Cyclops Blink malware: US and UK authorities issue alert

According to a joint security advisory published yesterday by US and UK cybersecurity and law enforcement agencies, a new malware called Cyclops Blink has surfaced to replace the VPNFilter malware attributed to the Sandworm group, which has always been seen as a Russian state-sponsored group...

Entering a Higher State of Vigilance – Ukraine Under Attack

It appears that Russia has just commenced the invasion of Ukraine. Check your preferred international news outlet, but according to the Ukrainian foreign minister "Putin has just launched a full-scale invasion of Ukraine." Ukrainian airspace is closed with flights diverting. The Twitter Safety...

CVE-2022-25074: Out-of-bounds Write

TP-Link TL-WR902ACUSV3191209 routers were discovered to contain a stack overflow in the function DM Fillobjbystr. This vulnerability allows unauthenticated attackers to execute arbitrary code...

Russia Was Behind DDoS Attacks Against Ukraine, US Officials Say

Plus: A crypto crime crackdown, Roblox ripoffs, and more of the week’s top security news...

US Agencies Say Russian Hackers Compromised Defense Contractors

Kremlin-backed cyber actors lurked in the networks for months, obtaining sensitive documents related to weapons and infrastructure development...

US Government sets forth Zero Trust architecture strategy and requirements

To help protect the United States from increasingly sophisticated cyber threats, the White House issued Executive Order EO 14028 on Improving the Nation’s Cybersecurity, which requires US Federal Government organizations to take action to strengthen national cybersecurity.1 Section 3 of EO 14028...

US Government sets forth Zero Trust architecture strategy and requirements

To help protect the United States from increasingly sophisticated cyber threats, the White House issued Executive Order EO 14028 on Improving the Nation’s Cybersecurity, which requires US Federal Government organizations to take action to strengthen national cybersecurity.1 Section 3 of EO 14028...

The US Watches Warily for Russia-Ukraine Tensions to Spill Over

Conversations with more than a dozen senior cybersecurity leaders in both the public and private sector outline the major areas of risk...

BlackByte Tackles the SF 49ers & US Critical Infrastructure

The San Francisco 49ers were recently kneecapped by a BlackByte ransomware attack that temporarily discombobulated the NFL team’s corporate IT network on the Big Buffalo Wing-Snarfing Day itself: Superbowl Sunday. BlackByte – a ransomware-as-a-service RaaS gang that leases its ransomware to...

Database mess up – US marketing firm exposed data of 7 million users

By Deeba Ahmed The IT security researchers at Website Planet discovered what they dubbed as a large data breach, impacting a… This is a post from HackRead.com Read the original post: Database mess up - US marketing firm exposed data of 7 million users...

France Rules That Using Google Analytics Violates GDPR Data Protection Law

French data protection regulators on Thursday found the use of Google Analytics a breach of the European Union's General Data Protection Regulation GDPR laws in the country, almost a month after a similar decision was reached in Austria. To that end, the National Commission on Informatics and...

PT-2022-2178

Name of the Vulnerable Software and Affected Versions TP-Link Archer A54 US versions prior to the fixed version Description The issue is related to a buffer overflow in the DM Fillobjbystr function, which can be exploited by a remote attacker to execute arbitrary code. This is a result of data...

PT-2022-2078

Name of the Vulnerable Software and Affected Versions TP-Link TL-WR902ACUS V3 191209 routers Description The issue is related to a stack overflow in the DM Fillobjbystr function, which allows unauthenticated attackers to execute arbitrary code. This is due to a buffer overflow when recording data...

Microsoft OneDrive for Android security feature bypass vulnerability

Microsoft OneDrive is a cloud backup application from the US-based Microsoft Corporation Microsoft. The program has features such as automatic backup of photo albums, online office and file sharing.Microsoft OneDrive for Android has a security feature bypass vulnerability, no details of the...

Out of bounds read in Tensorflow

Impact TensorFlow's type inference can cause a heap OOB read as the bounds checking is done in a DCHECK which is a no-op during production: cc if nodet.typeid != TFTUNSET int ix = inputidxi; DCHECKix nodet.argssize "input " i " should have an output " ix " but instead only has " nodet.argssize "...

$3.6 billion worth of Bitcoin seized from crooks tied to 2016’s Bitfinex hack

By Waqas The US Department of Justice DoJ has confirmed seizing $3.6 billion worth of Bitcoin in what could be… This is a post from HackRead.com Read the original post: $3.6 billion worth of Bitcoin seized from crooks tied to 2016s Bitfinex hack...

CVE-2021-20877

Cross-site scripting vulnerability in Canon laser printers and small office multifunctional printers LBP162L/LBP162, MF4890dw, MF269dw/MF265dw/MF264dw/MF262dw, MF249dw/MF245dw/MF244dw/MF242dw/MF232w, and MF229dw/MF224dw/MF222dw sold in Japan, imageCLASS MF Series...

North Korea Hacked Him. So He Took Down Its Internet

Disappointed with the lack of US response to the Hermit Kingdom's attacks against US security researchers, one hacker took matters into his own hands...

rancho.college4.us Cross Site Scripting vulnerability OBB-2352411

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Senate Committee passes new antitrust bill aimed at Big Tech companies

The American Innovation and Choice Online Act AICOA, a bill that forbids Big Tech platforms like Apple, Alphabet Google’s parent company, and Amazon from generally behaving in an anti-competitive manner, was approved by the Senate Judiciary Committee late last week with a 16-6 vote. US Senator Am...