Google Android elevation of privilege vulnerability (CNVD-2022-50276)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that can be exploited by an attacker to gain elevated privileges...

PT-2022-21682

Name of the Vulnerable Software and Affected Versions TP-Link Archer C50&A5US version V5 200407 Description A stack overflow in the function DM In fillobjbystr allows attackers to cause a Denial of Service DoS via a crafted HTTP request. Recommendations For TP-Link Archer C50&A5US version V5...

Google Android Elevation of Privilege Vulnerability (CNVD-2022-52265)

Google Android is a Linux-based open-source operating system from the U.S. company Google. Google Android has an elevation of privilege vulnerability that could be exploited by attackers to cause a local privilege escalation that requires the user to execute the privilege...

Motorola Solutions MOSCAD IP and ACE IP Gateways

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely Vendor: Motorola Solutions Equipment: MOSCAD IP Gateway and ACE IP Gateway Vulnerability: Missing Authentication for Critical Function CISA is aware of a public report, known as “OT:ICEFALL” that details vulnerabilities found in...

habitica cross-site scripting vulnerability

habitica is an open source habit-forming program from the US-based HabitRPG. habitica versions v4.119.0 through v4.232.2 are vulnerable to a cross-site scripting vulnerability. The vulnerability stems from the program's lack of data validation filtering of user-supplied data and output. An attack...

The Power and Pitfalls of AI for US Intelligence

Artificial intelligence use is booming, but it's not the secret weapon you might imagine...

UK Approves WikiLeaks Chief Julian Assange's Extradition to the US

The WikiLeaks founder will appeal the UK Home Office's decision to extradite him to the US...

Adobe InCopy Resource Management Error Vulnerability (CNVD-2022-48786)

Adobe InCopy is a text editing software for authoring from Adobe U.S. A resource management error vulnerability exists in Adobe InCopy, which could be exploited by attackers to execute arbitrary code in the context of the current user...

State of OT Security in 2022: Big Survey Key Insights

Learn about the state of OT Security in 2022 by reading the key insights found through surveying more than 900 ICS business and security leaders in the US, Germany and Japan...

Google Android Information Disclosure Vulnerability (CNVD-2022-58404)

Google Android is a Linux-based open-source operating system from the US company Google. Google Android has an information leakage vulnerability that could be exploited by attackers to obtain sensitive information...

Google Android Denial of Service Vulnerability (CNVD-2022-61755)

Google Android is a Linux-based open source operating system from Google, a US-based company. The vulnerability is caused by an insecure deserialization flaw in the keystore library. An attacker could exploit the vulnerability to cause a denial of service situation...

How China Hacked US Phone Networks

Plus: Russia rattles its cyber sword, a huge Facebook phishing operation is uncovered, feds take down the SSNDOB marketplace, and more...

Ransomware Task Force priorities see progress in first year

This blog is part of our live coverage from RSA Conference 2022: US President Joseph R. Biden Jr., The White House, and law enforcement agencies across the world paid close attention last year when a group of more than 60 cybersecurity experts launched the Ransomware Task Force, heeding the group...

Hackers Selling US Colleges VPN Credentials on Russian Forums- FBI

By Waqas The network credentials and VPN access information were mainly acquired through ransomware, spear-phishing, and other cyberattacks. According to… This is a post from HackRead.com Read the original post: Hackers Selling US Colleges VPN Credentials on Russian Forums- FBI...

Good Luck Not Accidentally Hiring a North Korean Scammer

DPRK hackers are tricking their way into jobs with Western firms. A US government alert reminds employers they're on the front lines—and potentially on the hook...

Twitter fined $150M after using 2FA phone numbers for marketing

The Federal Trade Commission FTC and the Department of Justice DOJ have ordered Twitter to pay a $150M penalty for using users account security data deceptively. The deception violates an FTC order from 2011, that bars Twitter from "misleading consumers about the extent to which it protects the...

Google Urged to Stop Tracking Location Data Ahead of Roe Reversal

Lawmakers argue Android phone data could be “weaponized against women” if the US Supreme Court officially overturns abortion protections...

Malware-Infested Smart Card Reader

Brian Krebs has an interesting story of a smart ID card reader with a malware-infested Windows driver, and US government employees who inadvertently buy and use them. But by all accounts, the potential attack surface here is enormous, as many federal employees clearly will purchase these readers...

The Mystery of China’s Sudden Warnings About US Hackers

The Chinese government recently began saber-rattling about American cyberespionage. The catch? It’s all old news...

Google Android Competitive Conditions Issue Vulnerability (CNVD-2022-42126)

Google Android is a Linux-based open source operating system from Google. Google Android has a security vulnerability. An attacker exploits the vulnerability to cause local privilege escalation...