118 matches found
MAL-2022-2729 Malicious code in emoji-scavenger-hunt (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1eea9ce3ac136ab2fbd72f398588a5eec9104d217877b1fed180ddac1ec2fd15 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
New Year, New Threats: 4 Tips to Activate Your Best Cyber-Defense
As we enter into a new year full of uncertainty, one thing for cybersecurity practitioners remains true: You have a strategic advantage over adversaries. It may sound obvious to say, but they’re launching attacks against you, within your environment, which you control – giving you a fundamental...
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
Log4JHunt An automated, reliable scanner for the Log4Shell CVE...
New Updates to Guardicore Centra Boost Zero Trust Posture and Enhance Ransomware Protection
In our update to Guardicore Hunt see how you can enhance your ransomware protections as well as Zero Trust...
The hunt for NOBELIUM, the most sophisticated nation-state attack in history
This is the second in a four-part blog series on the NOBELIUM nation-state cyberattack. In December 2020, Microsoft began sharing details with the world about what became known as the most sophisticated nation-state cyberattack in history. Microsoft’s four-part video series “Decoding NOBELIUM”...
CVE-2021-33982
An insufficient session expiration vulnerability exists in the "Fish | Hunt FL" iOS app version 3.8.0 and earlier, which allows a remote attacker to reuse, spoof, or steal other user and admin sessions...
Session fixation
An insufficient session expiration vulnerability exists in the "Fish | Hunt FL" iOS app version 3.8.0 and earlier, which allows a remote attacker to reuse, spoof, or steal other user and admin sessions...
CVE-2021-33982
An insufficient session expiration vulnerability exists in the "Fish | Hunt FL" iOS app version 3.8.0 and earlier, which allows a remote attacker to reuse, spoof, or steal other user and admin sessions...
CVE-2021-33982
The vulnerability CVE-2021-33982 affects the Fish | Hunt FL iOS app (version 3.8.0 and earlier). It is described as an insufficient session expiration flaw that enables a remote attacker to reuse, spoof, or steal other users’ and admins’ sessions. Connected sources confirm the issue but do not pr...
CVE-2021-33981
CVE-2021-33981 affects the Fish | Hunt FL iOS app (versions 3.8.0 and earlier). The issue is an insecure direct object vulnerability in the hunting/fishing license retrieval function, allowing a remote authenticated attacker to access other users’ personal information and license images. Root cau...
Fish Hunt FL 信息泄露漏洞
Fish Hunt FL is used to manage Florida hunting and fishing licenses. An information disclosure vulnerability exists in Fish Hunt FL that stems from an insecure direct object vulnerability in the hunting/fishing license retrieval functionality of the Fish | Hunt FL iOS app version 3.8.0 release an...
JavaScript Fraud: More Than Just Magecart and Skimming
The global pandemic has driven a sharp rise in online traffic that provides fertile ground for attackers to execute a growing number of more sophisticated client-side attacks. For example, Magecart-style attacks are used to steal sensitive information by skimming data either through a first-party...
Git-Wild-Hunt - A Tool To Hunt For Credentials In Github Wild AKA Git*Hunt
A tool to hunt for credentials in the GitHub wild AKA githunt Getting started 1. Install the tool 2. Configure your GitHub token 3. Search for credentials 4. See results cat results.json | jq Installation requirements: virtualenv, python3 1. git clone https://github.com/d1vious/git-wild-hunt &&...
Customer Guidance on Recent Nation-State Cyber Attacks
Note: we are updating as the investigation continues. Revision history listed at the bottom. This post contains technical details about the methods of the actor we believe was involved in Recent Nation-State Cyber Attacks, with the goal to enable the broader security community to hunt for activit...
huntbrotherspizza.com Cross Site Scripting vulnerability OBB-1376199
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
mail.huntbrothers.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1179763 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
Alleged Hacker Behind Massive ‘Collection 1’ Data Dump Arrested
A hacker accused of selling hundreds of millions of stolen credentials from last year’s “Collection 1” data dump on the dark web has been arrested in the Ukraine. The Security Service of Ukraine SSU took into custody a threat actor known as “Sanix,” who they claim posted 773 million e-mail...
HackerOne: How the Bug stole hacking
In light of the season - here's a story I wrote for you: Every hacker down in Hackerone liked hacking alot, But the Bug who lived down in the source code, did not! The Bug hating hacking! The whole Bug-hunt season! Now please don’t ask why. No one quite knows the reason. It could be perhaps, that...
CISO MAG Honors KrebsOnSecurity
CISO MAG, a publication dedicated to covering issues near and dear to corporate chief information security officers everywhere, has graciously awarded this author the designation of "Cybersecurity Person of the Year" in its December 2019 issue. KrebsOnSecurity is grateful for the unexpected honor...
Google Adds Password Checkup Feature to Chrome Browser
Google will soon alert Chrome browser users of weak or compromised passwords. The checks will be in real time as Chrome users visit a password protected website. Bad passwords will trigger a red dialogue box alerting users to take action to better protect their account. The move integrates a...