U.S. Charges Ukrainian Hacker for Kaseya Attack; Seizes $6 Million from REvil Gang

The U.S. government on Monday charged a Ukrainian suspect, arrested in Poland last month, with deploying REvil ransomware to target multiple businesses and government entities in the country, including perpetrating the attack against software company Kaseya, marking the latest action to crack dow...

enrolltexasiz.dshs.texas.gov Cross Site Scripting vulnerability OBB-2189235

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

texascommunitypropane.com Improper Access Control vulnerability OBB-2182033

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

The vulnerability in the implementation of the HeapMem_allocUnprotected() function (tirtos/packages/ti/sysbios/heaps/HeapMem.c) of the software development kit for microcontroller families SimpleLink (CC13XX, CC26XX, CC32XX, and MSP432E4) allows a attacker to execute arbitrary code or cause a service failure.

The vulnerability of the HeapMemallocUnprotected function implementation tirtos/packages/ti/sysbios/heaps/HeapMem.c in the software development kit for microcontroller families SimpleLink CC13XX, CC26XX, CC32XX, and MSP432E4 is caused by a numerical overflow. Exploiting this vulnerability could...

Texas Instruments Ble Stack 安全漏洞

Texas Instruments Ble Stack is a low-power Bluetooth software stack from Texas Instruments, USA. A security vulnerability exists in Texas Instruments Ble Stack. No information about this vulnerability is available at this time, so please stay tuned to CNNVD or the vendor's announcement...

Friday Squid Blogging: Ram’s Horn Squid Shells

You can find rams horn squid shells on beaches in Texas and presumably elsewhere. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Read my blog posting guidelines here...

Anonymous Leaked a Bunch of Data From a Right-Wing Web Host

The hacktivist collective targeted the domain registrar Epik for providing services to clients including the Texas GOP, Parler, and 8chan...

Upcoming Speaking Engagements

This is a current list of where and when I am scheduled to speak: I’m keynoting CIISec Live—an all-online event—September 15-16, 2021. I’m speaking at the Infosecurity Magazine EMEA Autumn Online Summit on September 21, 2021. I’m speaking at the Cybersecurity and Data Privacy Law Conference in...

Anonymous hacks Texas Republican Party website against abortion law

By Waqas The Texas Republican Party is now asking for donations to secure its website from further attacks from Anonymous and "Pro-abortion activists." This is a post from HackRead.com Read the original post: Anonymous hacks Texas Republican Party website against abortion law...

A Texas Abortion ‘Whistleblower’ Site Still Can't Find a Host

Even the most extreme internet infrastructure providers have turned their backs on the website for violating their terms of service...

CVE-2021-34149

The Bluetooth Classic implementation on the Texas Instruments CC256XCQFN-EM does not properly handle the reception of continuous LMPAURand packets, allowing attackers in radio range to trigger a denial of service deadlock of the device by flooding it with LMPAURand packets after the paging...

Information disclosure

The Bluetooth Classic implementation on the Texas Instruments CC256XCQFN-EM does not properly handle the reception of continuous LMPAURand packets, allowing attackers in radio range to trigger a denial of service deadlock of the device by flooding it with LMPAURand packets after the paging...

CVE-2021-34149

The Bluetooth Classic implementation on the Texas Instruments CC256XCQFN-EM does not properly handle the reception of continuous LMPAURand packets, allowing attackers in radio range to trigger a denial of service deadlock of the device by flooding it with LMPAURand packets after the paging...

CVE-2021-34149

The CVE-2021-34149 entry concerns the Bluetooth Classic implementation on the Texas Instruments CC256XCQFN-EM. The flaw arises in handling continuous LMP_AU_Rand packets, allowing attackers in radio range to trigger a denial of service (deadlock) of the device by flooding it after paging. The pro...

CVE-2021-34149

The Bluetooth Classic implementation on the Texas Instruments CC256XCQFN-EM does not properly handle the reception of continuous LMPAURand packets, allowing attackers in radio range to trigger a denial of service deadlock of the device by flooding it with LMPAURand packets after the paging...

PT-2021-4298

Name of the Vulnerable Software and Affected Versions Texas Instruments CC256XCQFN-EM affected versions not specified Description The Bluetooth Classic implementation does not properly handle the reception of continuous LMP AU Rand packets, allowing attackers in radio range to trigger a denial of...

CVE-2021-34149: Undefined Security Weakness

The Bluetooth Classic implementation on the Texas Instruments CC256XCQFN-EM does not properly handle the reception of continuous LMPAURand packets, allowing attackers in radio range to trigger a denial of service deadlock of the device by flooding it with LMPAURand packets after the paging...

Texas Instruments CC256XCQFN-EM 安全漏洞

Texas Instruments CC256XCQFN-EM is a Bluetooth development tool from Texas Instruments USA. A security vulnerability exists in the Texas Instruments CC256XCQFN-EM, which stems from the Bluetooth on the chipset's inability to properly process and accept successive non-legitimate LMP responses that...

BrakTooth Bluetooth vulnerabilities, crash all the devices!

Security researchers have revealed details about a set of 16 vulnerabilities that impact the Bluetooth software stack that ships with System-on-Chip SoC boards from several popular vendors. The same group of researchers disclosed the SweynTooth vulnerabilities in February 2020. They decided to du...

Upcoming Speaking Engagements

This is a current list of where and when I am scheduled to speak: Im speaking via Internet at SHIFT Business Festival in Finland, August 25-26, 2021. I’ll be speaking at an Informa event on September 14, 2021. Details to come. I’m keynoting CIISec Live—an all-online event—September 15-16, 2021. I...