408 matches found
A week in security (January 23—29)
Last week on Malwarebytes Labs: T-Mobile reports data theft of 37 million customers in the US Ransomware revenue significantly down over 2022 Microsoft to end direct sale of Windows 10 licenses at the end of January TikTok CEO told to "step up efforts to comply" with digital laws 4 ways to protec...
Riot Games compromised, new releases and patches halted
Popular game developer Riot Games brings word of a system compromise which may cause issues for updates to well known titles, although for the time being it seems as though customer data isn't affected. A social engineering development Making the notification via Twitter late last week, were stil...
CVE-2021-27427
RIOT OS version 2020.01.1 is vulnerable to integer wrap-around in its implementation of calloc function, which can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code injection/execution...
CVE-2021-27427
RIOT OS version 2020.01.1 is vulnerable to integer wrap-around in its implementation of calloc function, which can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code injection/execution...
Integer overflow
RIOT OS version 2020.01.1 is vulnerable to integer wrap-around in its implementation of calloc function, which can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code injection/execution...
CVE-2021-27427 RIOT OS Integer Overflow or Wraparound
RIOT OS version 2020.01.1 is vulnerable to integer wrap-around in its implementation of calloc function, which can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code injection/execution...
CVE-2021-27427 RIOT OS Integer Overflow or Wraparound
RIOT OS version 2020.01.1 is vulnerable to integer wrap-around in its implementation of calloc function, which can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code injection/execution...
CVE-2021-27427
The CVE-2021-27427 entry concerns RIOT OS 2020.01.1, where an integer wrap-around in calloc can cause arbitrary memory allocation, leading to a crash or remote code execution. Connected sources corroborate the RIOT OS impact and specify the vulnerability as an integer wrap-around in calloc. The R...
‘Appalling’ Riot Games Job Fraud Takes Aim at Wallets
Riot Games, the developer behind League of Legends, has filed a California lawsuit against scammers, whose identities aren’t yet known, for ripping off job seekers with the promise of a gig with the company. Usually early in their careers and eager for a chance with a gaming company like Riot, jo...
The vulnerability in the implementation of the calloc function in the kernel of the operating system for RIOT network devices allows a hacker to execute arbitrary code.
The vulnerability in the implementation of the calloc function in the kernel of the operating system for RIOT network devices relates to the possibility of integer overflow. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
How Google Geofence Warrants Helped Catch Capitol Rioters
A WIRED investigation has found 45 federal criminal cases that cite Google geolocation data to place suspects inside the US Capitol during the January 6 riot...
CVE-2021-41061
In RIOT-OS 2021.01, nonce reuse in 802.15.4 encryption in the ieee820154security component allows attackers to break encryption by triggering reboots...
CVE-2021-41061
In RIOT-OS 2021.01, nonce reuse in 802.15.4 encryption in the ieee820154security component allows attackers to break encryption by triggering reboots...
Design/Logic Flaw
In RIOT-OS 2021.01, nonce reuse in 802.15.4 encryption in the ieee820154security component allows attackers to break encryption by triggering reboots...
CVE-2021-41061
In RIOT-OS 2021.01, nonce reuse in 802.15.4 encryption in the ieee820154security component allows attackers to break encryption by triggering reboots...
CVE-2021-41061
In RIOT-OS 2021.01, nonce reuse in 802.15.4 encryption in the ieee820154security component allows attackers to break encryption by triggering reboots...
CVE-2021-41061
In RIOT-OS 2021.01, nonce reuse in 802.15.4 encryption within the ieee820154_security component is reported to allow attackers to break encryption by triggering reboots. The Red Hat entry confirms the same CVE-2021-41061 description. No explicit vendor patch or versioned remediation details are p...
RIOT RIOT-OS 安全特征问题漏洞
RIOT RIOT-OS is a set of operating systems for applications in the Internet of Things IoT space. RIOT-OS nonce reuse version 802.15.4 suffers from a security signature issue vulnerability that allows an attacker to break the encryption by triggering a reboot...
RIOT Buffer Overflow Vulnerability (CNVD-2021-44275)
RIOT is a real-time multi-threaded IoT operating system that supports a range of devices commonly found in the Internet of Things. RIOT suffers from a buffer overflow vulnerability. An attacker can exploit this vulnerability to obtain sensitive information...
RIOT Buffer Overflow Vulnerability (CNVD-2021-44277)
RIOT is a real-time multi-threaded IoT operating system that supports a range of devices commonly found in the Internet of Things. RIOT suffers from a buffer overflow vulnerability. An attacker can exploit this vulnerability to obtain sensitive information...