519 matches found
WordPress Plugin Style Kits 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...
Threat Roundup for June 2 to June 9
Today, Talos is publishing a glimpse into the most prevalent threats weve observed between June 2 and June 9. As with previous roundups, this post isnt meant to be an in-depth analysis. Instead, this post will summarize the threats weve observed by highlighting key behavioral characteristics,...
Exploit for Integer Underflow (Wrap or Wraparound) in Microsoft
" CVE-2021-31956" WIP PoC code for CVE-2021-31956 in preparat...
New Phishing-as-a-Service Platform Lets Cybercriminals Generate Convincing Phishing Pages
A new phishing-as-a-service PhaaS or PaaS platform named Greatness has been leveraged by cybercriminals to target business users of the Microsoft 365 cloud service since at least mid-2022, effectively lowering the bar to entry for phishing attacks. "Greatness, for now, is only focused on Microsof...
Threat Roundup for May 5 to May 12
Today, Talos is publishing a glimpse into the most prevalent threats weve observed between May 5 and May 12. As with previous roundups, this post isnt meant to be an in-depth analysis. Instead, this post will summarize the threats weve observed by highlighting key behavioral characteristics,...
CVE-2022-34147
Improper input validation in BIOS firmware for some IntelR NUC 9 Extreme Laptop Kits, IntelR NUC Performance Kits, IntelR NUC Performance Mini PC, IntelR NUC 8 Compute Element, IntelR NUC Pro Kit, IntelR NUC Pro Board, and IntelR NUC Compute Element may allow a privileged user to potentially enab...
CVE-2022-32577
Improper input validation in BIOS Firmware for some IntelR NUC Kits before version PY0081 may allow a privileged user to potentially enable information disclosure or denial of service via local access...
CVE-2022-32577
Improper input validation in BIOS Firmware for some IntelR NUC Kits before version PY0081 may allow a privileged user to potentially enable information disclosure or denial of service via local access...
CVE-2022-32577
Improper input validation in BIOS Firmware for some IntelR NUC Kits before version PY0081 may allow a privileged user to potentially enable information disclosure or denial of service via local access...
CVE-2022-32577
CVE-2022-32577 affects Intel NUC BIOS firmware prior to PY0081. The issue is improper input validation in BIOS firmware that may allow a privileged local attacker to cause information disclosure or denial of service. The impact is noted as Confidentiality High and Availability High on affected co...
PT-2023-13082 · Intel · Intel Nuc Kit
Name of the Vulnerable Software and Affected Versions: IntelR NUC Kits versions prior to PY0081 Description: The issue is related to improper input validation in BIOS Firmware, which may allow a privileged user to potentially enable information disclosure or denial of service via local access...
Researchers Uncover Thriving Phishing Kit Market on Telegram Channels
In yet another sign that Telegram is increasingly becoming a thriving hub for cybercrime, researchers have found that threat actors are using the messaging platform to peddle phishing kits and help set up phishing campaigns. "To promote their 'goods,' phishers create Telegram channels through whi...
The Telegram phishing market
Telegram has been gaining popularity with users around the world year by year. Common users are not the only ones who have recognized the messaging apps handy features — cybercrooks have already made it a branch of the dark web, their Telegram activity soaring since late 2021. The service is...
Threat Round up for February 10 to February 17
Today, Talos is publishing a glimpse into the most prevalent threats weve observed between Feb. 10 and Feb. 17. As with previous roundups, this post isnt meant to be an in-depth analysis. Instead, this post will summarize the threats weve observed by highlighting key behavioral characteristics,...
New Ransomware Variants Created Using Leaked Conti Source Code
Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary The leaked source code of the Conti ransomware has been used to create new strains of the ransomware. These new strains include Putin Team, ScareCrow, BlueSky, and Meow ransomware are being distributed...
The Rise of the Rookie Hacker - A New Trend to Reckon With
More zero knowledge attacks, more leaked credentials, more Gen-Z cyber crimes - 2022 trends and 2023 predictions. Cybercrime remains a major threat to individuals, businesses, and governments around the world. Cybercriminals continue to take advantage of the prevalence of digital devices and the...
Vulnerable SDK components lead to supply chain risks in IoT and OT environments
December 8, 2022 update - Reflected additional research on Boa-related CVEs and updated supply chain diagram. Vulnerabilities in network components, architecture files, and developer tools have become increasingly popular attack vectors to gain access into secure networks and devices. External...
Threat Round up for November 11 to 18
Today, Talos is publishing a glimpse into the most prevalent threats weve observed between Nov. 11 and Nov. 18. As with previous roundups, this post isnt meant to be an in-depth analysis. Instead, this post will summarize the threats weve observed by highlighting key behavioral characteristics,...
CVE-2022-37334
Improper initialization in BIOS firmware for some IntelR NUC 11 Pro Kits and IntelR NUC 11 Pro Boards before version TNTGL357.0064 may allow an authenticated user to potentially enable escalation of privilege via local access...
