Weak password vulnerability in China Telecom's Skywatch Store Camera

Skywing Watch Shop is a security business integrating camera, video recording, real-time monitoring, PTZ control, alarm and storage launched by CLP Hongxin Information Technology Co., Ltd. for companies, stores and other places that need to carry out visualization management, and through the clie...

Spearphishing Attack Spoofs Microsoft.com to Target 200M Office 365 Users

A spearphishing attack is spoofing Microsoft.com to target 200 million Microsoft Office 365 users in a number of key vertical markets, including financial services, healthcare, manufacturing and utility providers. Researchers at Ironscales discovered the campaign targeting several thousand...

Directory Traversal Vulnerability in Telecom Gateway Configuration Management System of China Telecom Group Corporation Ltd.

Founded in September 2000, China Telecom Group Corporation China Telecom is a large state-owned telecommunications company and a global partner of the Shanghai World Expo. A directory traversal vulnerability exists in the Telecom Gateway Configuration Management System of China Telecom Group...

SQL Injection Vulnerability in Telecom Gateway Configuration Management System of China Telecom Group Corporation Ltd.

Founded in September 2000, China Telecom Group Corporation China Telecom is a large state-owned telecommunications company and a global partner of the Shanghai World Expo. A SQL injection vulnerability exists in the Telecom Gateway Configuration Management System of China Telecom Group Corporatio...

CVE-2020-0448

In getPhoneAccountsForPackage of TelecomServiceImpl.java, there is a possible way to access a tracking identifier due to a missing permission check. This could lead to local information disclosure of the identifier, which could be used to track an account across devices, with no additional...

CVE-2020-0295

In Telecom, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-155650969...

Information disclosure

In Telecom, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-155650969...

CVE-2020-0295

In Telecom, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-155650969...

CVE-2020-0295

CVE-2020-0295 affects Android 11’s Telecom stack, where an unsafe PendingIntent allows a permission bypass leading to local information disclosure with user-execution privileges required. Exploitation is listed as local and does not require user interaction, with the impact stated as partial conf...

U.S. Treasury Sanctions Hacking Group Backed by Iranian Intelligence

The U.S. government on Thursday imposed sweeping sanctions against an Iranian threat actor backed by the country's Ministry of Intelligence and Security MOIS for carrying out malware campaigns targeting Iranian dissidents, journalists, and international companies in the telecom and travel sectors...

APT41 Operatives Indicted as Sophisticated Hacking Activity Continues

UPDATE Five alleged members of the APT41 threat group have been indicted by a federal grand jury, in two separate actions that were unsealed this week. Meanwhile, the Department of Treasury also imposed sanctions on individuals and organizations associated with Iran-linked APT39. APT41 a.k.a...

CDRThief Malware Targets VoIP Gear in Carrier Networks

A malware dubbed CDRThief is targeting voice over IP VoIP softswitches inside the networks of large telecom carriers. According to ESET researchers, the malware was custom-developed to attack the Linknat VOS2009 and VOS3000 softswitches, which run on standard Linux servers. The code is capable of...

Geo-Recon - An OSINT CLI Tool Desgined To Fast Track IP Reputation And Geo-locaton Look Up For Security Analysts

An OSINT CLI tool desgined to fast track IP Reputation and Geo-locaton look up for Security Analysts. Setup This tool is compactible with: Any Linux Operating System Debian, Ubuntu, CentOS Termux Linux Setup git clone https://github.com/radioactivetobi/geo-recon.git cd geo-recon chmod +x...

A New Botnet Is Covertly Targeting Millions of Servers

FritzFrog has been used to try and infiltrate government agencies, banks, telecom companies, and universities across the US and Europe...

New Attack Lets Hackers Decrypt VoLTE Encryption to Spy on Phone Calls

A team of academic researchers—who previously made the headlines earlier this year for uncovering severe security issues in the 4G LTE and 5G networks—today presented a new attack called 'ReVoLTE ,' that could let remote attackers break the encryption used by VoLTE voice calls and spy on targeted...

lookup-ip.equatorialtelecom.com Cross Site Scripting vulnerability OBB-1255792

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

equatorialtelecom.com Cross Site Scripting vulnerability OBB-1255648

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

host227.200-71-225.telecom.net.ar Cross Site Scripting vulnerability OBB-1242401

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

OilRig APT Drills into Malware Innovation with Unique Backdoor

A series of cyberattacks on a telecom company in the Middle East has signaled the return of the OilRig APT. The attacks also revealed a revised backdoor tool in the group’s arsenal, called RDAT. The attacks were observed in April by Palo Alto Networks’ Unit 42. Researchers there said that the...

Argentina’s largest telecom hacked with hackers demanding $7.5 million

By Sudais Asif The ransomware attack was carried out by hackers on Wednesday. This is a post from HackRead.com Read the original post: Argentina's largest telecom hacked with hackers demanding $7.5 million...