Critical Juniper Bug Allows DoS, RCE Against Carrier Networks

A critical remote code-execution vulnerability in Juniper Networks’ Steel-Belted Radius SBR Carrier Edition lays open wireless carrier and fixed operator networks to tampering. The SBR Carrier server is used by telecom carriers to manage policies for how subscribers access their networks – by...

Stored XSS Vulnerability in 189 Mailbox of China Telecom Group Corporation Ltd.

189 Mailbox is a new type of work and business mailbox for all Internet users. A stored XSS vulnerability exists in China Telecom Group Corporation's 189 mailbox, which can be exploited by attackers to obtain sensitive information such as user cookies...

Directory Traversal Vulnerability in China Unicom China169

CHINA169 is based on the former China Telecom China Broadband Internet CHINANET's interconnection network in the ten northern provinces, and after large-scale reconstruction and expansion, it has formed a brand-new network with a new structure, which can vigorously dredge up broadband services,...

Spanish telecom giant MasMovil hit by Revil ransomware gang

By Waqas Revil ransomware gang is claiming to have downloaded databases and other important data belonging to the MasMovil group. This is a post from HackRead.com Read the original post: Spanish telecom giant MasMovil hit by Revil ransomware gang...

Weak Password Vulnerability in DATANG Intelligent Routing Management System

Ltd. is a provider of information products and services with the main business of providing total solutions. A weak password vulnerability exists in the intelligent route management system of Datang Telecom DATANG, which can be exploited by an attacker to log in to the backend of the system and...

Weak password vulnerability in Datang Telecom's AC centralized management platform (CNVD-2021-46909)

Ltd. is a high-tech enterprise held by the Institute of Telecommunications Science and Technology Datang Telecom Technology & Industry Group. Datang Telecom has formed four major industrial segments, namely, integrated circuit design, software and application, terminal design and mobile Internet....

SQL Injection Vulnerability in NVS3000 Integrated Video Surveillance Platform of Datang Telecom Technology Co. Ltd (CNVD-2021-45156)

Datang Telecom Technology Co., Ltd. is a provider of products and integrated solutions in the field of information and communications. A SQL injection vulnerability exists in Datang Telecom Technology Co., Ltd.'s NVS3000 Integrated Video Surveillance Platform, which can be exploited by attackers ...

New Cyber Espionage Group Targeting Ministries of Foreign Affairs

Cybersecurity researchers on Thursday took the wraps off a new cyber espionage group that has been behind a series of targeted attacks against diplomatic entities and telecommunication companies in Africa and the Middle East since at least 2017. Dubbed "BackdoorDiplomacy," the campaign involves...

New sophisticated email-based attack from NOBELIUM

Microsoft Threat Intelligence Center MSTIC has uncovered a wide-scale malicious email campaign operated by NOBELIUM, the threat actor behind the attacks against SolarWinds, the SUNBURST backdoor, TEARDROP malware, GoldMax malware, and other related components. The campaign, initially observed and...

U.S. Intelligence Agencies Warn About 5G Network Weaknesses

Inadequate implementation of telecom standards, supply chain threats, and weaknesses in systems architecture could pose major cybersecurity risks to 5G networks, potentially making them a lucrative target for cybercriminals and nation-state adversaries to exploit for valuable intelligence. The...

Weak password vulnerability in China Telecom's Tianyi Broadband Government and Enterprise Gateway A8C 8+8 AP

Tianyi Broadband Gov-Enterprise Gateway is a terminal product customized by China Telecom specifically for branded customers to provide enterprise network solutions. A weak password vulnerability exists in the A8C 8+8 AP of Tianyi Broadband Government and Enterprise Gateway. An attacker can explo...

Weak password vulnerability in China Telecom's Tianyi Broadband Government and Enterprise Gateway A8-B

Tianyi Broadband Gov-Enterprise Gateway is a terminal product customized by China Telecom specifically for branded customers to provide enterprise network solutions. A weak password vulnerability exists in Tianyi Broadband Government and Enterprise Gateway A8-B. An attacker can exploit this...

LuckyMouse Hackers Target Banks, Companies and Governments in 2020

An adversary known for its watering hole attacks against government entities has been linked to a slew of newly detected intrusions targeting various organizations in Central Asia and the Middle East. The malicious activity, collectively named "EmissarySoldier," has been attributed to a threat...

SQL Injection Vulnerability in Telecom Gateway Configuration Management System it***_im***_po***.php Page

China Telecom Group Corporation is China's mega state-owned telecommunications enterprise and a global partner of the Shanghai World Expo. A SQL injection vulnerability exists in the itimpo.php page of the Telecom Gateway Configuration Management System, which can be exploited by attackers to...

SQL Injection Vulnerability in Telecom Gateway Configuration Management System it***_te***_po***.php Page

China Telecom Group Corporation is China's mega state-owned telecommunications enterprise and a global partner of the Shanghai World Expo. A SQL injection vulnerability exists in the ittepo.php page of the Telecom Gateway Configuration Management System, which can be exploited by attackers to...

Flubot Spyware Spreading Through Android Devices

Android mobile phone users across the U.K. and Europe are being targeted by text messages containing a particularly nasty piece of spyware called “Flubot,” according to the U.K.’s National Cyber Security Centre. And the U.S. could be the next target. Victims are asked to download a fake app from ...

Command Execution Vulnerability in Telecom Gateway Configuration Management System Backend

Founded in September 2000, China Telecom Group Corporation China Telecom is a large state-owned telecommunications company and a global partner of the Shanghai World Expo. A command execution vulnerability exists in the backend of the Telecom Gateway Configuration Management System. An attacker c...

SQL Injection Vulnerability in Telecom Gateway Configuration Management System Backend

Founded in September 2000, China Telecom Group Corporation China Telecom is a large state-owned telecommunications company and a global partner of the Shanghai World Expo. A SQL injection vulnerability exists in the backend of the Telecom Gateway Configuration Management System. An attacker can...

Weak Password Vulnerability in Telecom Gateway Configuration Management Backend at China Telecom Group Corporation Ltd.

Founded in September 2000, China Telecom Group Corporation is a mega state-owned communications enterprise in China and a global partner of the Shanghai World Expo. A weak password vulnerability exists in the configuration management backend of China Telecom Group Corporation's telecom gateway,...

Weak Password Vulnerability in Telecom Gateway Configuration Management System

Shenzhen Huashimida Information Technology Co., Ltd. is a collection of research and development, production, sales, installation and service in one of the professional interactive video high-tech enterprises. A weak password vulnerability exists in the telecom gateway configuration management...