US Military Ties Prolific MuddyWater Cyberespionage APT to Iran

U.S. Cyber Command has confirmed that MuddyWater – an advanced persistent threat APT cyberespionage actor aka Mercury, Static Kitten, TEMP.Zagros or Seedworm that’s historically targeted government victims in the Middle East – is an Iranian intelligence outfit. The link has been suspected, and no...

Using Foreign Nationals to Bypass US Surveillance Restrictions

Remember when the US and Australian police surreptitiously owned and operated the encrypted cell phone app ANOM? They arrested 800 people in 2021 based on that operation. New documents received by Motherboard show that over 100 of those phones were shipped to users in the US, far more than...

Google Android Elevation of Privilege Vulnerability (CNVD-2022-16345)

Google Android is a Linux-based open-source operating system from the US company Google. Google Android elevation of privilege vulnerability can be exploited by attackers to elevate privileges...

Apple’s Private Relay Roils Telecoms Around the World

Security experts say there's little reason for the criticism from Europe’s mobile operators and US limitations over the VPN-like iCloud tool...

2022 Cybersecurity Predictions: The Experts Clear Off the Crystal Ball

As we walk through the doorway of 2022, it's hard not to wish at least some among us had the gift of cosmic foresight. Many most? of the questions we thought in 2021 that we'd have answered by this point — chief among them, when will COVID finally leave us alone??? — still seem to elude us. In...

Google Android Elevation of Privilege Vulnerability (CNVD-2022-06157)

Google Android is a Linux-based open-source operating system from the US company Google. Google Android 11 has a security vulnerability that could be exploited by attackers to cause a local privilege escalation...

Software flaws in walk-through metal detectors made them hackable

By Waqas Walk-through metal detectors manufactured by well-known U.S.-based firm Garett are vulnerable to remote attacks. This is a post from HackRead.com Read the original post: Software flaws in walk-through metal detectors made them hackable...

Stolen Bitcoins Returned

The US has returned $154 million in bitcoins stolen by a Sony employee. However, on December 1, following an investigation in collaboration with Japanese law enforcement authorities, the FBI seized the 3879.16242937 BTC in Ishiis wallet after obtaining the private key, which made it possible to...

Avast found backdoor in US Federal Agency Network

By Waqas Avast stated that it tried to notify the agency about the intrusion but didn't receive any favorable response. This is a post from HackRead.com Read the original post: Avast found backdoor in US Federal Agency Network...

CVE-2021-44317

In Bus Pass Management System v1.0, parameters 'pagedes' and About Us are affected with a Stored Cross-site scripting vulnerability...

CVE-2021-44317

In Bus Pass Management System v1.0, parameters 'pagedes' and About Us are affected with a Stored Cross-site scripting vulnerability...

Cross site scripting

In Bus Pass Management System v1.0, parameters 'pagedes' and About Us are affected with a Stored Cross-site scripting vulnerability...

PT-2021-24080 · Unknown · Bus Pass Management System

Name of the Vulnerable Software and Affected Versions: Bus Pass Management System version 1.0 Description: The issue is related to a Stored Cross-site scripting vulnerability. Parameters pagedes and About Us are affected. Recommendations: For Bus Pass Management System version 1.0, consider...

Bus Pass Management System 跨站脚本漏洞

Bus Pass Management System is a bus pass management system. v1.0 of Bus Pass Management System is vulnerable to a cross-site scripting vulnerability that stems from the lack of data validation filtering of user-supplied data and output in the parameters pagedes and About Us. An attacker could...

Apache Log4j JNDI message lookup vulnerability

Added: 12/16/2021 Background Apache Log4j is a logging library used by many Java applications. Problem An attacker who is able to control log message content could embed a JNDI reference to an LDAP or RMI URL which downloads an executable Java class, leading to arbitrary command execution...

The vulnerability of the D-Link DIR-2640-US router’s microprogramming software lies in the insufficient protection of registration data, allowing attackers to elevate their privileges to the root level.

The vulnerability of the D-Link DIR-2640-US router’s microprogramming software is related to insufficient protection for registration data. Exploiting this vulnerability can allow attackers to elevate their privileges to the root level...

NSO Group’s Pegasus Spyware Used Against US State Department Officials

NSO Groups descent into Internet pariah status continues. Its Pegasus spyware was used against nine US State Department employees. We dont know which NSO Group customer trained the spyware on the US. But the company does: NSO Group said in a statement on Thursday that it did not have any indicati...

US Military’s Hacking Unit to take on ransomware gangs

By ghostadmin The Units boss Gen. Paul Nakasone said that the US military computer operatives are ready to target ransomware gangs and state actors, whoever poses a threat to critical US infrastructure. The US militarys hacking division called Cyber Command is taking aggressive steps to fight...

Google Android Elevation of Privilege Vulnerability (CNVD-2021-100605)

Google Android is a Linux-based open source operating system from Google, a US company. An attacker could exploit this vulnerability to escalate privileges...

NSO Group spyware found on iPhones of US State Department employees

iPhones of at least nine US State Department employees are said to have been hacked using the Pegasus spyware developed by the Israeli technology company, NSO Group. Pegasus is a proprietary and sophisticated spyware capable of the remote surveillance of smartphones. The employees targeted by an...