How New Passive Network Sensor Boosts Platform Capabilities

Black Hat attendees got a peek at Qualys Passive Network Sensor PNS, a product that amplifies the already comprehensive IT asset visibility Qualys provides to its customers. By adding real-time network analysis to Qualys’ versatile set of sensors, PNS eliminates blind spots across IT environments...

maltrail

Maltrail is a malicious traffic detection system that utilizes publicly available blacklists containing malicious and/or generally suspicious trails. It can detect various types of malicious activity, including domain name, URL, IP address, and HTTP User-Agent header value. Maltrail also uses...

D-Link Wi-Fi Water Sensor Detection via mDNS

Binary data 700283.prm...

D-Link Wi-Fi Water Sensor Detection via HTTP

Binary data 700284.prm...

D-Link Smart Door Sensor via mDNS

Binary data 700278.prm...

CVE-2018-9276

An issue was discovered in PRTG Network Monitor before 18.2.39. An attacker who has access to the PRTG System Administrator web console with administrative privileges can exploit an OS command injection vulnerability both on the server and on devices by sending malformed parameters in sensor or...

Security Bulletin: A security vulnerability has been identified in WebSphere Application Server shipped with WebSphere Sensor Events and IBM Real-Time Asset Locator (CVE-2016-9736)

Summary IBM WebSphere Application Server is shipped with WebSphere Sensor Events and IBM Real-Time Asset Locator. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Consult the security bulletin,...

Security Bulletin: A security vulnerability has been identified in WebSphere Application Server shipped with WebSphere Sensor Events and IBM Real-Time Asset Locator (CVE-2016-8934)

Summary IBM WebSphere Application Server is shipped with WebSphere Sensor Events and IBM Real-Time Asset Locator. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Consult the security bulletin,...

Security Bulletin: A security vulnerability has been identified in WebSphere Application Server shipped with WebSphere Sensor Events and IBM Real-Time Asset Locator (CVE-2016-8919)

Summary IBM WebSphere Application Server is shipped with WebSphere Sensor Events and IBM Real-Time Asset Locator. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Consult the security bulletin,...

Attackers Can Use Sonic and Ultrasonic Signals to Crash Hard Drives

Researchers have demonstrated how sonic and ultrasonic signals inaudible to human can be used to cause physical damage to hard drives just by playing ultrasonic sounds through a target computer's own built-in speaker or by exploiting a speaker near the targeted device. Similar research was...

Trojan watch

We continue to research how proliferation of IoT devices affects the daily lives of users and their information security. In our previous study, we touched upon ways of intercepting authentication data using single-board microcomputers. This time, we turned out attention to wearable devices:...

The vulnerability of the cbstream.sys component of the Carbon Black monitoring system allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the cbstream.sys component of the Carbon Black monitoring system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information by interacting wi...

Code injection

SimpliSafe Original has Unencrypted Sensor Transmissions, which allows physically proximate attackers to obtain potentially sensitive information about the specific times when alarm-system events occur...

CVE-2018-11399

SimpliSafe Original has Unencrypted Sensor Transmissions, which allows physically proximate attackers to obtain potentially sensitive information about the specific times when alarm-system events occur...

CVE-2018-11399

SimpliSafe Original has Unencrypted Sensor Transmissions, which allows physically proximate attackers to obtain potentially sensitive information about the specific times when alarm-system events occur...

CVE-2018-11399

CVE-2018-11399 affects SimpliSafe Original: sensors transmit data unencrypted, enabling physically proximate attackers to infer when alarm events occur. Root cause: lack of encryption in sensor transmissions. Impact: potential disclosure of timing of events; confidentiality partially affected. Ex...

Design/Logic Flaw

OleumTech Wireless Sensor Network devices allow remote attackers to obtain sensitive information about sensor nodes or spoof devices by reading cleartext protocol data...

CVE-2014-2359

OleumTech Wireless Sensor Network devices allow remote attackers to obtain sensitive information about sensor nodes or spoof devices by reading cleartext protocol data...

CVE-2014-2359

OleumTech Wireless Sensor Network devices allow remote attackers to obtain sensitive information about sensor nodes or spoof devices by reading cleartext protocol data...

CVE-2014-2359

CVE-2014-2359 affects OleumTech Wireless Sensor Network devices, where a vulnerability allows remote attackers to read cleartext protocol data, enabling disclosure of sensitive sensor-node information and potential device spoofing. Root cause: lack of encryption in communications. Impact is infor...