Researchers Warn of Kavach 2FA Phishing Attacks Targeting Indian Govt. Officials

A new targeted phishing campaign has zoomed in on a two-factor authentication solution called Kavach that's used by Indian government officials. Cybersecurity firm Securonix dubbed the activity STEPPYKAVACH, attributing it to a threat actor known as SideCopy based on tactical overlaps with prior...

Microsoft Visio Office 365 Apps for Enterprise Use-After-Free

The vulnerability of Microsoft Visio graphic editors, Microsoft Office programs, and 365 Apps for Enterprise is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created DWG file...

Microsoft Office Code Execution

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

GodFather Android Banking Trojan Targeting Users of Over 400 Banking and Crypto Apps

An Android banking trojan known as GodFather is being used to target users of more than 400 banking and cryptocurrency apps spanning across 16 countries. This includes 215 banks, 94 crypto wallet providers, and 110 crypto exchange platforms serving users in the U.S., Turkey, Spain, Italy, Canada,...

CVE-2022-43543

KDDI +Message App, NTT DOCOMO +Message App, and SoftBank +Message App contain a vulnerability caused by improper handling of Unicode control characters. +Message App displays text unprocessed, even when control characters are contained, and the text is shown based on Unicode control character's...

CVE-2022-39304

ghinstallation provides transport, which implements http.RoundTripper to provide authentication as an installation for GitHub Apps. In ghinstallation version 1, when the request to refresh an installation token failed, the HTTP request and response would be returned for debugging. The request...

Hardcoded credentials

ghinstallation provides transport, which implements http.RoundTripper to provide authentication as an installation for GitHub Apps. In ghinstallation version 1, when the request to refresh an installation token failed, the HTTP request and response would be returned for debugging. The request...

CVE-2022-39304 ghinstallation returns app JWT in error responses

ghinstallation provides transport, which implements http.RoundTripper to provide authentication as an installation for GitHub Apps. In ghinstallation version 1, when the request to refresh an installation token failed, the HTTP request and response would be returned for debugging. The request...

CVE-2022-39304

CVE-2022-39304 concerns ghinstallation, which provides a transport for GitHub Apps authentication. In ghinstallation version 1, if refreshing an installation token failed, the HTTP request and response were returned for debugging, revealing the App’s bearer JWT (short-lived, up to 10 minutes) to ...

CVE-2022-39304 ghinstallation returns app JWT in error responses

ghinstallation provides transport, which implements http.RoundTripper to provide authentication as an installation for GitHub Apps. In ghinstallation version 1, when the request to refresh an installation token failed, the HTTP request and response would be returned for debugging. The request...

CVE-2022-39304: Generation of Error Message Containing Sensitive Information

ghinstallation provides transport, which implements http.RoundTripper to provide authentication as an installation for GitHub Apps. In ghinstallation version 1, when the request to refresh an installation token failed, the HTTP request and response would be returned for debugging. The request...

GHSA-H4Q8-96P6-JCGR ghinstallation returns app JWT in error responses

Impact In ghinstallation v1, when the request to refresh an installation token failed, the HTTP request and response would be returned for debugging. https://github.com/bradleyfalzon/ghinstallation/blob/24e56b3fb7669f209134a01eff731d7e2ef72a5c/transport.goL172-L174 The request contained the beare...

CVE-2022-47549

An unprotected memory-access operation in opteeos in TrustedFirmware Open Portable Trusted Execution Environment OP-TEE before 3.20 allows a physically proximate adversary to bypass signature verification and install malicious trusted applications via electromagnetic fault injections...

CVE-2022-20531

In Telecom, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

Trend Micro Joins Google’s App Defense Alliance

Trend Micro will be joining Google's App Defense Alliance ADA to help improve their ability to identify malicious apps before they are published to the Google Play store...

Microsoft Security Update Validation Report December 2022

Microsoft’s December 2022 security updates have passed Citrix testing the updates are listed below. The testing is not all-inclusive; all tests are executed against English only environments and issues may still be found upon implementation. Follow best practices for testing and installing softwa...

Microsoft Office Graphics Code Execution

The vulnerability of the Microsoft Office Graphics component in the Microsoft 365 Apps for Enterprise suite is related to insufficient input validation. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created file...

Microsoft Office Graphics Code Execution

The vulnerability of the Microsoft Office Graphics component in the Microsoft 365 Apps for Enterprise suite is related to the use of memory after it is released. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created SKP file...

Microsoft Office Graphics Code Execution

The vulnerability of the Microsoft Office Graphics component in the Microsoft 365 Apps for Enterprise suite is related to insufficient input validation. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created file...

Microsoft Office Graphics Code Execution

The vulnerability of the Microsoft Office Graphics component in the Microsoft 365 Apps for Enterprise suite is related to insufficient input validation. Exploiting this vulnerability could allow an attacker to execute arbitrary code by sending specially crafted data...