Schneider Electric ION8650 Power Meter Detection

Binary data 764586.prm...

Schneider Electric ION8650 Power Meter Detection

Binary data 764573.prm...

Schneider Electric ION8650 Power Meter Detection

Binary data 764564.prm...

Schneider Electric ION8650 Power Meter Detection

Binary data 764553.prm...

Schneider Electric ION8650 Power Meter Detection

Binary data 764569.prm...

Microsoft Excel Power Query Remote Code Execution

A remote code execution vulnerability exists in Microsoft Excel Power Query. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

FaceSentry Access Control System 6.4.8 Cleartext Password Storage

FaceSentry Access Control System 6.4.8 Cleartext Password Storage Vendor: iWT Ltd. Product web page: http://www.iwt.com.hk Affected version: Firmware 6.4.8 build 264 Algorithm A16 Firmware 5.7.2 build 568 Algorithm A14 Firmware 5.7.0 build 539 Algorithm A14 Summary: FaceSentry 5AN is a...

FaceSentry Access Control System 6.4.8 - Remote Command Injection

FaceSentry Access Control System 6.4.8 Remote Command Injection Vendor: iWT Ltd. Product web page: http://www.iwt.com.hk Affected version: Firmware 6.4.8 build 264 Algorithm A16 Firmware 5.7.2 build 568 Algorithm A14 Firmware 5.7.0 build 539 Algorithm A14 Summary: FaceSentry 5AN is a revolutionar...

New Microsoft Excel Attack Vector Surfaces

UPDATE A feature in Microsoft Office’s Excel spreadsheet program called Power Query can be exploited to plant malware on remote systems. Researchers at Mimecast Threat Center say they have developed a proof-of-concept attack scenario and reported the vulnerability Thursday. The exploitable featur...

Ubuntu 18.04 LTS : Linux kernel vulnerability (USN-4031-1)

The remote Ubuntu 18.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-4031-1 advisory. It was discovered that the Linux kernel did not properly separate certain memory mappings when creating new userspace processes on 64-bit Power ppc64el systems. A...

USN-4031-1 linux, linux-hwe vulnerability

It was discovered that the Linux kernel did not properly separate certain memory mappings when creating new userspace processes on 64-bit Power ppc64el systems. A local attacker could use this to access memory contents or cause memory corruption of other processes on the system...

USN-4031-1: Linux kernel vulnerability

It was discovered that the Linux kernel did not properly separate certain memory mappings when creating new userspace processes on 64-bit Power ppc64el systems. A local attacker could use this to access memory contents or cause memory corruption of other processes on the system...

Chernobyl’s lessons for critical-infrastructure cybersecurity

This story originally ran on The Parallax on April 26, 2019. CHERNOBYL EXCLUSION ZONE, Ukraine—The stray dog looking directly at me was hard to resist. Her ears perked up, her fur appeared clean—free of mange, at any rate—and she held a large stick firmly between her jaws. She looked like a good...

Threat Source newsletter (June 20, 2019)

Newsletter compiled by Jonathan Munshaw. Welcome to this week’s Threat Source newsletter — the perfect place to get caught up on all things Talos from the past week. This week, we disclosed two vulnerabilities in KCodes’ NetUSB kernel module contains that could allow an attacker to inappropriatel...

[SECURITY] Fedora 30 Update: mutt-1.12.0-1.fc30

Mutt is a small but very powerful text-based MIME mail client. Mutt is highly configurable, and is well suited to the mail power user with advanced features like key bindings, keyboard macros, mail threading, regular expression searches and a powerful pattern matching language for selecting group...

Hackers Target US Power, Amazon Clones a Neighborhood, and More News

Catch up on the most important news from today in two minutes or less...

Malicious Package

Overview Version 1.0.8 of ember-power-timepicker contained malicious code. The code when executed in the browser would enumerate password, cvc and cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation Remove the package from your...

Security Bulletin: IBM PureApplication System is affected by a GPFS vulnerability (CVE-2018-1783) for Power on Linux

Summary There is a vulnerability in the GPFS component that is used by IBM PureApplication System for Power racks on Linux OS. IBM has released Version 2.2.6.0 for IBM PureApplication System, in response to CVE-2018-1783. IBM PureApplication System provides a GPFS pattern and addressed the...

Security Bulletin: IBM PureApplication System is affected by a GPFS vulnerability (CVE-2018-1723) for Power on Linux

Summary There is a vulnerability in the GPFS component that is used by IBM PureApplication System for Power racks on Linux OS. IBM has released Version 2.2.6.0 for IBM PureApplication System, in response to CVE-2018-1723. IBM PureApplication System provides a GPFS pattern and addressed the...

Security Bulletin: IBM PureApplication Service is affected by a GPFS vulnerability (CVE-2018-1783) for Power on Linux

Summary There is a vulnerability in the GPFS component that is used by IBM PureApplication Service for Power racks on Linux OS. IBM has released Version 2.2.6.0 for IBM PureApplication Service, in response to CVE-2018-1783. IBM PureApplication Service provides a GPFS pattern and addressed the...