The vulnerability of the Install component (developed by Dave Gamble/cJSON) in the Oracle TimesTen In-Memory Database application-level database allows a attacker to cause a service failure.

The vulnerability of the Install component developed by Dave Gamble/cJSON in the Oracle TimesTen In-Memory Database, a relational database at the application level, is related to insufficient checking of exceptional states. Exploiting this vulnerability could allow an attacker to cause service...

North Korea-Backed Spy Group Poses as Reporters in Spearphishing Attacks, Feds Warn

The North Korean advanced persistent threat APT group known as Kimsuky is actively attacking commercial-sector businesses, often by posing as South Korean reporters, according to an alert from the U.S. Cybersecurity and Infrastructure Security Agency CISA. Kimsuky a.k.a. Hidden Cobra has been...

Rockwell Automation 1794-AENT Flex I/O Series B

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Rockwell Automation Equipment: 1794-AENT Flex I/O Series B Vulnerabilities: Classic Buffer Overflow 2. RISK EVALUATION Successful exploitation of these vulnerabilities could crash the device being...

The vulnerability of the Cisco IOS XE operating system, related to insufficient checking of unusual or exceptional states, allows a intruder to trigger a service failure.

The vulnerability of the Cisco IOS XE operating system is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability can allow a remote attacker to cause service failures...

The vulnerability of the Ethernet OAM component of the JunOS operating system, which allows a hacker to trigger a maintenance failure.

The vulnerability of the JunOS operating system’s Ethernet component is related to deficiencies in handling exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

Russian Who Hacked LinkedIn, Dropbox Sentenced to 7 Years in Prison

A Russian hacker who was found guilty of hacking LinkedIn, Dropbox, and Formspring over eight years ago has finally been sentenced to 88 months in United States prison, that's more than seven years by a federal court in San Francisco this week. Yevgeniy Aleksandrovich Nikulin, 32, of Moscow hacke...

The vulnerability of the JunOS operating system, related to deficiencies in handling exceptional states, allows a perpetrator to trigger a service failure.

The vulnerability of the JunOS operating system is related to deficiencies in handling exceptional states. Exploiting this vulnerability allows a malicious actor to trigger a service failure through a specially crafted BGP UPDATE message...

Chinese APT Group Targets Media, Finance, and Electronics Sectors

Cybersecurity researchers on Tuesday uncovered a new espionage campaign targeting media, construction, engineering, electronics, and finance sectors in Japan, Taiwan, the U.S., and China. Linking the attacks to Palmerworm aka BlackTech — likely a China-based advanced persistent threat APT —...

TikTok Global – Trump Demanded Full TikTok Ownership

By Uzair Amir How much do you know about the TikTok ban? Will, the United States take ownership rights? Can a VPN bypass the ban? Find out all about it here! This is a post from HackRead.com Read the original post: TikTok Global – Trump Demanded Full TikTok Ownership...

Taurus Project stealer now spreading via malvertising campaign

For the past several months, Taurus Project—a relatively new stealer that appeared in the spring of 2020—has been distributed via malspam campaigns targeting users in the United States. The macro-laced documents spawn a PowerShell script that invokes certutil to run an autoit script ultimately...

The vulnerability of the Linux kernel driver of the Intel FPGA SDK for OpenCL utility package allows a hacker to cause a service failure.

The vulnerability of the Linux kernel driver of the Intel FPGA SDK for OpenCL utility package is related to insufficient testing of exception states. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of Intel microprogramming software relates to insufficient testing of privileged states, allowing attackers to enhance their privileges, cause system failures, or gain access to protected information.

The vulnerability of Intel microprogramming software is related to insufficient testing of exception states. Exploiting this vulnerability can allow attackers to enhance their privileges, cause system failures, or gain access to protected information...

Advantech WebAccess Node

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low skill level to exploit Vendor: Advantech Equipment: WebAccess Node Vulnerability: Incorrect Permission Assignment for Critical Resource 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to escalate their...

2 Hackers Charged for Defacing Sites after U.S. Airstrike Killed Iranian General

The US Department of Justice DoJ on Tuesday indicted two hackers for their alleged involvement in defacing several websites in the country following the assassination of Iranian major general Qasem Soleimani earlier this January. Behzad Mohammadzadeh aka Mrb3hz4d, 19, and Marwan Abusrour aka...

QakBot Banking Trojan Returned With New Sneaky Tricks to Steal Your Money

A notorious banking trojan aimed at stealing bank account credentials and other financial information has now come back with new tricks up its sleeve to target government, military, and manufacturing sectors in the US and Europe, according to new research. In an analysis released by Check Point...

The vulnerability of the check_ignored() function in the Apport error logging service allows a violator to trigger a service failure.

The vulnerability of the checkignored function in the apport/report.py file of the Apport error reporting service is related to improper handling of exceptional states. Exploiting this vulnerability could allow an attacker to cause a service failure...

DDoS attacks in Q2 2020

News overview Not just one but two new DDoS amplification methods were discovered last quarter. In mid-May, Israeli researchers reported a new DNS server vulnerability that lurks in the DNS delegation process. The vulnerability exploitation scheme was dubbed "NXNSAttack". The hacker sends to a...

Capital One Fined $80 Million for 2019 Data Breach Affecting 106 Million Users

A United States regulator has fined the credit card provider Capital One Financial Corp with $80 million over last year's data breach that exposed the personal information of more than 100 million credit card applicants of Americans. The fine was imposed by the Office of the Comptroller of the...

Black Hat 2020: Influence Campaigns Are a Cybersecurity Problem

Social media used as a cudgel for nation-states to sway opinion is a cybersecurity threat CISOs can’t ignore — and need to understand better and mitigate against. That’s the message from Renée DiResta, research manager at the Stanford Internet Observatory, who said she is seeing a steady growth a...

QSnatch Data-Stealing Malware Infected Over 62,000 QNAP NAS Devices

Cybersecurity agencies in the US and UK yesterday issued a joint advisory about a massive ongoing malware threat infecting Taiwanese company QNAP's network-attached storage NAS appliances. Called QSnatch or Derek, the data-stealing malware is said to have compromised 62,000 devices since reports...