2003 matches found
Is It Worth It to Defend Your Service from Video Piracy?
The answer isn't obvious. From headcount to vendor spend, combating video piracy is expensive. And piracy has been a part of the entertainment industry since the silent movie era. It's not crazy to say, "Maybe it's just a cost of doing show business." So let's start with a different question. How...
North Korea-Backed Spy Group Poses as Reporters in Spearphishing Attacks, Feds Warn
The North Korean advanced persistent threat APT group known as Kimsuky is actively attacking commercial-sector businesses, often by posing as South Korean reporters, according to an alert from the U.S. Cybersecurity and Infrastructure Security Agency CISA. Kimsuky a.k.a. Hidden Cobra has been...
Cloud Industry CMS suffers from SQL injection vulnerability (CNVD-2020-62423)
Yunye CMS is an enterprise website building system developed by Luoyang Yunye Information Technology Co. Yunye CMS has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...
Nitro software data breach: Hackers claim selling customer data
By Waqas Nitro Software Inc’s data breach may affect industry bigwigs like Apple, Google, and Microsoft. This is a post from HackRead.com Read the original post: Nitro software data breach: Hackers claim selling customer data...
COVID-19 Vaccine-Maker Hit with Cyberattack, Data Breach
COVID-19 vaccine manufacturer Dr. Reddy’s Laboratories has shut down its plants in Brazil, India, Russia, the U.K. and the U.S. following a cyberattack, according to reports. The Indian company is the contractor for Russia’s “Sputinik V” COVID-19 vaccine, which is about to enter Phase 2 human...
CVE-2020-15157
The CVE-2020-15157 issue affects containerd (pre-1.2.14) where the default resolver would leak credentials when a container image manifest points to a foreign layer. If a manifest directs a layer URL to a attacker‑controlled web server and the image is pulled, credentials used for the registry co...
chinadairyindustry.com Cross Site Scripting vulnerability OBB-1407851
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Death by a Thousand Cuts: Nuisance DDoS Attacks in the Games Industry
At Akamai, we talk a lot about DDoS attacks. It's because we're pretty good at handling them. We've stopped many of the world's biggest attacks. And, while less common, they get a lot of attention. But we can also stop the world's smallest attacks. And we stop lots of them. It's these smaller...
Death by a Thousand Cuts: Nuisance DDoS Attacks in the Games Industry
At Akamai, we talk a lot about DDoS attacks. It's because we're pretty good at handling them. We've stopped many of the world's biggest attacks. And, while less common, they get a lot of attention. But we can also stop the world's smallest attacks. And we stop lots of them. It's these smaller...
AMD Radeon Driver Vulnerability - Lenovo Support US
No description provided...
AMD Radeon Driver Vulnerability - Lenovo Support US
Lenovo Security Advisory: LEN-48973 Potential Impact: Denial of service Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2020-12933 Summary Description: AMD reported a potential vulnerability in AMD Radeon graphics drivers that could result in denial of service. Mitigation Strate...
AMD Radeon Driver Vulnerability - Lenovo Support US
No description provided...
AMD Radeon Driver Vulnerability - Lenovo Support US
Lenovo Security Advisory: LEN-48405 Potential Impact: Denial of service Severity: Medium Scope of Impact: Industry-wide CVE Identifier: CVE-2020-12911 Summary Description: AMD reported a potential vulnerability in AMD Radeon graphics drivers that could result in denial of service. Mitigation...
TikTok: Bypass "Industry Documents" Validation
The researcher found that the attacker can bypass the review process and mark the document as "approved" when a user adds Industry Documents. The attacker will bypass only the qualification status at frontend, the form status is still under review, and it will be reviewed by an employee...
Microsoft Office 365 Phishing Attack Uses Multiple CAPTCHAs
Researchers are warning of an ongoing Office 365 credential-phishing attack that’s targeting the hospitality industry – and using visual CAPTCHAs to avoid detection and appear legitimate. CAPTCHAs – commonly utilized by websites like LinkedIn and Google – are a type of challenge–response test use...
Bug Bounty FAQ: Top Questions, Expert Answers
Seldom does Threatpost have the privilege to tap the collective brain trust of one cybersecurity corner of the threat landscape. But last month, Threatpost brought together leading voices in the bug bounty community to participate in a webinar Five Essentials for Running a Successful Bug Bounty...
Security Bulletin: IBM Maximo Asset Management is vulnerable to path traversal (CVE-2019-4582)
Summary IBM Maximo Asset Management is vulnerable to path traversal. Vulnerability Details CVEID: CVE-2019-4582 DESCRIPTION: IBM Maximo Asset Management could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot"...
A week in security (September 14 – 20)
Last week on Malwarebytes Labs, we looked at Fintech industry developments, specifically the differences between Europe and the US, and we analyzed how some charities and the advertising industry are tied together. We also told readers about what companies can do to counter domain name abuse. In...
Industry-wide partnership on threat-informed defense improves security for all
MITRE Engenuity’s Center for Threat-Informed Defense has published a library of detailed plans for emulating the threat actor FIN6 which Microsoft tracks as TAAL, a collection of threat intelligence, MITRE ATT&CK data, supporting scripts, and utilities designed to enable red teams to emulate the...
New Report Explains COVID-19's Impact on Cyber Security
Most cybersecurity professionals fully anticipated that cybercriminals would leverage the fear and confusion surrounding the Covid-19 pandemic in their cyberattacks. Of course, malicious emails would contain subjects relating to Covid-19, and malicious downloads would be Covid-19 related. This is...