A week in security (May 14 – May 20)

Last week, we looked at the deluge of incoming policies caused by GDPR, tackled Adobe Reader zero days, and ran through some iPhone security tips. We also caught some helpline scammers in the act, explored advergaming, got our Senate Bill game face on, and deep dived into Drupal vulnerabilities...

RedDawn Espionage Campaign Shows Mobile APTs on the Rise

A sophisticated and targeted mobile espionage campaign has been found targeting North Korean defectors. Mounted by a relatively new APT actor known as Sun Team, the offensive used Google Play and Facebook as attack vectors; and overall, it shows how quickly the mobile threat landscape is evolving...

See how I found to Have a cloud storage platform session mechanisms of vulnerability-vulnerability warning-the black bar safety net

! Recently in contrast to cloud storage solutions, I was surprised to find that many companies are still offering unlimited cloud data storage service solution, like Have the company that such note and don't Have a format specification confusion, and Have the company designed for individuals,...

Metamorfo Targets Brazilian Users with Banking Trojans

A recent spate of financial malware campaigns targeting Brazilian companies, collectively dubbed Metamorfo, uses “spray and pray” spam tactics to ensnare their victims. Across the various offensives, the bad actors are abusing legitimate, signed binaries to load the malicious code. As the name...

Metamorfo Campaigns Targeting Brazilian Users

FireEye Labs recently identified several widespread malspam malware spam campaigns targeting Brazilian companies with the goal of delivering banking Trojans. We are referring to these campaigns as Metamorfo. Across the stages of these campaigns, we have observed the use of several tactics and...

Western Digital My Cloud NAS Device Information Disclosure Vulnerability

The Western Digital MyCloud NAS is a network attached storage device. An information disclosure vulnerability exists in the Western Digital My Cloud NAS device, which allows an attacker to dump a list of all users, including detailed user information, without any authentication by sending a simpl...

WDMyCloud 2.30.165 CSRF / File Upload / Code Execution / Backdoor / DoS

/ / / / / / / / / / / / / / / / / / / / / \ / // / // / / / / / / / // / / / /,/// // /// // GulfTech Research and Development WDMyCloud = 2.30.165 Multiple Vulnerabilities Released Date: 2018-01-04 Last Modified: 2017-06-11 Company Info: Western Digital Version Info: Vulnerable MyCloud =...

WDMyCloud < 2.30.165 - Multiple Vulnerabilities

WDMyCloud Multiple Vulnerabilities Vendor: Western Digital Product: WDMyCloud Version: = 2.30.165 Website: https://www.wdc.com/products/network-attached-storage.html / / / / / / / / / / / / / / / / / / / / / \ / // / // / / / / / / / // / / / /,/// // /// // GulfTech Research and Development...

[SECURITY] Fedora 27 Update: git-annex-6.20170925-3.fc27

Git-annex allows managing files with git, without checking the file contents into git. While that may seem paradoxical, it is useful when dealing with f iles larger than git can currently easily handle, whether due to limitations in memory, time, or disk space. It can store large files in many...

The vulnerability of the Elastic Cloud Storage storage platform, combined with the use of a pre-installed account, allows attackers to gain access to the system.

The vulnerability of the Dell EMC Elastic Cloud Storage ECS storage platform is related to the use of a pre-installed emcservice account. Exploiting this vulnerability allows an attacker operating remotely to gain access to the system and compromise the confidentiality, integrity, and accessibili...

DEBIAN-CVE-2017-13794

An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTunes before 12.7.1 on Windows is affected. tvOS before 11.1 is affected. The issue involves the "WebKit" component. It allows remote...

Internal Accenture Data, Customer Information Exposed in Public Amazon S3 Bucket

A potentially devastating Amazon S3 bucket exposure left internal Accenture private keys, secret API data and other information publicly available to anyone who could then leverage it to attack the global consulting firm and its clients. The exposure was privately reported to Accenture on Sept. 1...

CVE-2017-8021

EMC Elastic Cloud Storage ECS before 3.1 is affected by an undocumented account vulnerability that could potentially be leveraged by malicious users to compromise the affected system...

CVE-2017-8021

EMC Elastic Cloud Storage ECS before 3.1 is affected by an undocumented account vulnerability that could potentially be leveraged by malicious users to compromise the affected system...

Design/Logic Flaw

EMC Elastic Cloud Storage ECS before 3.1 is affected by an undocumented account vulnerability that could potentially be leveraged by malicious users to compromise the affected system...

CVE-2017-8021

EMC Elastic Cloud Storage ECS before 3.1 is affected by an undocumented account vulnerability that could potentially be leveraged by malicious users to compromise the affected system...

EMC Elastic Cloud Storage Default Password Vulnerability

EMC Elastic Cloud Storage is a multi-purpose global storage solution from EMC Corporation USA. A security vulnerability exists in EMC Elastic Cloud Storage versions prior to 3.1. A remote attacker could exploit the vulnerability to compromise an affected system...

Military Contractor's Vendor Leaks Resumes in Misconfigured AWS S3

Thousands of resumes and job applications containing the personal information of U.S. veterans, many with top secret clearances, and law enforcement officers were left exposed in an Amazon Web Services S3 bucket, continuing a trend where poorly configured cloud-storage services are putting people...

Yuanzi Parenting AliCloud OSS credentials have information leakage vulnerability

Yuanzi Parenting APP is a parenting mobile application for parents of 1 to 6 year old babies, which can be an interactive sharing platform for the exchange of parenting knowledge and experience. Aliyun Object Storage Service OSS is a massive, secure and highly reliable cloud storage service...

Information leakage vulnerability in Aliyun OSS credentials for Advanced Medical Examination BaoDian

Advanced Medical Exam App is a physician exam material application exam study question bank app. There is an information leakage vulnerability in the Medical Advanced Title Exam BaoDian AliCloud OSS credentials. The vulnerability is caused by credential leakage due to the use of SDK with...