4134 matches found
Ransomware review: November 2023
This article is based on research by Marcelo Rivero, Malwarebytes ransomware specialist, who monitors information published by ransomware gangs on their Dark Web sites. In this report, "known attacks" are those where the victim did not pay a ransom. This provides the best overall picture of...
containerd: Supplementary groups are not set up properly
A flaw was found in containerd, where supplementary groups are not set up properly inside a container. If an attacker has direct access to a container and manipulates their supplementary group access, they may be able to use supplementary group access to bypass primary group restrictions in some...
kernel: blkio memory leakage due to blkcg and some blkgs are not freed after they are made offline.
A flaw was found in the blkgs destruction path in block/blk-cgroup.c in the Linux kernel, leading to a cgroup blkio memory leakage problem. When a cgroup is being destroyed, cgrouprstatflush is only called at cssreleaseworkfn, which is called when the blkcg reference count reaches 0. This circula...
kernel: memcg: fix possible use-after-free in memcg_write_event_control()
In the Linux kernel, the following vulnerability has been resolved: memcg: fix possible use-after-free in memcgwriteeventcontrol memcgwriteeventcontrol accesses the dentry-dname of the specified control fd to route the write call. As a cgroup interface file can't be renamed, it's safe to access...
Advanced threat predictions for 2024
Advanced persistent threats APTs are the most dangerous threats, as they employ complex tools and techniques, and often are highly targeted and hard to detect. Amid the global crisis and escalating geopolitical confrontations, these sophisticated cyberattacks are even more dangerous, as there is...
US Privacy Groups Urge Senate Not to Ram Through NSA Spying Powers
An effort to reauthorize a controversial US surveillance program by attaching it to a must-pass spending bill has civil liberties advocates calling foul...
Improper Access Control
Moodle/moodle is vulnerable to Improper Access Control. The vulnerability exists because it does not properly control access in the Only See membership group, allowing an attacker to view information from other student groups...
VulnCheck KEV: CVE-2022-39960
The Netic Group Export add-on before 1.0.3 for Atlassian Jira does not perform authorization checks. This might allow an unauthenticated user to export all groups from the Jira instance by making a groupexportdownload=true request to a plugins/servlet/groupexportforjira/admin/ URI...
This New Tool Aims to Keep Terrorism Content Off the Internet
Small platforms without resources to handle takedown requests have been weaponized by terrorist groups that share their content online. A free new tool is coming to help clean house...
CVE-2023-5551
Separate Groups mode restrictions were not honoured in the forum summary report, which would display users from other groups...
CVE-2023-5551
Separate Groups mode restrictions were not honoured in the forum summary report, which would display users from other groups...
Code injection
Separate Groups mode restrictions were not honoured in the forum summary report, which would display users from other groups...
CVE-2023-5551
Separate Groups mode restrictions were not honoured in the forum summary report, which would display users from other groups...
UBUNTU-CVE-2023-5551
Separate Groups mode restrictions were not honoured in the forum summary report, which would display users from other groups...
CVE-2023-5551 Moodle: forum summary report shows students from other groups when in separate groups mode
Separate Groups mode restrictions were not honoured in the forum summary report, which would display users from other groups...
CVE-2023-5551 Moodle: forum summary report shows students from other groups when in separate groups mode
Separate Groups mode restrictions were not honoured in the forum summary report, which would display users from other groups...
CVE-2023-5551
Moodle CVE-2023-5551 involves Separate Groups mode: the forum summary report does not honour group restrictions, causing display of users from other groups. The initial entry reports a LOW severity (CVSS 3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N; base 3.3) and notes the issue pertains to the Moodl...
CVE-2023-5542 Moodle: students can view other users in "only see own membership" groups
Students in "Only see own membership" groups could see other students in the group, which should be hidden...
Microsoft shares threat intelligence at CYBERWARCON 2023
At the CYBERWARCON 2023 conference, Microsoft and LinkedIn analysts are presenting several sessions detailing analysis across multiple sets of threat actors and related activity. This blog is intended to summarize the content of the research covered in these presentations and demonstrates Microso...
Microsoft shares threat intelligence at CYBERWARCON 2023
At the CYBERWARCON 2023 conference, Microsoft and LinkedIn analysts are presenting several sessions detailing analysis across multiple sets of threat actors and related activity. This blog is intended to summarize the content of the research covered in these presentations and demonstrates Microso...