21942 matches found
VMware Workspace ONE UEM console Open Redirect (VMSA-2023-0025)
The version of Workspace ONE UEM console running on the remote host is 2203 prior to 22.3.0.48, 2206 prior to 22.6.0.36, 2209 prior to 22.9.0.29, 2212 prior to 22.12.0.20 or 2302 prior to 23.2.0.10. It is, therefore, affected by an open redirect vulnerability. A remote attacker can redirect a...
The malware, attacker trends and more that shaped the threat landscape in 2023
The 2023 Cisco Talos Year in Review is now available to download. Once again, the Talos team has meticulously combed through a massive amount of data to analyze the major trends that have shaped the threat landscape in 2023. Global conflict influenced a lot of these trends, altering the tactics a...
jupyter-server errors include tracebacks with path information
Impact Unhandled errors in API requests include traceback information, which can include path information. There is no known mechanism by which to trigger these errors without authentication, so the paths revealed are not considered particularly sensitive, given that the requesting user has...
Microsoft Incident Response lessons on preventing cloud identity compromise
Microsoft observed a surge in cyberattacks targeting identities in 2023, with attempted password-based attacks increasing by more than tenfold in the first quarter of 2023 compared to the same period in 2022. Threat actors leverage compromised identities to achieve a significant level of access t...
Warning for iPhone Users: Experts Warn of Sneaky Fake Lockdown Mode Attack
A new "post-exploitation tampering technique" can be abused by malicious actors to visually deceive a target into believing that their Apple iPhone is running in Lockdown Mode when it's actually not and carry out covert attacks. The novel method, detailed by Jamf Threat Labs in a report shared wi...
CVE-2023-33082
Memory corruption while sending an Assoc Request having BTM Query or BTM Response containing MBO IE...
CVE-2023-33082
Memory corruption while sending an Assoc Request having BTM Query or BTM Response containing MBO IE...
CVE-2023-33080
Transient DOS while parsing a vender specific IE Information Element of reassociation response management frame...
Information disclosure
Transient DOS while parsing a vender specific IE Information Element of reassociation response management frame...
Memory corruption
Memory corruption while sending an Assoc Request having BTM Query or BTM Response containing MBO IE...
CVE-2023-33082 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN Host
Memory corruption while sending an Assoc Request having BTM Query or BTM Response containing MBO IE...
CVE-2023-33082
CVE-2023-33082 describes memory corruption when a WLAN Assoc Request includes a BTM Query or BTM Response that contains an MBO IE, affecting Qualcomm chipsets per multiple sources. The CVSS v3.1 base score is 9.8 (CRITICAL), with network attack vector, no user interaction, and high impact to conf...
CVE-2023-33082 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN Host
Memory corruption while sending an Assoc Request having BTM Query or BTM Response containing MBO IE...
CVE-2023-33080 Buffer over-read in WLAN Firmware
Transient DOS while parsing a vender specific IE Information Element of reassociation response management frame...
CVE-2023-33080 Buffer over-read in WLAN Firmware
Transient DOS while parsing a vender specific IE Information Element of reassociation response management frame...
CVE-2023-33080
CVE-2023-33080 is a Qualcomm WLAN firmware issue described as a transient Denial-of-Service that occurs when parsing a vendor-specific Information Element in a reassociation response management frame. The CVE is classified with a CVSSv3.1 base score of 7.5 (Network, Low crew, No user interaction;...
Qualcomm Chipsets Security Vulnerability
Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets due to a memory corruption when sending an associated request with a BTM query or BTM response that contains an MBO IE...
CVE-2023-49080
The Jupyter Server provides the backend i.e. the core services, APIs, and REST endpoints for Jupyter web applications like Jupyter notebook, JupyterLab, and Voila. Unhandled errors in API requests coming from an authenticated user include traceback information, which can include path information...
Protecting credentials against social engineering: Cyberattack Series
Our story begins with a customer whose help desk unwittingly assisted a threat actor posing as a credentialed employee. In this fourth report in our ongoing Cyberattack Series, we look at the steps taken to discover, understand, and respond to a credential phishing and smishing text-based phishin...
