August 10, 2017 – Morning Cyber Coffee Headlines – “PGA Championship” Edition

Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! August 10, 2017 - Headlines One easy thing your agency can do to attract more...

Design/Logic Flaw

An industry-wide vulnerability has been identified in the implementation of the Open Shortest Path First OSPF routing protocol used on some Lenovo switches. Exploitation of these implementation flaws may result in attackers being able to erase or alter the routing tables of one or many routers,...

August 8, 2017 – Morning Cyber Coffee Headlines – “Smokey the Bear” Edition

Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! August 8, 2017 - Headlines NetWorks Group Joins “Carbon Black Connect” Partner...

SQL Injection Vulnerability in Explosive Industry Website Building System of Guangzhou Sino-explosive Safety Net Technology Co.

Ltd. is a collection of system integration, software development, technical services, consulting and other consulting as a whole, focusing on the construction of dangerous goods industry "information highway" - Explosives special network, building industry grids and database clusters, aimed at...

Get Ready For The Holidays With Cloudlets

It's summer, which means it's time for hitting the beach, enjoying outdoor barbeques with friends and family, going for hiking, biking, kayaking and savoring cold craft beers. But for savvy retailers like you, summer is the ideal time to start getting your apps, websites and infrastructures ready...

New IoT Bill Proposes Security Standards for Smart Devices

By this time, almost every one of you owns at least one internet-connected device—better known as the "Internet of things"—at your home, but how secure is your device? We have recently seen Car hacking that could risk anyone's life, Hoverboard hacking, even hacking of a so-called smart Gun and al...

Legislation Proposed to Secure Connected IoT Devices

A Senate bill introduced today would prioritize security in connected devices, requiring providers who sell to the U.S. government to implement measures that would have been an impediment to the IoT botnet-fueled attacks against DNS provider Dyn and webhost OVH. The Internet of Things Cybersecuri...

Revoke-Obfuscation: PowerShell Obfuscation Detection Using Science

Many attackers continue to leverage PowerShell as a part of their malware ecosystem, mostly delivered and executed by malicious binaries and documents. Of malware that uses PowerShell, the most prevalent use is the garden-variety stager: an executable or document macro that launches PowerShell to...

July 27, 2017 – Morning Cyber Coffee Headlines – “Black Hat Conference” Edition

Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! July 27, 2017 - Headlines Carbon Black in the News: Carbon Black Named...

APT Group Uses Catfish Technique To Ensnare Victims

LAS VEGAS–Meet Mia Ash, a 20-something London-based photographer, amateur model, social media butterfly with a keen interest in tech-savvy guys with ties to the oil and gas industry. You guessed it. Mia Ash doesn’t exist. Ash, according to Dell SecureWorks Counter Threat Unit, is a virtual person...

Industry-wide OSPF routing vulnerability on Lenovo and IBM Networking Switches - us

Lenovo Security Advisory: LEN-14078 Potential Impact: Erasure or alteration of routing tables within a routing domain Severity: Medium Scope of Impact: Industry-Wide CVE Identifier: CVE-2017-3752 Summary Description: An industry-wide vulnerability has been identified in the implementation of the...

Industry-wide OSPF routing vulnerability on Lenovo and IBM Networking Switches - Lenovo Support US

No description provided...

Rockwell Automation MicroLogix 1100 Denial of Service Vulnerability

Rockwell Automation is a British company that provides industrial automation control and globalized information. the MicroLogix 1100 series is used in food, agriculture and water and wastewater systems, among others. A denial of service vulnerability exists in Rockwell Automation MicroLogix 1100...

SKILLS.com.au Industry App 1.0 Man-In-The-Middle / Code Execution

Exploit Title: SKILLS.com.au Industry App - Remote Code Execution via MITM Date: 20/Jul/17 Exploit Author: MaXe Vendor Homepage: https://play.google.com/store/apps/details?id=a3.skills.com http://archive.is/NRlNP Software Link: N/A Screenshot: N/A Version: 1.0 Tested on: Android 4.1.0 Google APIs...

SKILLS.com.au Industry App - Man In The Middle Remote Code Execution

SKILLS.com.au Industry App - Man In The Middle Remote Code Execution Exploit Title: SKILLS.com.au Industry App - Remote Code Execution via MITM Date: 20/Jul/17 Exploit Author: MaXe Vendor Homepage: https://play.google.com/store/apps/details?id=a3.skills.com http://archive.is/NRlNP Software Link:...

SKILLS.com.au Industry App - Man In The Middle Remote Code Execution

Exploit Title: SKILLS.com.au Industry App - Remote Code Execution via MITM Date: 20/Jul/17 Exploit Author: MaXe Vendor Homepage: https://play.google.com/store/apps/details?id=a3.skills.com http://archive.is/NRlNP Software Link: N/A Screenshot: N/A Version: 1.0 Tested on: Android 4.1.0 Google APIs...

PT-2017-2471 · Microsoft · Office

Name of the Vulnerable Software and Affected Versions: Microsoft Office versions 2007 through 2016 Description: A remote code execution issue exists due to the way Microsoft Office handles objects in memory. This could allow a remote attacker to execute arbitrary code by using a specially crafted...

oilcenter.com XSS vulnerability

Vulnerable URL: http://www.oilcenter.com/international/industry.asp?industry=1"...

Windows NSA Information Assurance: Locklevel

Windows NSA Information Assurance LOCKLEVEL was a rapidly built prototype that demonstrates a method for scoring how well Windows systems have implemented some of the NSA Information Assurance top 10 mitigation strategies . This prototype is being shared to encourage industry adoption of these...

NSA-Backed OpenC2.org Aims to Defend Systems at Machine Speed

NEW YORK–The dynamics of a cyberattack often include speed, automation and adaptive tradecraft. Mounting an effective defense, however, isn’t always fast enough. To help even the score, a group led by the National Security Agency called OpenC2.org is developing an open, standardized computer...