Executor and miner collusion and gas price

Lines of code Vulnerability details Impact The MATCHEXECUTOR can choose tx.gasprice and take the gas cost from a buyer. An executor can make a overly costly tx mined by a friendly miner and take extra profits. Proof of Concept and similar functions... Recommended Mitigation Steps There's no...

A week in security (August 16 – August 22)

Last week on Malwarebytes Labs: Podcast: Katie Moussouris hacked Clubhouse. Her emails went unanswered for weeks. How to troubleshoot hardware problems that look like malware problems. Analysts “strongly believe” the Russian state colludes with ransomware gangs. macOS 11’s hidden security...

Analysts “strongly believe” the Russian state colludes with ransomware gangs

"We have the smoke, the smell of gunpowder and a bullet casing. But we do not have the gun to link the activity to the Kremlin." This is what Jon DiMaggio, Chief Security Stretegist for Analyst1, said in an interview with CBS News following the release of its latest whitepaper, entitled "Nation...

CVE-2021-37588

In Charm 0.43, any two users can collude to achieve the ability to decrypt YCT14 data...

CVE-2021-37588

In Charm 0.43, any two users can collude to achieve the ability to decrypt YCT14 data...

Design/Logic Flaw

In Charm 0.43, any two users can collude to achieve the ability to decrypt YCT14 data...

CVE-2021-37588

CVE-2021-37588 (Charm 0.43) : Charm 0.43 contains a cryptographic issue that allows any two users to collude to decrypt YCT14 data. The vulnerability is documented across multiple sources (NVD, Red Hat, OSV, CNNVD, etc.), indicating a cryptographic flaw rather than a typical software bug in a sin...

CVE-2021-37588

In Charm 0.43, any two users can collude to achieve the ability to decrypt YCT14 data...

Mobile App Collusion Can Bypass Native Android Security

DENVER – Android’s native security mechanisms, most notably application sandboxing, secure devices against threats from one app at a time. Multiple apps however, can collude in different ways and bypass these protections. Researchers on Wednesday at the 26th Virus Bulletin International Conferenc...

Flawed EMV Chip-and-PIN Protocol Paves Way To Fraudulent ATM and POS Transactions

A flaw in the EMV protocol which lays out the rules for chip-and-PIN card transactions at ATMs and point-of-sale terminals could enable persistent attackers to carry out bogus card transactions. Five Cambridge UK University researchers released a paper today with the gory details. Foremost among...

Kuwait ISP FastTelco Defaced by Anonymous Hackers

Kuwait ISP FastTelco Defaced by Anonymous Hackers Anonymous claimed responsibility for the defacement of the Fast Telecommunications company website FastTelco, a major ISP internet service provider in Kuwait. The Anonymous hacktivists identify themselves as AnonKuwait, and claim to be fighting...

Collusion Firefox Add-On Paints Picture of Web Tracking

Most Internet users at this point understand that Web sites routinely and extensively track the behavior and movements of their visitors. It’s an unsettling reality. But few people have a handle on just how widespread and pervasive the practice is. Now, a developer has released an add-on for...

Anonymous leaks Nimbuzz data for collusion with pro-censorship governments

Anonymous leaks Nimbuzz data for collusion with pro-censorship governments Anonymous Hackers leaks Nimbuzz data via the twitter account of AnonymousIRC which included a link to their latest leak from Nimbuzz . About thirty minutes later, that twitter account posted a link for download named...

Anonymous Publishes Bank of America Documents, Alleges Fraud

The hacker collective known as Anonymous published a collection of e-mail messages that allege mortgage fraud at U.S. banking giant Bank of America. The documents – more than two dozen e-mail messages – are from Balboa Insurance Group, a Bank of America subsidiary that provides insurance for auto...