PT-2019-20337

Уязвимость функции DxgkDdiSubmitCommandVirtual драйвера графических процессоров NVIDIA GeForce, Quadro и Tesla для операционных систем Windows связана с ошибками разыменования указателей. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании или повысить свои привилегии...

PT-2019-20336

Уязвимость функции DxgkDdiEscape драйвера графических процессоров NVIDIA GeForce, Quadro и Tesla для операционных систем Windows связана с выходом операции за границы буфера в памяти. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании или повысить свои привилегии...

PT-2019-20338

Уязвимость функции DxgkDdiEscape драйвера графических процессоров NVIDIA GeForce, Quadro, NVS и Tesla для операционных систем Windows связана с неосвобождением ресурса после истечения действительного срока его эксплуатирования. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в...

PT-2019-20342

Уязвимость функции DxgkDdiEscape драйвера графических процессоров NVIDIA GeForce, Quadro, NVS и Tesla для операционных систем Windows связана с выходом операции за границы буфера в памяти. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании, повысить свои привилегии,...

PT-2019-5725

Name of the Vulnerable Software and Affected Versions: NVIDIA GeForce, Quadro, and Tesla graphics drivers for Windows affected versions not specified Description: The issue is related to errors in pointer dereferencing in the DxgkDdiSubmitCommandVirtual function of NVIDIA graphics drivers...

PT-2019-3153

Name of the Vulnerable Software and Affected Versions: NVIDIA GeForce, Quadro, and Tesla affected versions not specified Description: The issue is related to a lack of protection for internal data in NVIDIA graphics processing units. Exploitation of this issue could allow an attacker to disclose...

PT-2019-3155

Name of the Vulnerable Software and Affected Versions: NVIDIA GeForce, Quadro, and Tesla affected versions not specified Description: The issue is related to errors in link processing within the 3D vision component of NVIDIA's graphics processing software. Exploitation of this issue could allow a...

Bug bounty: Hack Tesla Model 3 to win your own Model 3

By Waqas Tesla is partnering with Pwn2Own's bug bounty to identify vulnerabilities in its Model 3 car software. Electric car maker Tesla announced recently that the company is partnering with Pwn2Own hacking contest organizers in order to help the company identify security issues in its...

A week in security (November 19 – 25)

Last week on Malwarebytes Labs, we took a look at a devastating business email compromise attack, web skimming antics, and the fresh perils of Deepfakes. We also checked out some Chrome bug issues, and took the deepest of deep dives into DNA testing. Other cybersecurity news Adobe Flash bug—get...

Who Is Agent Tesla?

A powerful, easy-to-use password stealing program known as Agent Tesla has been infecting computers since 2014, but recently this malware strain has seen a surge in popularity -- attracting more than 6,300 customers who pay subscription fees to license the software. Although Agent Tesla includes ...

Old dog, new tricks - Analysing new RTF-based campaign distributing Agent Tesla, Loki with PyREbox

This blog post was authored by Edmund Brumaghin and Holger Unterbrink with contributions from Emmanuel Tacheau. Executive Summary Cisco Talos has discovered a new malware campaign that drops the sophisticated information-stealing trojan called "Agent Tesla," and other malware such as the Loki...

Tesla Model S Hack Could Let Thieves Clone Key Fobs to Steal Cars

Despite having proper security measures in place to protect the driving systems of its cars against cyber attacks, a team of security researchers discovered a way to remotely hack a Tesla Model S luxury sedans in less than two seconds. Yes, you heard that right. A team of researchers from the...

Tesla Model S Hack Could Let Thieves Clone Key Fobs to Steal Cars

Despite having proper security measures in place to protect the driving systems of its cars against cyber attacks, a team of security researchers discovered a way to remotely hack a Tesla Model S luxury sedans in less than two seconds. Yes, you heard that right. A team of researchers from the...

Researchers demonstrate how to unlock Tesla wireless key fobs in 2 seconds

By Waqas Vulnerabilities and security flaws in vehicle security systems aren’t as surprising for us as it is that even the most renowned car manufacturers aren’t able to provide consumers with fool-proof systems. Wired reports that Tesla recently fixed a vulnerability in the security systems of i...

Design/Logic Flaw

A Pektron Passive Keyless Entry and Start PKES system, as used on the Tesla Model S and possibly other vehicles, relies on the DST40 cipher, which makes it easier for attackers to obtain access via an approach involving a 5.4 TB precomputation, followed by wake-frame reception and two...

CVE-2018-16806

A Pektron Passive Keyless Entry and Start PKES system, as used on the Tesla Model S and possibly other vehicles, relies on the DST40 cipher, which makes it easier for attackers to obtain access via an approach involving a 5.4 TB precomputation, followed by wake-frame reception and two...

CVE-2018-16806

The CVE-2018-16806 entry concerns a Pektron Passive Keyless Entry and Start (PKES) system used in the Tesla Model S (and possibly other vehicles) that relies on the DST40 cipher. The vulnerability is described as enabling an attacker to clone a key fob within a few seconds after a 5.4 TB precompu...

Hackers Can Steal a Tesla Model S in Seconds by Cloning Its Key Fob

Weak encryption in the cars' key fobs allows all-too-easy theft, but you can set a PIN code on your Tesla to protect it...

A week in security (September 3 – 9)

Last week on Malwarebytes Labs, we looked at spyware going mainstream, how the popular game Fortnite sparks security concerns for Android users, and how certain Mac App Store apps are stealing user data. Other cybersecurity news: Microsoft announced Windows 7 Extended Security Updates in a blog...

CVE-2018-16806: Use of a Broken or Risky Cryptographic Algorithm

A Pektron Passive Keyless Entry and Start PKES system, as used on the Tesla Model S and possibly other vehicles, relies on the DST40 cipher, which makes it easier for attackers to obtain access via an approach involving a 5.4 TB precomputation, followed by wake-frame reception and two...