Malicious code in iot-device-update-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6a41aebeb765add539c5812a2506d600623e9f369a15da042b5c98e31a421c04 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3942 Malicious code in iot-device-update-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6a41aebeb765add539c5812a2506d600623e9f369a15da042b5c98e31a421c04 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in iot-device-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2054ba3bbed2d19afe559eb23210cfaa9a28260235af1d953cbc978f05011643 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3939 Malicious code in iot-central-high-availability-clients (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc7a6b36f57350ade80621e0671f07ac8cdd22f714e9beb5347ddd63615debc4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in iot-device-samples (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b413b38d47a660ca3a66004c282238911b4785237fef25d1eb561381309e840 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3940 Malicious code in iot-device-samples (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b413b38d47a660ca3a66004c282238911b4785237fef25d1eb561381309e840 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1337 Malicious code in azure-iot-device-update-samples-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a1619f8a57e5ec09b4508499476aa3e547fb72aee924dcaef9c33ca6691eda12 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-iot-device-update-samples-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a1619f8a57e5ec09b4508499476aa3e547fb72aee924dcaef9c33ca6691eda12 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1338 Malicious code in azure-iot-device-update-samples-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 04f309ce322ca5df94273799793fea95b16415c455a8b916dc8927036c705855 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

June 20, 2022—KB5016139 (OS Builds 19042.1767, 19043.1767, and 19044.1767) Out-of-band

None None...

Authorities Shut Down Russian RSOCKS Botnet That Hacked Millions of Devices

The U.S. Department of Justice DoJ on Thursday disclosed that it took down the infrastructure associated with a Russian botnet known as RSOCKS in collaboration with law enforcement partners in Germany, the Netherlands, and the U.K. The botnet, operated by a sophisticated cybercrime organization, ...

Record breaking HTTPS DDoS attack

Last week, Cloudflare blocked the largest HTTPS DDoS attack on record. The attack amassed some 26 million requests per second rps. The previous record for a HTTPS DDoS attack was 15.3 million rps. The attack targeted an unnamed Cloudflare customer and originated mostly from Cloud Service Provider...

Siemens SICAM GridEdge Source Authentication Error Vulnerability

SICAM GridEdge enables IoT functionality in your existing IEC61850 devices with just a few clicks.A source authentication error vulnerability in Siemens SICAM GridEdge is caused by the fact that the affected software does not apply cross-domain resource sharing CORS restrictions to critical...

Siemens SICAM GridEdge Authentication Error Vulnerability (CNVD-2022-45216)

SICAM GridEdge enables IoT functionality in your existing IEC 61850 devices with just a few clicks.An authentication error vulnerability in Siemens SICAM GridEdge results from the fact that the affected software does not authenticate access to privileged functions, which can be exploited to creat...

Siemens SICAM GridEdge Authentication Error Vulnerability

SICAM GridEdge enables IoT functionality in your existing IEC 61850 devices with just a few clicks.Siemens SICAM GridEdge is vulnerable to an authentication error, which stems from the fact that the affected software does not require authenticated access to privileged functions and can be exploit...

Siemens SICAM GridEdge Resource Leakage Vulnerability

SICAM GridEdge enables your existing IEC61850 devices to have IoT functionality with just a few clicks.A resource leak vulnerability exists in Siemens SICAM GridEdge, which stems from the fact that the affected software discloses the password hash of another user upon request, which can be...

CVE-2022-31066

CVE-2022-31066 affects EdgeXFoundry up to version 2.1.1, where the /api/v2/config endpoint exposes message bus credentials to local unauthenticated users. In security-enabled mode, credentials should be stored in the secret store, but access controls are bypassed, allowing interception or injecti...

CVE-2022-22072

Buffer overflow can occur due to improper validation of NDP application information length in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music...

CVE-2022-22071

Possible use after free when process shell memory is freed using IOCTL munmap call and process initialization is in progress in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music...

CVE-2022-22083

Denial of service due to memory corruption while extracting ape header from clips in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...