1270 matches found
A New Ransomware Targeting Apple macOS Users Through Pirated Apps
Cybersecurity researchers this week discovered a new type of ransomware targeting macOS users that spreads via pirated apps. According to several independent reports from K7 Lab malware researcher Dinesh Devadoss, Patrick Wardle, and Malwarebytes, the ransomware variant — dubbed "EvilQuest" — is...
DLA-2262-1 qemu - security update
Bulletin has no description...
php:php-fuzz-unserialize: Heap-use-after-free in gc_mark_grey
Detailed Report: https://oss-fuzz.com/testcase?key=4872319490326528 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-unserialize Job Type: libfuzzerasanphp Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x604000022810 Crash State: gcmarkgrey gcmarkroots...
DSA-4703-1 mysql-connector-java - security update
Bulletin has no description...
DSA-4701-1 intel-microcode - security update
Bulletin has no description...
Encryption Utility Firm Accused of Bundling Malware Functions in Product
An Italian company that sells what it describes as a legitimate encryption utility is being used as malware packer for the cloud-delivered malicious GuLoader dropper, claim researchers. The tool, according a recent investigation, creates GuLoader samples and helps the malware avoid antivirus...
skia:image_filter_deserialize_width: Crash in SkReader32::readInt
Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=5752574451122176 Project: skia Fuzzing Engine: libFuzzer Fuzz Target: imagefilterdeserializewidth Job Type: libfuzzerasanskia Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x60608103762...
DLA-2222-1 libexif - security update
Bulletin has no description...
DLA-2218-1 transmission - security update
Bulletin has no description...
DLA-2211-1 log4net - security update
Bulletin has no description...
DSA-4681-1 webkit2gtk - security update
Bulletin has no description...
graphicsmagick:coder_WPG_fuzzer: Heap-use-after-free in ImportGrayQuantumType
Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=6294798204141568 Project: graphicsmagick Fuzzing Engine: afl Fuzz Target: coderWPGfuzzer Job Type: aflasangraphicsmagick Platform Id: linux Crash Type: Heap-use-after-free WRITE 2 Crash Address...
DLA-2202-1 ansible - security update
Bulletin has no description...
DSA-4662-1 openjdk-11 - security update
Bulletin has no description...
Researcher Discloses 4 Zero-Day Bugs in IBM's Enterprise Security Software
A cybersecurity researcher today publicly disclosed technical details and PoC for 4 unpatched zero-day vulnerabilities affecting an enterprise security software offered by IBM after the company refused to acknowledge the responsibly submitted disclosure. The affected premium product in question i...
DLA-2169-1 libmtp - security update
Bulletin has no description...
How Federal Employees Can Protect their Agencies During the Pandemic
It’s no secret that the way the world works has shifted since COVID-19 came on the scene. Operations are going remote and, for many government and federal agencies, this is new territory. This novelty is compounded by the fact that nation-state attacks are—and have been—on the rise for quite some...
quickjs:fuzz_eval: Heap-buffer-overflow in js_free_function_def
Detailed Report: https://oss-fuzz.com/testcase?key=5181144279810048 Project: quickjs Fuzzing Engine: honggfuzz Fuzz Target: fuzzeval Job Type: honggfuzzasanquickjs Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x7f40b5b3d1e3 Crash State: jsfreefunctiondef...