MAL-2022-1336 Malicious code in azure-iot-device-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 092a7f8fff3a4ffff2843f5123ed1648065db564827c61a0229ded806ee28c3c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-iot-modelsrepository (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 250263aebfc93875e0f4708687b14d5cfe78f1300e66ec9da664d3146925f609 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3943 Malicious code in iot-modelsrepository (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8e83d4636b2fb99e3bafa73ad6a6798b54de9c09cbdea7b6d0626991a4554539 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3941 Malicious code in iot-device-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2054ba3bbed2d19afe559eb23210cfaa9a28260235af1d953cbc978f05011643 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in iot-device-update-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6a41aebeb765add539c5812a2506d600623e9f369a15da042b5c98e31a421c04 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3942 Malicious code in iot-device-update-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6a41aebeb765add539c5812a2506d600623e9f369a15da042b5c98e31a421c04 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in iot-device-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2054ba3bbed2d19afe559eb23210cfaa9a28260235af1d953cbc978f05011643 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3939 Malicious code in iot-central-high-availability-clients (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc7a6b36f57350ade80621e0671f07ac8cdd22f714e9beb5347ddd63615debc4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in iot-device-samples (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b413b38d47a660ca3a66004c282238911b4785237fef25d1eb561381309e840 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3940 Malicious code in iot-device-samples (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b413b38d47a660ca3a66004c282238911b4785237fef25d1eb561381309e840 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1337 Malicious code in azure-iot-device-update-samples-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a1619f8a57e5ec09b4508499476aa3e547fb72aee924dcaef9c33ca6691eda12 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-iot-device-update-samples-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a1619f8a57e5ec09b4508499476aa3e547fb72aee924dcaef9c33ca6691eda12 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1338 Malicious code in azure-iot-device-update-samples-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 04f309ce322ca5df94273799793fea95b16415c455a8b916dc8927036c705855 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

June 20, 2022—KB5016139 (OS Builds 19042.1767, 19043.1767, and 19044.1767) Out-of-band

None None...

Authorities Shut Down Russian RSOCKS Botnet That Hacked Millions of Devices

The U.S. Department of Justice DoJ on Thursday disclosed that it took down the infrastructure associated with a Russian botnet known as RSOCKS in collaboration with law enforcement partners in Germany, the Netherlands, and the U.K. The botnet, operated by a sophisticated cybercrime organization, ...

Record breaking HTTPS DDoS attack

Last week, Cloudflare blocked the largest HTTPS DDoS attack on record. The attack amassed some 26 million requests per second rps. The previous record for a HTTPS DDoS attack was 15.3 million rps. The attack targeted an unnamed Cloudflare customer and originated mostly from Cloud Service Provider...

Siemens SICAM GridEdge Authentication Error Vulnerability (CNVD-2022-45216)

SICAM GridEdge enables IoT functionality in your existing IEC 61850 devices with just a few clicks.An authentication error vulnerability in Siemens SICAM GridEdge results from the fact that the affected software does not authenticate access to privileged functions, which can be exploited to creat...

Siemens SICAM GridEdge Source Authentication Error Vulnerability

SICAM GridEdge enables IoT functionality in your existing IEC61850 devices with just a few clicks.A source authentication error vulnerability in Siemens SICAM GridEdge is caused by the fact that the affected software does not apply cross-domain resource sharing CORS restrictions to critical...

Siemens SICAM GridEdge Authentication Error Vulnerability

SICAM GridEdge enables IoT functionality in your existing IEC 61850 devices with just a few clicks.Siemens SICAM GridEdge is vulnerable to an authentication error, which stems from the fact that the affected software does not require authenticated access to privileged functions and can be exploit...

Siemens SICAM GridEdge Resource Leakage Vulnerability

SICAM GridEdge enables your existing IEC61850 devices to have IoT functionality with just a few clicks.A resource leak vulnerability exists in Siemens SICAM GridEdge, which stems from the fact that the affected software discloses the password hash of another user upon request, which can be...