2022 Election Phishing Attacks Target Election Workers

2022 Election Phishing Attacks Target Election Workers By Patrick Flynn, Fred House, Rohan Shah · October 12, 2022 Highly publicized campaign and political party breaches during the 2016 U.S. presidential campaign raised election security as a critical issue among U.S. policy makers in the years...

2022 Election Phishing Attacks Target Election Workers

2022 Election Phishing Attacks Target Election Workers By Rohan Shah · October 12, 2022 This blog was written by Patrick Flynn and Fred House Highly publicized campaign and political party breaches during the 2016 U.S. presidential campaign raised election security as a critical issue among U.S...

Spyware disguises itself as Zoom downloads

Zoom video call software continues to be a staple in work environments. Despite a slow, post-lockdown easing back to the "old normal," many businesses still have remote workers, or people working in different geographies. It's no surprise then to see criminals continuing to abuse Zoom's popularit...

CVE-2022-36778

insert HTML / js code inside input how to get to the vulnerable input : Workers worker nickname inject in this input the code...

CVE-2022-36778

CVE-2022-36778 corresponds to a stored cross-site scripting vulnerability in Synel Eharmony (Synel Eharmony) where an attacker can inject HTML/JS into a specific input field. According to the connected PT-2022-23618 entry, the vulnerability is exploitable via the input accessed by navigating to W...

Malicious Package

Overview workers-chat-demo is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package...

CVE-2022-36083

JOSE is "JSON Web Almost Everything" - JWA, JWS, JWE, JWT, JWK, JWKS with no dependencies using runtime's native crypto in Node.js, Browser, Cloudflare Workers, Electron, and Deno. The PBKDF2-based JWE key management algorithms expect a JOSE Header Parameter named p2c PBES2 Count, which determine...

CVE-2022-34768 Synel - eHarmony Stored XSS

insert HTML / js code inside input how to get to the vulnerable input : Workers worker nickname inject in this input the code...

Malicious code in yodaspeak-cloudflare-workers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 50f681261decb63857d04b9b6201be2b3bc996a9a9778fa0b9878db7f295a596 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7357 Malicious code in yodaspeak-cloudflare-workers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 50f681261decb63857d04b9b6201be2b3bc996a9a9778fa0b9878db7f295a596 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The 2022 US Midterm Elections' Top Security Issue: Death Threats

While cybersecurity and foreign meddling remain priorities, domestic threats against election workers have risen to the top of the list...

PT-2022-6595 · Php +5 · Php +5

Name of the Vulnerable Software and Affected Versions: PHP affected versions not specified Description: A heap buffer overflow issue was discovered in PHP. This occurs when the PHP CLI SERVER WORKERS environment variable is set to a large value. The vulnerability is related to the php cli server...

workers-b.com Cross Site Scripting vulnerability OBB-2757223

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

“Free UK visa” offers on WhatsApp are fakes

A student friend recently shared a WhatsApp message, unsure if it was scam. The message claims to offer an easy to route to free visas, housing, accommodation, and medicine access. Heres how we know it was a scam, and where it lead. It read as follows: UK GOVERNMENT JOB RECRUITMENT 2022: This is...

CVE-2022-1746 2.2.8 INCORRECT PRIVILEGE ASSIGNMENT CWE-266

The authentication mechanism used by poll workers to administer voting using the tested version of Dominion Voting Systems ImageCast X can expose cryptographic secrets used to protect election information. An attacker could leverage this vulnerability to gain access to sensitive information and...

Malicious code in cloud-workers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5e98fbc125957c5011c07015d1efb7b035f75e186c6606651acf314916dc8ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1933 Malicious code in cloud-workers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5e98fbc125957c5011c07015d1efb7b035f75e186c6606651acf314916dc8ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in web-workers-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1fc73f2f65b2059ef309faa11b6584e8f751fcf4b197194d4fe1297ccf1875ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7079 Malicious code in web-workers-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1fc73f2f65b2059ef309faa11b6584e8f751fcf4b197194d4fe1297ccf1875ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in web-workers-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe40b6f18c92d30d2bc1d2dcf526a32b6db3894488c7ba9b412274573bdf4946 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...