Millions of Android Phones Hacked to Mine Monero Coins

By Waqas Newly Identified Drive-by Monero Cryptomining Campaign Targeted Millions of Android This is a post from HackRead.com Read the original post: Millions of Android Phones Hacked to Mine Monero Coins...

Gojdue Variant Eludes Microsoft, Google Cloud Protection, Researchers Say

Researchers have identified a new ransomware strain that went undetected by built-in anti-malware protection used by cloud heavyweights Microsoft and Google as recently as January. According to researchers at the cloud service firm Bitglass, both Google Drive and Microsoft Office 365’s SharePoint...

openSUSE Security Update : ecryptfs-utils (openSUSE-2018-126)

This update for ecryptfs-utils fixes the following issues : - CVE-2015-8946: ecryptfs-setup-swap improperly configures encrypted swap when using GPT partitioning bsc989121 - CVE-2016-6224: ecryptfs-setup-swap improperly configures encrypted swap when using GPT partitioning on a NVMe or MMC drive...

NSClient++ Local Elevation of Privilege Vulnerability

NSClient++ is an open source host monitoring agent software. A security vulnerability exists in versions of NSClient++ prior to 0.4.1.73. The vulnerability can be exploited to execute arbitrary code with elevated privileges via a malicious program.exe executable file in the %SYSTEMDRIVE% folder...

SUSE SLED12 / SLES12 Security Update : ecryptfs-utils (SUSE-SU-2018:0336-1)

This update for ecryptfs-utils fixes the following issues : - CVE-2015-8946: ecryptfs-setup-swap improperly configures encrypted swap when using GPT partitioning bsc989121 - CVE-2016-6224: ecryptfs-setup-swap improperly configures encrypted swap when using GPT partitioning on a NVMe or MMC drive...

Node.js third-party modules: [crud-file-server] Stored XSS in filenames when directory index is served by crud-file-server

Hi Guys, crud-file-server allows to embed HTML in file names, which in certain conditions might lead to execute malicious JavaScript. Module crud-file-server This package exposes a directory and its children to create, read, update, and delete operations over http...

Your startup disk is almost full – How you can fix it on your Mac

Every Mac user will experience the message “Your startup disk is almost full” at one time or another. Understanding what “startup disk is full” actually means is the first important step before you can fix this issue. What if my Mac’s Startup Disk is Full? The answer to this question is easy. Whe...

Node.js third-party modules: [simplehttpserver] Stored XSS in file names leads to malicious JavaScript code execution when directory listing is output in HTML

Hi Guys, simplehttpserver allows to embed HTML in file names, which in certain conditions might lead to execute malicious JavaScript. Module: 'simpehttpserver' is simple imitiation of python's SimpleHTTPServer and intended for testing, development and debugging purposes...

RIG exploit kit campaign gets deep into crypto craze

There isn't a day that goes by without a headline about yet another massive spike in Bitcoin valuation, or a story about someone mortgaging their house to purchase the hardware required to become a serious cryptocurrency miner. If many folks are thinking about joining the 'crypto craze' movement,...

Tech support scammers make browser lockers more resilient

Tech support scammers have been relying on fraudulent pop-ups for many years in order to scare potential victims into calling for remote assistance. These so-called browser lockers or browlocks typically originate from malicious ads malvertising that can appear on any website, including trusted...

EnGenius EnShare IoT Gigabit Cloud Service 1.4.11 Root Remote Code Execution

Summary With the EnGenius IoT Gigabit Routers and free EnShare app, use your iPhone, iPad or Android-based tablet or smartphone to transfer video, music and other files to and from a router-attached USB hard drive. Enshare is a USB media storage sharing application that enables access to files...

RAT Distributed Via Google Drive Targets East Asia

Researchers said that they are tracking a new remote access Trojan dubbed UBoatRAT that is targeting individuals or organizations linked to South Korea or the video game industry. While targets aren’t 100 percent clear, researchers at Palo Alto Networks Unit 42 said UBoatRAT threats are evolving...

Lenovo ThinkPad W541 laptop Seagate ST500LT015 hard disk drive bypass vulnerability

The Lenovo ThinkPad W541 laptops with BIOS 2.21 is a laptop computer from the Chinese company Lenovo that uses BIOS version 2.21.The Seagate ST500LT015 hard disk drive is a hard disk drive used in computers made by the American company Seagate. Seagate ST500LT015 hard disk drive is a hard disk...

Multiple Device Samsung 850 Pro, PM851 SSD, Seagate ST500LT015 and ST500LT025 Hard Disk Hot Swap Attack Vulnerability

Lenovo ThinkPad T440s laptop is a laptop from Lenovo in China.Dell Latitude E6410 laptop is a laptop from Dell in the U.S.A. Samsung 850 Pro and others are hard disks used in laptops.Samsung 850 Pro is a hard disk manufactured by Samsung in Korea. The Samsung 850 Pro is a hard drive manufactured ...

Multiple Devices Samsung 850 Pro, PM851 SSD, Seagate ST500LT015 and ST500LT025 Hard Disk Force Reboot Attack Vulnerability

Lenovo ThinkPad T440s laptop is a laptop from Lenovo in China.Dell Latitude E6410 laptop is a laptop from Dell in the U.S.A. Samsung 850 Pro and others are hard disks used in laptops.Samsung 850 Pro is a hard disk manufactured by Samsung in Korea. The Samsung 850 Pro is a hard drive manufactured ...

Hardcoded credentials

Samsung 850 Pro and PM851 solid-state drives and Seagate ST500LT015 and ST500LT025 hard disk drives, when in sleep mode and operating in Opal or eDrive mode on Lenovo ThinkPad T440s laptops with BIOS 2.32; ThinkPad W541 laptops with BIOS 2.21; Dell Latitude E6410 laptops with BIOS A16; or Latitud...

CVE-2015-7267

The CVE-2015-7267 entry applies to Samsung 850 Pro/PM851 SSDs and Seagate ST500LT015/ST500LT025 HDDs used in Lenovo ThinkPad T440s (BIOS 2.32) and W541 (BIOS 2.21), Dell Latitude E6410 (BIOS A16), and Latitude E6430 (BIOS A16). It describes a physical-access risk where, when the drives operate in...

CVE-2015-7268

The CVE-2015-7268 entry describes a hardware-level vulnerability affecting Samsung 850 Pro/PM851 SSDs and Seagate ST500LT015/ST500LT025 HDDs when used with Windows and specific Opal/eDrive configurations on certain Lenovo/Dell laptops. The issue allows physically proximate attackers to bypass sel...

Citrix *Client Folder Redirection* (CFR) is not *Folder Redirection*

Client Folder Redirection, Folder Redirection and Special Folder Redirection are not the same. Client Folder Redirection CFR provides access to client-side folders in an ICA session while not having to redirect complete client-side drives. Support throughClient Drive Mapping CDM has enabled...

Microsoft Windows NTFS File System Metadata Disclosures Exploit

The Microsoft Windows Kernel suffers from multiple stack and pool memory disclosures into NTFS file system metadata. Windows Kernel multiple stack and pool memory disclosures into NTFS file system metadata CVE-2017-11880 We have discovered that the NTFS.sys driver writes uninitialized kernel stac...