627 matches found
CVE-2019-15948
CVE-2019-15948 affects Texas Instruments CC256x and WL18xx dual‑mode Bluetooth controllers. The issue occurs when LE scan mode is used, allowing a malformed Bluetooth Low Energy advertising packet to trigger a buffer overflow, leading to denial of service and potentially arbitrary code execution....
agencyweb.elpasotexas.gov Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-995246 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
GandCrab Operators Resurface with REvil Malware
The malware that hit 22 Texas municipalities and various dentist offices around the country recently is likely the work of the crew behind the GandCrab ransomware – indicating that the group didn’t really retire after all. In late May, the GandCrab operators said they decided to ride off into the...
Ransomware continues assault against cities and businesses
Ransomware continues to make waves in the US, forcing multiple cities and organizations into tough choices. Pressed for cash and time, local government organizations are left with few options: Either pay the ransom as soon as possible and encourage criminals to continue bringing essential service...
Threat Source newsletter (Aug. 22)
Newsletter compiled by Jon Munshaw. Welcome to this week’s Threat Source newsletter — the perfect place to get caught up on all things Talos from the past week. A lot of people may think that cyber insurance is this new, unexplored field that carries a lot of questions. But did you know that thes...
The Texas Ransomware Attacks: A Gamechanger for Cybercriminals
Texas officials have been left scrambling after up to 22 Texas entities – the majority of which are local governments – were hit by a coordinated ransomware attack on Friday. So far, these include the cities of Borger and Keene, and Texas officials say the attacks are all connected and carried ou...
CVE-2018-18056
An issue was discovered in the Texas Instruments TI TM4C, MSP432E and MSP432P microcontroller series. The eXecute-Only-Memory XOM implementation prevents code read-outs on protected memory by generating bus faults. However, single-stepping and using breakpoints is allowed in XOM-protected flash...
Buffer overflow
An issue was discovered in the Texas Instruments TI TM4C, MSP432E and MSP432P microcontroller series. The eXecute-Only-Memory XOM implementation prevents code read-outs on protected memory by generating bus faults. However, single-stepping and using breakpoints is allowed in XOM-protected flash...
CVE-2018-18056
An issue was discovered in the Texas Instruments TI TM4C, MSP432E and MSP432P microcontroller series. The eXecute-Only-Memory XOM implementation prevents code read-outs on protected memory by generating bus faults. However, single-stepping and using breakpoints is allowed in XOM-protected flash...
CVE-2018-18056
The CVE-2018-18056 entry concerns TI TM4C, MSP432E and MSP432P microcontroller series. The issue stems from the eXecute-Only-Memory (XOM) implementation, which prevents code reads on protected memory by using bus faults, yet allows single-step/breakpoint use in XOM-protected flash. This enables a...
A Huge Ransomware Attack Messes With Texas
A coordinated strike against 23 local governments is called the largest such hack from a single source...
Coordinated Ransomware Attack Hits 23 Texas Government Agencies
UPDATE Up to 22 Texas entities – the majority of which are local governments – were hit by a ransomware attack on Friday that Texas officials say is part of a targeted attack launched by a single threat actor. Details remain scant about the specific agencies hit by the ransomware attacks, which...
FortiAP Bleeding Bit Vulnerability
Some FortiAP models are vulnerable to the Bleeding Bit Vulnerability CVE-2018-16986 present in the Texas Instruments WiFi chips...
Panic after hackers take control of emergency tornado alarms in Texas
By Waqas On March 12th, at around 2:30 a.m., residents of two Texas towns panicked after hearing tornado alarm that went off until 4:00 a.m. They were disturbed because the alarms repeatedly went on and off for about one and a half hours, thanks to hackers - Finally, related authorities were able...
RSA Conference 2019: BleedingBit Flaws Continue to Plague Firms
UPDATE SAN FRANCISCO – Mobile key platform UniKey has patched vulnerabilities related to the infamous BleedingBit attack in its platform. BleedingBit is an issue in Bluetooth Low-Energy chips made by Texas Instruments and used in millions of wireless access points, which was disclosed in November...
A city in Texas is using paper after suffering ransomware attack
By Waqas Another day, another devastating ransomware attack; this time, computers at The City Hall of Del Rio, Texas have suffered a massive ransomware attack forcing authorities to completely shut down the targeted network. The attack took place on Thursday, January 10th after which the City's...
Social Security Number scammers are at it again
The Federal Trade Commission FTC once again sounded the alarm in mid-December about the latest Social Security Number SSN scam that continues to affect thousands of Americans. While most of us were only able to read about this type of scam in the past, the FTC now has an audio recording of an SSN...
The vulnerability of the OAD update mechanism of Texas Instruments’ microprogrammable microcontrollers’ Bluetooth Low Energy technology allows a intruder to gain full control over the device.
The vulnerability of the OAD Over the Air firmware Download update mechanism of Texas Instruments’ Bluetooth Low Energy microcontroller software is due to the repeated release of memory. Exploiting this vulnerability can allow a hacker to gain full control over the device...
tahc.texas.gov XSS vulnerability
Open Bug Bounty ID: OBB-700282 Description| Value ---|--- Affected Website:| tahc.texas.gov Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...
U.S. Secret Service Warns ID Thieves are Abusing USPS’s Mail Scanning Service
A year ago, KrebsOnSecurity warned that "Informed Delivery," a new offering from the U.S. Postal Service USPS that lets residents view scanned images of all incoming mail, was likely to be abused by identity thieves and other fraudsters unless the USPS beefed up security around the program and ma...