The Rise of the Rookie Hacker - A New Trend to Reckon With

More zero knowledge attacks, more leaked credentials, more Gen-Z cyber crimes - 2022 trends and 2023 predictions. Cybercrime remains a major threat to individuals, businesses, and governments around the world. Cybercriminals continue to take advantage of the prevalence of digital devices and the...

Vulnerable SDK components lead to supply chain risks in IoT and OT environments

December 8, 2022 update - Reflected additional research on Boa-related CVEs and updated supply chain diagram. Vulnerabilities in network components, architecture files, and developer tools have become increasingly popular attack vectors to gain access into secure networks and devices. External...

Threat Round up for November 11 to 18

Today, Talos is publishing a glimpse into the most prevalent threats weve observed between Nov. 11 and Nov. 18. As with previous roundups, this post isnt meant to be an in-depth analysis. Instead, this post will summarize the threats weve observed by highlighting key behavioral characteristics,...

CVE-2022-37334

Improper initialization in BIOS firmware for some IntelR NUC 11 Pro Kits and IntelR NUC 11 Pro Boards before version TNTGL357.0064 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-37345

Improper authentication in BIOS firmwareA1 for some IntelR NUC Kits before version RY0386 may allow an authenticated user to potentially enable escalation of privilege via local access...

Privilege escalation

Insecure inherited permissions in some IntelR Wireless Adapter Driver installation software for IntelR NUC Kits & Mini PCs before version 22.190.0.3 for Windows may allow an authenticated user to potentially enable escalation of privilege via local access...

Authentication flaw

Improper authentication in BIOS firmwareA1 for some IntelR NUC Kits before version RY0386 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-36377

Insecure inherited permissions in some IntelR Wireless Adapter Driver installation software for IntelR NUC Kits & Mini PCs before version 22.190.0.3 for Windows may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-36377

Intel CVE-2022-36377: Insecure inherited permissions in the Intel(R) Wireless Adapter Driver installer for Intel NUC Kits & Mini PCs on Windows may allow an authenticated user to escalate privileges locally. Affected versions prior to 22.190.0.3; mitigation is to update to 22.190.0.3 or later. In...

CVE-2022-36377

Insecure inherited permissions in some IntelR Wireless Adapter Driver installation software for IntelR NUC Kits & Mini PCs before version 22.190.0.3 for Windows may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-37334

CVE-2022-37334 covers an issue in BIOS firmware for some Intel NUC 11 Pro Kits and NUC 11 Pro Boards, where improper initialization in affected BIOS versions prior to TNTGL357.0064 may allow an authenticated local user to escalate privileges. The Red Hat/CVE records and Intel advisory detail the ...

CVE-2022-37345

CVE-2022-37345 concerns improper authentication in BIOS firmware for some Intel NUC Kits prior to version RY0386, potentially allowing an authenticated local user to escalate privileges. Affected products are Intel NUC Kits (BIOS updates RYBDWi35, RY0386, etc. listed by Intel), with the Intel adv...

CVE-2022-37345

Improper authentication in BIOS firmwareA1 for some IntelR NUC Kits before version RY0386 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-37345

Improper authentication in BIOS firmwareA1 for some IntelR NUC Kits before version RY0386 may allow an authenticated user to potentially enable escalation of privilege via local access...

Intel NUC 安全漏洞

The Intel NUC is a small minicomputer from Intel Corporation USA. A security vulnerability exists in IntelR NUC 10 Performance Kits, IntelR NUC 10 Performance Mini PCs prior to FNCML357.0053, which stems from improper access control of the BIOS firmware. An attacker can exploit the vulnerability ...

CVE-2022-37345: Improper Authentication

Improper authentication in BIOS firmwareA1 for some IntelR NUC Kits before version RY0386 may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2022-23337 · Intel +1 · Intel Nuc Kit Wireless Adapter Drivers +2

Name of the Vulnerable Software and Affected Versions: IntelR Wireless Adapter Driver installation software for IntelR NUC Kits & Mini PCs versions prior to 22.190.0.3 Intelr NUC Kit Wireless Adapter drivers for Windows 10 versions prior to 22.40 Description: The issue is related to insecure...

PT-2022-15135 · Intel · Intel Nuc Enthusiast +3

Name of the Vulnerable Software and Affected Versions: IntelR NUC Boards, IntelR NUC Business, IntelR NUC Enthusiast, IntelR NUC Kits versions before HN0067 Description: The issue is related to improper authentication in BIOS firmware, which may allow a privileged user to potentially enable...

CVE-2022-36370: Improper Authentication

Improper authentication in BIOS firmware for some IntelR NUC Boards and IntelR NUC Kits before version MYi30060 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-26124: Improper Restriction of Operations within the Bounds of a Memory Buffer

Improper buffer restrictions in BIOS firmware for some IntelR NUC Boards, IntelR NUC 8 Boards, IntelR NUC 8 Rugged Boards and IntelR NUC 8 Rugged Kits before version CHAPLCEL.0059 may allow a privileged user to potentially enable escalation of privilege via local access...