569 matches found
CVE-2023-32155
CVE-2023-32155 pertains to Tesla Model 3 and the bcmdhd Wi‑Fi driver. The root cause is lack of validation of user-supplied data, enabling an out‑of‑bounds write that can escalate privileges. Attack requires local code execution on the device’s Wi‑Fi subsystem and can lead to arbitrary kernel cod...
CVE-2023-32156 Tesla Model 3 Gateway Firmware Signature Validation Bypass Vulnerability
Tesla Model 3 Gateway Firmware Signature Validation Bypass Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Tesla Model 3 vehicles. An attacker must first obtain the ability to execute privileged code on the Tesla infotainment system in ord...
CVE-2023-32155 Tesla Model 3 bcmdhd Out-Of-Bounds Write Local Privilege Escalation Vulnerability
Tesla Model 3 bcmdhd Out-Of-Bounds Write Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected Tesla Model 3 vehicles. An attacker must first obtain the ability to execute code on the wifi subsystem in order to exploit this...
Tesla Model 3 安全漏洞
Tesla Model 3 is an electric vehicle from the American company Tesla Tesla. A security vulnerability exists in Tesla Model 3 that stems from a specific flaw in the bcmdhd driver that lacks proper validation of user-supplied data...
Tesla Model 3 安全漏洞
The Tesla Model 3 is an electric vehicle from the American company Tesla. A security vulnerability exists in Tesla Model 3, which stems from a specific flaw in a firmware update, where errors were mishandled during the update process, and can be exploited by an attacker to execute code in the...
Tesla Model 3 安全漏洞
The Tesla Model 3 is an electric vehicle from the American company Tesla. A security vulnerability exists in the Tesla Model 3 that stems from a specific flaw in the bsaserver process that lacks proper validation of the length of user-supplied data before copying it to a heap-based fixed-length...
TA558 Hackers Weaponize Images for Wide-Scale Malware Attacks
The threat actor tracked as TA558 has been observed leveraging steganography as an obfuscation technique to deliver a wide range of malware such as Agent Tesla, FormBook, Remcos RAT, LokiBot, GuLoader, Snake Keylogger, and XWorm, among others. "The group made extensive use of steganography by...
Tracing the Footprints of Agent Tesla’s Conspirators
...
Alert: New Phishing Attack Delivers Keylogger Disguised as Bank Payment Notice
A new phishing campaign has been observed leveraging a novel loader malware to deliver an information stealer and keylogger called Agent Tesla. Trustwave SpiderLabs said it identified a phishing email bearing this attack chain on March 8, 2024. The message masquerades as a bank payment...
Pwn2Own 2024 Awards $700k as Hackers Pwn Tesla, Browsers, and More
By Deeba Ahmed Pwn2Own is back! This is a post from HackRead.com Read the original post: Pwn2Own 2024 Awards $700k as Hackers Pwn Tesla, Browsers, and More...
Savvy Seahorse Using Fake ChatGPT, Facebook Ads in DNS Investment Scam
By Deeba Ahmed The scammers creates fake investment platforms using popular companies like Tesla, Meta, and Imperial Oil and lures unsuspecting users into depositing funds. This is a post from HackRead.com Read the original post: Savvy Seahorse Using Fake ChatGPT, Facebook Ads in DNS Investment S...
Hackers Crack Tesla Twice, Rake in $1.3 Million at Pwn2Own Automotive
By Deeba Ahmed Vendors have 90 days to release security patches before Trend Micro publicly discloses it. This is a post from HackRead.com Read the original post: Hackers Crack Tesla Twice, Rake in $1.3 Million at Pwn2Own Automotive...
Pwn2Own Automotive: Tesla, Sony, Alpine Players Breached on Day One
By Deeba Ahmed Bug Bounty Bonanza: Hackers Rake in Big Bucks as Connected Cars Show Security Cracks. This is a post from HackRead.com Read the original post: Pwn2Own Automotive: Tesla, Sony, Alpine Players Breached on Day One...
Researchers Crack Tesla Autopilot with ‘Elon Mode,’ Access Critical Data
By Deeba Ahmed German cybersecurity researchers from Technische Universität Berlin employed a €600 £520 - $660 tool to gain root access to the ARM64-based circuit board of Tesla's autopilot. This is a post from HackRead.com Read the original post: Researchers Crack Tesla Autopilot with Elon Mode,...
Hackers Exploiting MS Excel Vulnerability to Spread Agent Tesla Malware
Attackers are weaponizing an old Microsoft Office vulnerability as part of phishing campaigns to distribute a strain of malware called Agent Tesla. The infection chains leverage decoy Excel documents attached in invoice-themed messages to trick potential targets into opening them and activate the...
The vulnerability of NVIDIA GeForce, Studio, RTX/Quadro, NVS, and Tesla graphics processors’ microprogramming software is related to an uncontrollable element in the search process, allowing attackers to exploit their privileges.
The vulnerability of NVIDIA GeForce, Studio, RTX/Quadro, NVS, and Tesla graphics processors’ microprogramming software is related to an uncontrollable element in the update process. Exploiting this vulnerability can allow attackers to enhance their privileges...
New Agent Tesla Malware Variant Using ZPAQ Compression in Email Attacks
A new variant of the Agent Tesla malware has been observed delivered via a lure file with the ZPAQ compression format to harvest data from several email clients and nearly 40 web browsers. "ZPAQ is a file compression format that offers a better compression ratio and journaling function compared t...
Sophisticated Phishing Campaign Deploying Agent Tesla, OriginBotnet, and RedLine Clipper
A sophisticated phishing campaign is using a Microsoft Word document lure to distribute a trifecta of threats, namely Agent Tesla, OriginBotnet, and RedLine Clipper, to gather a wide range of information from compromised Windows machines. "A phishing email delivers the Word document as an...
Agent Tesla’s New Variant Spreads Through Crafted Excel Files
Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary A phishing campaign has surfaced, disseminating a new iteration of the Agent Tesla malware through a meticulously crafted Microsoft Excel document. This document exploits a longstanding memory corruption...
New Agent Tesla Variant Uses Excel Exploit to Infect Windows PCs
By Deeba Ahmed FortiGuard Discovers Phishing Campaign Distributing New Agent Tesla Variant to Windows Devices. This is a post from HackRead.com Read the original post: New Agent Tesla Variant Uses Excel Exploit to Infect Windows PCs...