August 1, 2018 – Morning Cyber Coffee Headlines – “Care Bears” Edition

Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! August 1, 2018 - Headlines Carbon Black in the News: Robbing Banks Isn’t The Sa...

Be-be-bears - Creative world - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Be-be-bears - Creative world published at the 'play' market has multiple vulnerabilities...

scout.com XSS vulnerability

Vulnerable URL: http://www.scout.com/nfl/bears/a.z?s=25=9=12=2016=83=83"--!"=16=3 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 6321 VIP website status:| Yes Check scout.com SSL...

scout.com XSS vulnerability

Vulnerable URL: http://www.scout.com/nfl/bears/news?query=NoGe=prompt'OPENBUGBOUNTY'...

Care Bears: Wish Upon a Cloud - Base64 encoded String, Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Care Bears: Wish Upon a Cloud published at the 'play' market has multiple vulnerabilities...

Care Bears Rainbow Playtime - WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Care Bears Rainbow Playtime published at the 'play' market has multiple vulnerabilities...

Care Bears Love to Learn - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Care Bears Love to Learn published at the 'play' market has multiple vulnerabilities...

Care Bears Appisode - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Care Bears Appisode published at the 'play' market has multiple vulnerabilities...

Care Bears™ Belly Match - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Care Bears™ Belly Match published at the 'play' market has multiple vulnerabilities...

POS Malware Tool "Treasurehunt' Targets Small US-Based Banks, Retailers

As more US companies snuff out point of sale malware by deploying chip-and-PIN bankcard technology, attackers are rushing to exploit existing magnetic strip card systems still vulnerable to malware. A group of hackers that go by the name Bears Inc. are behind the latest barrage of attacks with a...

A Backdoor in Socat? Going Dark, IoT, and Previewing SAS 2016

Mike Mimoso and Chris Brook discuss the news of the week, including internet-connected teddy bears, the latest on the Going Dark debate, and whether or not there’s a backdoor in Socat. They also preview next week’s Security Analyst Summit in Tenerife, Spain. Download:...