EUVD-2018-11086

Malware in sbrugna...

EUVD-2018-11084

Malware in sbrugna...

EUVD-2018-11085

Malware in sbrugna...

EUVD-2018-11087

Malware in sbrugna...

Cobham SATCOM SAILOR VSAT 跨站脚本漏洞

Cobham SATCOM SAILOR VSAT is a range of maritime satellite communications products from Cobham SATCOM, UK. A cross-site scripting vulnerability exists in Cobham SATCOM SAILOR VSAT Ku version v.164B019, which originates from a vulnerability that allows remote attackers to execute arbitrary code...

Cobham SATCOM SAILOR VSAT 跨站脚本漏洞

Cobham SATCOM SAILOR VSAT is a range of maritime satellite communications products from Cobham SATCOM, UK. A cross-site scripting vulnerability exists in Cobham SATCOM SAILOR VSAT Ku version v.164B019, which originates from a vulnerability that allows remote attackers to execute arbitrary code vi...

Cobham SATCOM SAILOR VSAT 跨站脚本漏洞

Cobham SATCOM SAILOR VSAT is a range of maritime satellite communications products from Cobham SATCOM, UK. A cross-site scripting vulnerability exists in Cobham SATCOM SAILOR VSAT Ku version v.164B019, which originates from a vulnerability that allows remote attackers to execute arbitrary code...

Cobham SATCOM SAILOR VSAT 跨站脚本漏洞

Cobham SATCOM SAILOR VSAT is a range of maritime satellite communications products from Cobham SATCOM, UK. A cross-site scripting vulnerability exists in Cobham SATCOM SAILOR VSAT Ku version v.164B019, which originates from a vulnerability that allows remote attackers to execute arbitrary code vi...

A week in security (May 9 – 15)

Last week on Malwarebytes Labs: How to spot the signs of a virtual kidnap scam Virtual credit cards coming to Chrome: What you need to know Clearview AI banned from selling facial recognition data in the US Cyberattacks on SATCOM networks attributed to Russian threat actors F5 BIG-IP vulnerabilit...

Cyberattacks on SATCOM networks attributed to Russian threat actors

The Cybersecurity & Infrastructure Security Agency CISA and the Federal Bureau of Investigation FBI have updated their joint cybersecurity advisory, Strengthening Cybersecurity of SATCOM Network Providers and Customers, originally released March 17, 2022, with US government attribution to Russian...

Strengthening Cybersecurity of SATCOM Network Providers and Customers

Summary Updated May 10, 2022: The U.S. government attributes this threat activity to Russian state-sponsored malicious cyber actors. Additional information may be found in a statement from the State Department . For more information on Russian malicious cyber activity, refer to...

U.S. Government Attributes Cyberattacks on SATCOM Networks to Russian State-Sponsored Malicious Cyber Actors

CISA and the Federal Bureau of Investigation FBI have updated the joint cybersecurity advisory, Strengthening Cybersecurity of SATCOM Network Providers and Customers, originally released March 17, 2022, with U.S. government attribution to Russian state-sponsored malicious cyber actors. The United...

Satellites are critical infrastructure and need to be cybersecured

In the context of this article we will use the term satellite for a machine that is launched into space and moves around Earth. And there might be a lot more of them than you would expect—this live map tracks a huge number of satellites. Originally most of earth’s satellites were launched for...

U.S. Government Warns Companies of Potential Russian Cyber Attacks

The U.S. government on Monday once again cautioned of potential cyber attacks from Russia in retaliation for economic sanctions imposed by the west on the country following its military assault on Ukraine last month. "It's part of Russia's playbook," U.S. President Joe Biden said in a statement,...

Targeting Satellite? CISA, FBI Warns of Attacks on SATCOM Network Providers

By Deeba Ahmed This advisory comes amid an investigation spearheaded by investigation teams from the US and Europe regarding service outages… This is a post from HackRead.com Read the original post: Targeting Satellite? CISA, FBI Warns of Attacks on SATCOM Network Providers...

Strengthening Cybersecurity of SATCOM Network Providers and Customers

CISA and the Federal Bureau of Investigation FBI are aware of possible threats to U.S. and international satellite communications SATCOM networks. Successful intrusions into SATCOM networks could create additional risk for SATCOM network customer environments. In response, CISA and FBI have...

Where’s the Russia-Ukraine Cyberwar?

It has been interesting to notice how unimportant and ineffective cyber operations have been in the Russia-Ukraine war. Russia launched a wiper against Ukraine at the beginning, but it was found and neutered. Near as I can tell, the only thing that worked was the disabling of regional KA-SAT SATC...

DEF CON 28: Introduction to ACARS

This post is a companion to the DEF CON 28 video available here What is ACARS? ACARS Aircraft Communications Addressing and Reporting System, pronounced ‘ay-cars’ which is an avionics system used to for sending text messages between ground and airborne stations. This is a light touch on the topic...

Out Of Band, Out Of Sight, Out Of Mind

Satellite receivers aboard maritime vessels can be tricky things to manage, yet are crucial to efficient operations of modern drilling rigs and ships. Particularly on rigs, it’s not that unusual for a receiver dish to be knocked out of alignment during drilling operations. Lose satcoms and you’re...

CVE-2018-19394

Cobham Satcom Sailor 800 and 900 devices contained persistent XSS, which required administrative access to exploit. The vulnerability was exploitable by acquiring a copy of the device's configuration file, inserting an XSS payload into a relevant field e.g., Satellite name, and then restoring the...