its computer servers as a precaution. Ransomware works by encryption files and locking them up so users can't access...

Rockwell Automation/Allen-Bradley Ethernet/IP Products Buffer Overflow

Binary data 720001.prm...

What’s Behind the Wolters Kluwer Tax Outage?

Early in the afternoon on Friday, May, 3, I asked a friend to relay a message to his security contact at CCH, the cloud-based tax division of the global information services firm Wolters Kluwer in the Netherlands. The message was that the same file directories containing new versions of CCH's...

Oracle MySQL Optimizer DoS

The vulnerability of the Server: Optimizer component of the Oracle MySQL database management system is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using the MySQL protocol...

CVE-2019-11455

A buffer over-read in UtilurlDecode in util.c in Tildeslash Monit before 5.25.3 allows a remote authenticated attacker to retrieve the contents of adjacent memory via manipulation of GET or POST parameters. The attacker can also cause a denial of service application outage...

CVE-2019-11455

A buffer over-read in UtilurlDecode in util.c in Tildeslash Monit before 5.25.3 allows a remote authenticated attacker to retrieve the contents of adjacent memory via manipulation of GET or POST parameters. The attacker can also cause a denial of service application outage...

CVE-2019-11455

A buffer over-read in UtilurlDecode in util.c in Tildeslash Monit before 5.25.3 allows a remote authenticated attacker to retrieve the contents of adjacent memory via manipulation of GET or POST parameters. The attacker can also cause a denial of service application outage...

TP-Link TL-WR840N Denial of Service Vulnerability

The TP-LINK TL-WR840N is a wireless router with a channel count of 13 and VPN support. A denial of service vulnerability exists in the TP-Link TL-WR840N. A remote attacker can exploit this vulnerability to cause a denial of service network outage via segmented packets...

CVE-2018-15840

TP-Link TL-WR840N devices allow remote attackers to cause a denial of service networking outage via fragmented packets, as demonstrated by an "nmap -f" command...

Command injection

TP-Link TL-WR840N devices allow remote attackers to cause a denial of service networking outage via fragmented packets, as demonstrated by an "nmap -f" command...

CVE-2018-15840

CVE-2018-15840 affects TP-Link TL-WR840N devices: a vulnerability in processing fragmented packets can be exploited remotely to cause a denial of service (network outage). Demonstrated by sending fragmented packets (e.g., with nmap -f). The provided connected documents corroborate a DoS impact vi...

CVE-2018-15840

TP-Link TL-WR840N devices allow remote attackers to cause a denial of service networking outage via fragmented packets, as demonstrated by an "nmap -f" command...

CVE-2018-15840: Improper Restriction of Operations within the Bounds of a Memory Buffer

TP-Link TL-WR840N devices allow remote attackers to cause a denial of service networking outage via fragmented packets, as demonstrated by an "nmap -f" command...

LibTIFF TIFFPrintDirectory Partial DoS

The vulnerability of the TIFFPrintDirectory function tifprint.c in the LibTIFF library is related to the use of a null pointer. Exploiting this vulnerability could allow an attacker to cause partial service failure remotely...