Defense Takeaways from Three Adversary Playbooks

In these days of advanced threats, the perimeter defense strategy – though still useful and necessary – is incomplete. IT security teams need as much information about existing threats as possible, so they know what to look for and how to position proactive countermeasures. Creating and using...

GHSA-5Q54-8P9J-X74J Cross-site Scripting in pandao editor.md

pandao Editor.md 1.5.0 allows XSS via the Javasript: string...

Ke3chang APT Linked to Previously Undocumented Backdoor

The Ke3chang cyberespionage group, a.k.a. APT15, Mirage, Playful Dragon or Vixen Panda, has been tied to a backdoor called Okrum that has been used to target diplomatic missions throughout Europe and Latin America. The attribution widens the scope of known Ke3chang activity, an APT believed to be...

CVE-2019-12042

Insecure permissions of the section object Global\PandaDevicesAgentSharedMemory and the event Global\PandaDevicesAgentSharedMemoryChange in Panda products before 18.07.03 allow attackers to queue an event as an encrypted JSON string to the system service AgentSvc.exe, which leads to privilege...

CVE-2019-12042

Insecure permissions of the section object Global\PandaDevicesAgentSharedMemory and the event Global\PandaDevicesAgentSharedMemoryChange in Panda products before 18.07.03 allow attackers to queue an event as an encrypted JSON string to the system service AgentSvc.exe, which leads to privilege...

Design/Logic Flaw

Insecure permissions of the section object Global\PandaDevicesAgentSharedMemory and the event Global\PandaDevicesAgentSharedMemoryChange in Panda products before 18.07.03 allow attackers to queue an event as an encrypted JSON string to the system service AgentSvc.exe, which leads to privilege...

CVE-2019-12042

Insecure permissions of the section object Global\PandaDevicesAgentSharedMemory and the event Global\PandaDevicesAgentSharedMemoryChange in Panda products before 18.07.03 allow attackers to queue an event as an encrypted JSON string to the system service AgentSvc.exe, which leads to privilege...

CVE-2019-12042

The CVE-2019-12042 issue affects Panda Security products (Panda Antivirus, Panda Antivirus Pro, Panda Dome, Panda Global Protection, Panda Gold Protection, Panda Internet Security). Root cause: insecure permissions on the shared memory section object Global\PandaDevicesAgentSharedMemory and the e...

Multiple Panda Security Products Elevation of Privilege Vulnerabilities

Panda Security Antivirus and others are products of the Spanish company Panda Security.Panda Security Antivirus is a suite of antivirus programs.Panda Security Dome is an antivirus for ransomware and spyware.Panda Security Internet Security is a suite of cloud-based antivirus programs.Panda...

CVE-2019-12042: Incorrect Permission Assignment for Critical Resource

Insecure permissions of the section object Global\PandaDevicesAgentSharedMemory and the event Global\PandaDevicesAgentSharedMemoryChange in Panda products before 18.07.03 allow attackers to queue an event as an encrypted JSON string to the system service AgentSvc.exe, which leads to privilege...

Chinese Spies Stole NSA Cyberweapons Long Before Shadow Brokers Leak

Hacking tools allegedly developed by the National Security Agency NSA were being used in the wild by at least one APT long before the Shadow Brokers released the now-infamous trove of U.S. cyberweapons, new analysis suggests. According to researchers at Symantec, an attack group affiliated with t...

Get 4 Essential CyberSecurity Software For Less Than $10 Per Month

Major data breaches and cyber attacks are occurring at an alarming rate, and if you are still not using a VPN and password manager app, you are seriously out of excuses. Not just VPN software and a password manager, cybersecurity experts also recommend using antivirus and backup solutions to...

CVE-2018-0643

Ubuntu14.04 ORCA Online Receipt Computer Advantage 4.8.0 panda-server 1:1.4.9+p41-u4jma1 and earlier allows attacker with administrator rights to execute arbitrary OS commands via unspecified vectors...

CVE-2018-0644: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Ubuntu14.04 ORCA Online Receipt Computer Advantage 4.8.0 panda-client2 1:1.4.9+p41-u4jma1 and earlier, Ubuntu14.04 ORCA Online Receipt Computer Advantage 5.0.0 panda-client2 1:2.0.0+p48-u4jma1 and earlier, and Ubuntu16.04 ORCA Online Receipt Computer Advantage 5.0.0 panda-clien...

CVE-2018-0643: Improper Neutralization of Special Elements used in an OS Command

Ubuntu14.04 ORCA Online Receipt Computer Advantage 4.8.0 panda-server 1:1.4.9+p41-u4jma1 and earlier allows attacker with administrator rights to execute arbitrary OS commands via unspecified vectors...

APT10 Under Close Scrutiny as Potentially Linked to Chinese Ministry of State Security

Researchers claim that APT10, a likely China-based threat actor, is believed directly connected to the Chinese Ministry of State Security’s MSS Tianjin bureau. The allegations come from CrowdStrike which released a report Friday that claims it has found firm ties that link APT10 or Stone Panda wi...

Panda Banking Trojan Diversifies into Cryptocurrency, Porn, Other Targets

The Panda banking trojan, a spin-off from the infamous Zeus malware, is widening its net to attack more than just financial services targets, as seen in three ongoing campaigns discovered in May. The Windows-focused Panda is far from the cuddly thing its name would suggest. It has a full arsenal ...

Panda Global Protection <= 17.0.1 Multiple Vulnerabilities

Panda Global Protection is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

Panda Global Protection Elevation of Privilege Vulnerability

Panda Global Protection is a suite of antivirus software from the Spanish company Panda Security. The software protects devices from viruses, spyware, hackers and other Internet threats. A security vulnerability exists in Panda Global Protection version 17.0.1. A local attacker can exploit the...

Panda Global Protection Unquoted Windows Search Path Vulnerability

Panda Global Protection is a suite of antivirus software from the Spanish company Panda Security. The software protects devices from viruses, spyware, hackers and other Internet threats. A security vulnerability exists in the pandaurlfiltering service in Panda Global Protection version 17.0.1. A...