Huawei Data Communication: DoS Vulnerability in Some Huawei Products (huawei-sa-20171206-01-nqa)

Some Huawei products have a DoS vulnerability due to insufficient validation of the Network Quality AnalysisNQA packets. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Heat Measurement and Temperature Control Integration Analysis System of Shandong Lichuang Technology Co.

Shandong Lichuang Technology Co., Ltd. heating measurement and temperature control integrated analysis system is a data analysis system designed with energy saving, consumption reduction and cost saving as the starting point according to the current guiding direction of energy saving and emission...

Going dark: encryption and law enforcement

UPDATE, 05/22/2020: In the advent of the EARN IT Act, the debate on government subversion of encryption has reignited. Given that the material conditions of the technology have not changed, and the arguments given in favor of the bill are not novel, we've decided to republish the following blog...

Chafer APT Hits Middle East Govs With Latest Cyber-Espionage Attacks

Researchers have uncovered new cybercrime campaigns from the known Chafer advanced persistent threat APT group. The attacks have hit several air transportation and government victims in hopes of data exfiltration. The Chafer APT has been active since 2014 and has previously launched cyber espiona...

HackerOne: Near to Infinite loop when changing Group's name that has API token as Team Member

Summary: The https://hackerone.com contains an iteration or loop with an exit condition that is near to infinite loop. If the loop can be influenced by an attacker, this weakness could allow attackers to consume excessive resources such as CPU or memory and even a DoS attack. Description: Hello...

Long Tail Analysis: A New Hope in the Cybercrime Battle

Our hyper-connected world and its ever-faster network speeds have resulted in mountains of diverse data that needs to be processed. It has also resulted in an ever-expanding attack surface, requiring cybersecurity solutions to scale like never before. These days, scale is about more than traffic...

TAU Technical Report: New Attack Combines TinyPOS With Living-off-the-Land Techniques for Scraping Credit Card Data

In April of 2020 VMware Carbon Black Threat Analysis Unit TAU researchers worked with an Incident Response IR partner on a piece of malware that was discovered during an ongoing PCI investigation. The combined analysis showed that attackers who previously leveraged a malware family called TinyPOS...

Stone Technology Opinion Analysis Assistant suffers from SQL Injection Vulnerability

Stone Technology Public Opinion Analysis Assistant is a program that monitors in a cyclical manner, collects the titles of publicly released information from designated websites at the first time, screens out the information and links required by users based on keywords and filters, and prompts t...

[Guide] Finding Best Security Outsourcing Alternative for Your Organization

As cyberattacks continue to proliferate in volume and increase in sophistication, many organizations acknowledge that some part of their breach protection must be outsourced, introducing a million-dollar question of what type of service to choose form. Today, Cynet releases the Security Outsourci...

Threat Source newsletter for May 14, 2020

Newsletter compiled by Jon Munshaw. Welcome to this week’s Threat Source newsletter — the perfect place to get caught up on all things Talos from the past week. Our main focus this week is on Astaroth. This is a malware family that has been targeting Brazil with a variety of lures, including...

CVE-2020-3956: VMware Cloud Director Code Injection Vulnerability

VMware Cloud Director 10.0.x before 10.0.0.2, 9.7.0.x before 9.7.0.5, 9.5.0.x before 9.5.0.6, and 9.1.0.x before 9.1.0.4 do not properly handle input leading to a code injection vulnerability. An authenticated actor may be able to send malicious traffic to VMware Cloud Director which may lead to...

Verizon’s 2020 DBIR

Verizon's 2020 DBIR is out, you can download a copy or peruse their publication online. Kaspersky was a contributor once again, and we are happy to provide generalized incident data from our unique and objective research. We have contributed to this project and others like it for years now. This...

SQL Injection Vulnerability in Stone Technology Opinion Analysis Assistant wl***_fg***.php Page

Stone Technology Public Opinion Analysis Assistant is a monitoring tool that can collect the titles of publicly released information from specified websites and filter out the information and links required by users based on keywords and filters. A SQL injection vulnerability exists in the wlfg.p...

Unauthorized Access Vulnerability in Stone Technology's Opinion Analysis Assistant us***.php Page

Stone Technology Public Opinion Analysis Assistant is a monitoring tool that can collect the titles of publicly released information from specified websites and filter out the information and links required by users based on keywords and filters. An unauthorized access vulnerability exists in the...

SQL Injection Vulnerability in Stone Technology Opinion Analysis Assistant ru***_dl***.php Page

Stone Technology Public Opinion Analysis Assistant is a monitoring tool that can collect the titles of publicly released information from specified websites and filter out the information and links required by users based on keywords and filters. A SQL injection vulnerability exists in the Stone...

A code execution vulnerability exists in the wl***_ba***.php page of the Stone Technology Opinion Analytics mini-assistant

Stone Technology Public Opinion Analysis Assistant is a monitoring tool that can collect the titles of publicly released information from specified websites and filter out the information and links required by users based on keywords and filters. A code execution vulnerability exists in the...

SQL Injection Vulnerability in Stone Technology Opinion Analysis Assistant wl***_fx***.php Page

Stone Technology Public Opinion Analysis Assistant is a monitoring tool that can collect the titles of publicly released information from specified websites and filter out the information and links required by users based on keywords and filters. A SQL injection vulnerability exists in the wlfx.p...

SQL Injection Vulnerability in Stone Technology Opinion Analysis Assistant us***.php Page

Stone Technology Public Opinion Analysis Assistant is a monitoring tool that can collect the titles of publicly released information from specified websites and filter out the information and links required by users based on keywords and filters. A SQL injection vulnerability exists in the us.php...

SQL Injection Vulnerability in Stone Technology Opinion Analysis Assistant te***.php Page

Stone Technology Public Opinion Analysis Assistant is a monitoring tool that can collect the titles of publicly released information from specified websites and filter out the information and links required by users based on keywords and filters. A SQL injection vulnerability exists in the Stone...

SQL Injection Vulnerability in Stone Technology Opinion Analysis Assistant wl***_gj***.php Page

Stone Technology Public Opinion Analysis Assistant is a monitoring tool that can collect the titles of publicly released information from specified websites and filter out the information and links required by users based on keywords and filters. A SQL injection vulnerability exists in the wlgj.p...