Hackers Demand Banks $315k Ransom or Face DDoS Attacks

By Waqas Armada Collective, a group of online attackers, is demanding a ransom payment of $315,000 from South Korean banks In the case of refusal, the group has threatened the banks with a series of massive Distributed Denial of Service DDoS attacks. The threats came days after South Korean web...

Petya Destructive Malware Variant Spreading via Stolen Credentials and EternalBlue Exploit

UPDATE July 21: FireEye continues to track this threat. An earlier version of this post has been updated to reflect new findings. On June 27, 2017, multiple organizations – many in Europe – reported significant disruptions they are attributing to a variant of the Petya ransomware, which we are...

June 27, 2017—KB4022723 (OS Build 14393.1378)

None None...

XSS Vulnerability in Shenzhen Siliconware Sewise VOD Server System

wise on-demand server software is server-side distribution software that provides streaming playback of audio and video files. There is an XSS vulnerability in sewise VOD server system of Shenzhen Siliconware Technology. An attacker can exploit the vulnerability to obtain sensitive information su...

UCL Ransomware Linked to AdGholas Malvertising Group

A ransomware attack that closed off access to personal and shared drives at University College London last week has been linked to a malvertising campaign spreading Mole, a variant of CryptoMix ransomware. Kafeine, a white-hat who works for Proofpoint and is known for his research into exploit...

[SECURITY] Fedora 26 Update: systemd-233-4.fc26

systemd is a system and service manager that runs as PID 1 and starts the rest of the system. It provides aggressive parallelization capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, keeps track of processes using Linux control groups,...

World On Demand TV - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application World On Demand TV published at the 'play' market has multiple vulnerabilities...

CVE-2017-7581

SQL injection vulnerability in NewsController.php in the News module 5.3.2 and earlier for TYPO3 allows unauthenticated users to execute arbitrary SQL commands via vectors involving overwriteDemand for order and OrderByAllowed...

Blank Slate Campaign Pushes Cerber Ransomware

Criminals are breathing new life into Cerber ransomware with a stubborn spam campaign called Blank Slate that is successfully abusing hosting providers to spread the malware. Researchers at the SANS Internet Storm Center said the campaign has shifted from spreading Sage 2.0 and Locky ransomware, ...

CVE-2017-5149

An issue was discovered in St. Jude Medical Merlin@home, versions prior to Version 8.2.2 RF models: EX1150; Inductive models: EX1100; and Inductive models: EX1100 with MerlinOnDemand capability. The identities of the endpoints for the communication channel between the transmitter and St. Jude...

Bill Calls for Study of Cybersecurity Standards for Cars

A House bill was introduced Tuesday that could accelerate the federal government’s involvement in regulating automobile cybersecurity. The Security and Privacy in Your Car Study Act of 2017, authored by Reps. Ted Lieu D-Calif. and Joe Wilson R-SC, calls on the National Highway Traffic Safety...

Charger Mobile Ransomware Removed from Google Play

Security researchers have identified a new and evasive mobile ransomware strain called Charger on the Google Play app store. The Charger malware was bundled with an SMS-snooping app called EnergyRescue that pawned itself off as a battery management utility, according to Check Point security...

Bitcoin Price Jumps Above $1150 — Highest in last 3 Years

What a good start of the New Year for those holding Bitcoins! Web-based digital currency Bitcoin has passed $1,110 for the first time on the Bitstamp Price Index BPI since early November 2013. Bitcoin broke the barrier on 1 January and now is trading above $1,150 mark at the time of writing,...

Yahoo Slams Email Surveillance Story: Experts Demand Details

Bombshell revelations that Yahoo conducted mass email surveillance is raising hackles among legal, civil liberties and security experts that demand Yahoo and the U.S. government come clean. Meanwhile Yahoo challenged the accuracy of Tuesday’s report by Reuters. “The article is misleading. We...

MarsJoke Ransomware Targets .EDU, .GOV Agencies

New ransomware has surfaced that targets state and local government agencies, and educational institutions that are less likely to have big budgets to ward off or mitigate threats, according to researchers. The ransomware, called MarsJoke, was detected in a large-scale email campaign last week th...

CVE-2016-3527

Unspecified vulnerability in the Oracle Demand Planning component in Oracle Supply Chain Products Suite 12.1 and 12.2 allows remote attackers to affect confidentiality and integrity via vectors related to ODPDA Servlet...

CVE-2016-3527

CVE-2016-3527 affects Oracle Supply Chain Products Suite (Delivery: Oracle Demand Planning) 12.1 and 12.2, via the ODPDA Servlet in the Demand Planning component. The vulnerability is described as unspecified in the ODPDA Servlet, enabling remote attackers to impact confidentiality and integrity....

Unspecified Vulnerability in Oracle Supply Chain Products Suite Oracle Demand Planning Component

Oracle Supply Chain Products Suite is a suite of supply chain solutions from Oracle that provides value chain planning, value chain execution, product lifecycle management, etc. Oracle Demand Planning is an Internet-based planning component that rapidly improves supply chain performance by...

Petya Ransomware Installs Mischa As Failsafe

The Petya ransomware strain signaled a new escalation for crypto-malware when it surfaced in March. For the first time, ransomware went beyond encrypting files on local and shared drives and instead set its sights on locking up the Master File Table on compromised machines. Petya did have its...

ORF TVthek: Video on demand - Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application ORF TVthek: Video on demand published at the 'play' market has multiple vulnerabilities...