PT-2018-01: Information Exposure in PHOENIX CONTACT FL SWITCH

The specialists of the Positive Research center have detected an Information Exposure vulnerability in PHOENIX CONTACT FL SWITCH. An Information Exposure issue in PHOENIX CONTACT FL SWITCH products allows remote unauthenticated attackers to read diagnostic information using Monitor Mode on the...

PT-2017-56: Cross-Site Scripting in Kaspersky Security Center 10

The specialists of the Positive Research center have detected a Cross-Site Scripting in Kaspersky Security Center 10. DOM-based cross-site scripting vulnerability in the Web Console for Kaspersky Security Center 10 allows unauthorized attackers to access some product functionality and execute...

3 New CIA-developed Hacking Tools For MacOS & Linux Exposed

WikiLeaks has just published a new set of classified documents linked to another CIA project, dubbed 'Imperial,' which reveals details of at least three CIA-developed hacking tools and implants designed to target computers running Apple Mac OS X and different flavours of Linux operating systems. ...

Mirion Technologies Telemetry Enabled Devices

CVSS v3 5.0 Vendor: Mirion Technologies Equipment: Telemetry Enabled Devices Vulnerabilities: Use of Hard-Coded Cryptographic Key, Inadequate Encryption Strength AFFECTED PRODUCTS The following telemetry enabled devices are affected: DMC 3000 Transmitter Module, iPam Transmitter f/DMC 2000, RDS-3...

Google Detects Dangerous Spyware Apps On Android Play Store

Security researchers at Google have discovered a new family of deceptive Android spyware that can steal a whole lot of information on users, including text messages, emails, voice calls, photos, location data, and other files, and spy on them. Dubbed Lipizzan, the Android spyware appears to be...

“The 101” – Episode 3 – How Do Different Types of Antivirus Work?

We’re back with another episode of The 101! This weekly security series aims to define endpoint security one question at a time. Tune in each week as we tackle a new term, concept, or comparison in our ongoing effort to cut through the noise and provide clear definitions. For the past few decades...

Announcing the Windows Bounty Program

Windows 10 represents the best and newest in our strong commitment to security with world-class mitigations. One of Microsoft’s longstanding strategies toward improving software security involves investing in defensive technologies that make it difficult and costly for attackers to find, exploit...

PT-2017-12: Buffer Overflow in Intel Management Engine

The specialists of the Positive Research center have detected a Buffer Overflow vulnerability in Intel Management Engine. Multiple buffer overflows in Intel Manageability Engine Firmware, Server Platform Services Firmware, and Trusted Execution Engine Firmware allow attackers with local access to...

Girls Who Code Summer Immersion Program - Week One

Written by Lisa Adams The Girls Who Code Summer Immersion program at Akamai Technologies is off to a great start! During Week 1 we welcomed the class of 20 girls and the teaching team of three instructors from Girls Who Code. The girls began learning how to program in the Scratch language, and...

The Future of Forgeries

This article argues that AI technologies will make image, audio, and video forgeries much easier in the future. Combined, the trajectory of cheap, high-quality media forgeries is worrying. At the current pace of progress, it may be as little as two or three years before realistic audio forgeries...

Petya Is Not Ransomware, It's a 'Wiper'

The outbreak of the ExPetr malware isn’t a ransomware attack, but more precisely, it’s a wiper attack that sabotaged PCs globally, overwriting their Master Boot Record forever. That’s the analysis of security experts from Kaspersky Lab and Comae Technologies who shared their latest research on th...

A week in security (June 19 – June 25)

Last week, we expanded on all the different technologies that Malwarebytes uses to break the attack chain and our Incident Response solution. We also warned you about a Roblox Robux generator scam and a phish targeting customers of Barclays Bank. Below are notable news stories and security-relate...

PT-2018-33: Arbitrary Code Execution in NCR S2

The specialists of the Positive Research center have detected an Arbitrary Code Execution vulnerability in NCR S2. Vulnerability in the NCR S2 Dispenser controller, related to insufficient protection of the memory write mechanism, allows unauthenticated, remote attackers to execute arbitrary code...

Why So Many Top Hackers Hail from Russia

Conventional wisdom says one reason so many hackers seem to hail from Russia and parts of the former Soviet Union is that these countries have traditionally placed a much greater emphasis than educational institutions in the West on teaching information technology in middle and high schools, and...

ProtonMail Launches Free VPN Service

Encrypted email service ProtonMail announced today it was launching a free VPN service called ProtonVPN. Developers said the move comes following one year of development and four months of beta testing by 10,000 ProtonMail community members. According to Proton Technologies AG, the company behind...

Mexican Journalists, Lawyers Focus of Government Spyware

Dozens of Mexican journalists, lawyers, and even a child, had their devices infected with commercially produced spyware during the past two years as part of an overarching campaign believed to be carried out by the nation’s government. The spyware, Pegasus, came in the form of text messages...

EnGenius EnShare IoT Gigabit Cloud Service 1.4.11 Root Remote Code Execution

!/usr/bin/env python coding: utf8 EnGenius EnShare IoT Gigabit Cloud Service 1.4.11 Root Remote Code Execution Vendor: EnGenius Technologies Inc. Product web page: https://www.engeniustech.com Affected version: ESR300 1.4.9, 1.4.7, 1.4.2, 1.4.1.28, 1.4.0, 1.3.1.42, 1.1.0.28 ESR350 1.4.11, 1.4.9,...

Phoenix Broadband Technologies LLC PowerAgent SC3 Site Controller Security Bypass Vulnerability

Phoenix Broadband Technologies LLC PowerAgent SC3 is an American company Phoenix Technologies LLC has launched a monitoring product. A security bypass vulnerability exists in the Phoenix Broadband Technologies LLC PowerAgent SC3 Site Controller, which can be exploited by an attacker to bypass...

PT-2018-31: XXE Injection in Cisco Secure ACS

The specialists of the Positive Research center have detected an XXE Injection vulnerability in Cisco Secure ACS. A vulnerability in the web-based user interface of the Cisco Secure Access Control Server, due to improper handling of XML External Entities XXEs when parsing an XML file, could allow...

Phoenix Broadband Technologies LLC PowerAgent SC3 Site Controller

CVSS v3 5.3 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Phoenix Broadband Technologies LLC Equipment: PowerAgent SC3 Site Controller Vulnerability: Use of Hard-Coded Password AFFECTED PRODUCTS Phoenix Broadband Technologies LLC reports that the following versions of...