1126 matches found
CVE-2023-52529 HID: sony: Fix a potential memory leak in sony_probe()
In the Linux kernel, the following vulnerability has been resolved: HID: sony: Fix a potential memory leak in sonyprobe If an error occurs after a successful usballocurb call, usbfreeurb should be called...
CVE-2023-52529 HID: sony: Fix a potential memory leak in sony_probe()
In the Linux kernel, the following vulnerability has been resolved: HID: sony: Fix a potential memory leak in sonyprobe If an error occurs after a successful usballocurb call, usbfreeurb should be called...
CVE-2023-52529
CVE-2023-52529 refers to a Linux kernel vulnerability affecting the Sony HID path, where a memory leak could occur in sony_probe() if an error happens after usb_alloc_urb(). The fix ensures usb_free_urb() is called on error paths after a successful usb_alloc_urb(), addressing the leak. Connected ...
Pwn2Own Automotive: Tesla, Sony, Alpine Players Breached on Day One
By Deeba Ahmed Bug Bounty Bonanza: Hackers Rake in Big Bucks as Connected Cars Show Security Cracks. This is a post from HackRead.com Read the original post: Pwn2Own Automotive: Tesla, Sony, Alpine Players Breached on Day One...
PT-2023-35637 · Libraw · Libraw
Name of the Vulnerable Software and Affected Versions: LibRaw affected versions not specified Description: The issue is related to a global buffer overflow read error. Technical details about the crash include the libraw tagtype dataunit bytes function, checked buffer t::tiff sget function, and...
Sony: SQL injection at ███████
A Sony website was vulnerable to an error-based SQL injection that allowed data extraction...
Ransomware review: October 2023
This article is based on research by Marcelo Rivero, Malwarebytes' ransomware specialist, who monitors information published by ransomware gangs on their Dark Web sites. In this report, "known attacks" are those where the victim did not pay a ransom. This provides the best overall picture of...
A week in security (October 2 - October 8)
Last week on Malwarebytes Labs: Multi-factor authentication has proven it works, so what are we waiting for? Amazon Prime email scammer snatches defeat from the jaws of victory 2023 MITRE ATT&CK® Evaluation results: Malwarebytes earns high marks for detection, blocks initial malware executions...
Apple's Encryption Is Under Attack by a Mysterious Group
Plus: Sony confirms a breach of its networks, US federal agents get caught illegally using phone location data, and more...
Sony was attacked by two ransomware operators
On September 25, newcomer ransomware group RansomedVC claimed to have successfully compromised the computer systems of entertainment giant Sony. Then, on October 4, news leaked that Sony had told current and former employees and their family members about another cybersecurity breach that exposed...
Sony Data Breach via MOVEit Vulnerability Affects Thousands in US
By Waqas The data breach occurred from May 28th to May 30th, 2023, and the stolen data included "names and other personal identifiers combined with Social Security Numbers SSNs." This is a post from HackRead.com Read the original post: Sony Data Breach via MOVEit Vulnerability Affects Thousands i...
SUSE-SU-2023:3825-1 Security update for binutils
This update for binutils fixes the following issues: Update to version 2.41 jscPED-5778: The MIPS port now supports the Sony Interactive Entertainment Allegrex processor, used with the PlayStation Portable, which implements the MIPS II ISA along with a single-precision FPU and a few...
Ransomware group claims it's "compromised all of Sony systems"
Newcomer ransomware group RansomedVC claims to have successfully compromised the computer systems of entertainment giant Sony. As ransomware gangs do, it made the announcement on its dark web website, where it sells data that it's stolen from victims' computer networks. The announcement says Sony...
Missing Authorization
com.sonyericsson.jenkins.plugins.bfa: build-failure-analyzer is vulnerable to Missing Authorization. The vulnerability is caused by a missing permission check in test HTTP endpoint doTestConnection as well as the doTestConnection HTTP POST endpoint. This can allow attackers with Overall/Read...
RANSOMEDVC Ransomware Group Claims Breach of Sony Corporation
By Waqas Sony Group Corporation has been listed as latest victim by RANSOMEDVC Ransomware Group on its clearnet and dark web websites. This is a post from HackRead.com Read the original post: RANSOMEDVC Ransomware Group Claims Breach of Sony Corporation...
PT-2023-9462 · Linux +5 · Linux Kernel +5
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a potential memory leak in the sony probe function of the Linux kernel. If an error occurs after a successful usb alloc urb call, usb free urb should be called ...
Own Your Own Government Surveillance Van
A used government surveillance van is for sale in Chicago: So how was this van turned into a mobile spying center? Well, lets start with how it has more LCD monitors than a Counterstrike LAN party. They can be used to monitor any of six different video inputs including a videoscope camera. A...
Cross Site Request Forgery (CSRF)
com.sonyericsson.hudson.plugins.rebuild: rebuilder is vulnerable to Cross Site Request Forgery CSRF. The vulnerability exists because it does not require POST requests for an HTTP endpoint which allows an attacker to rebuild a previous build...
Redacting Documents with a Black Sharpie Doesn’t Work
We have learned this lesson again: As part of the FTC v. Microsoft hearing, Sony supplied a document from PlayStation chief Jim Ryan that includes redacted details on the margins Sony shares with publishers, its Call of Duty revenues, and even the cost of developing some of its games. It looks li...