MediaTek Chip Security Breach

MediaTek chips are a variety of chips from MediaTek, a Chinese company. A security vulnerability exists in the MediaTek chips, which stems from a lack of boundary checking in the TVAPI module, which may result in out-of-bounds writes...

Thousands of Stolen AnyDesk Login Credentials Sold on Dark Web

By Waqas It's crucial to note that this sale of compromised AnyDesk accounts isn't connected to the security breach incident disclosed by the company on February 2, 2024. This is a post from HackRead.com Read the original post: Thousands of Stolen AnyDesk Login Credentials Sold on Dark Web...

moonmoon security breach

moonmoon is a web-based aggregator similar to Planetplanet. It can be used to mix posts from different blogs with the same interests into a single page. A security vulnerability exists in moonmoon, which stems from an incorrect comparison of the auth parameter on the admin/inc/auth.inc.php page...

AnyDesk Urges Password Change Amid Security Breach

By Deeba Ahmed Another day, another security breach. This is a post from HackRead.com Read the original post: AnyDesk Urges Password Change Amid Security Breach...

HCL Technologies HCL Launch Security Breach

HCL Technologies HCL Launch is a versatile, enterprise-grade continuous delivery automation software from HCL Technologies, Inc. for handling the most complex deployment processes in DevOps. A security vulnerability exists in HCL DevOps Deploy and HCL Launch UCD that stems from the ability to...

MAL-2024-950 Malicious code in diil-selfservice-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware be3632254a6cd21edaffb63ace342ea00667ca30b7c8f9d01f929d76932adfb9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Qiyu iFair Security Breach

Qiyu iFair is a business management software from Qiyu Inc. A security vulnerability exists in Qiyu iFair version 23.8ad0 and prior versions. A remote attacker can exploit this vulnerability to obtain sensitive information via the uploadimage component...

Microsoft Executives Hacked

Microsoft is reporting that a Russian intelligence agency--the same one responsible for SolarWinds--accessed the email system of the companys executives. Beginning in late November 2023, the threat actor used a password spray attack to compromise a legacy non-production test tenant account and ga...

Notion Security Breach

Notion is an application from Notion that integrates notes, knowledgebase, datagrid, kanban, calendar, and other capabilities into one application. A security vulnerability exists in Notion prior to version 3.1.0 that stems from arbitrary code execution via the RunAsNode and...

Discord Security Breach

Discord is a free chat service from Discord Inc. A security vulnerability previously existed in Discord version 0.0.291, which stemmed from arbitrary code execution via the RunAsNode and enableNodeClilnspectArguments settings...

a-blog cms security breach

a-blog cms is a Japanese content management system CMS. A security vulnerability exists in a-blog cms that originates from a user with Contributor or higher privileges being able to execute arbitrary scripts on the user's web browser. The following products and versions are affected: a-blog cms...

23andMe Failed to Detect Account Intrusions for Months

Plus: North Korean hackers get into generative AI, a phone surveillance tool that can monitor billions of devices gets exposed, and ambient light sensors pose a new privacy risk...

Microsoft Warns of Widening APT29 Espionage Attacks Targeting Global Orgs

Microsoft on Thursday said the Russian state-sponsored threat actors responsible for a cyber attack on its systems in late November 2023 have been targeting other organizations and that it's currently beginning to notify them. The development comes a day after Hewlett Packard Enterprise HPE...

ShopSite Security Breach

ShopSite is an online store from ShopSite Inc. A security vulnerability exists in ShopSite v14.0, which stems from an arbitrary file upload vulnerability in the component /alsdemo/ss/mediam.cgi that allows an attacker to execute arbitrary code by uploading a specially crafted SVG file...

LinkWeChat Security Breach

LinkWeChat is an open source SCRM system based on enterprise WeChat. A security vulnerability exists in LinkWeChat version 5.1.0, which stems from the parameter name in the file /linkwechat-api/common/download/resource that causes path traversal...

MAL-2024-901 Malicious code in wlwz-2312-8102 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38d4ba8d8347a741afe930d1a57480d1b2674554816cfec9be4f6b247db6b2a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-759 Malicious code in wlwz-2312-6504 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 29bf7c8ee72f6e6364abd7b7fcdc739c1e8786eac6d0445b7b558afa32dc21a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-763 Malicious code in wlwz-2312-6508 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 684c80c9199b5e09903a30dc5ae3a2b20a2986e9a88321451fd678adc5bfaf16 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-600 Malicious code in wlwz-2312-4707 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9570305fd15aa43d32dfa404dc8e107b9af226559abd3c1781e32d3672a96536 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-331 Malicious code in wlwz-2312-1708 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b00585b27b904bc0a6e2ad2a6766cd0c85a1a85413b7cb4d021533909f014f45 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...