The FBI Is Now Securing Networks Without Their Owners’ Permission

In January, we learned about a Chinese espionage campaign that exploited four zero-days in Microsoft Exchange. One of the characteristics of the campaign, in the later days when the Chinese probably realized that the vulnerabilities would soon be fixed, was to install a web shell in compromised...

Detecting the "Next" SolarWinds-Style Cyber Attack

The SolarWinds attack, which succeeded by utilizing the sunburst malware, shocked the cyber-security industry. This attack achieved persistence and was able to evade internal systems long enough to gain access to the source code of the victim. Because of the far-reaching SolarWinds deployments, t...

CVE-2021-29302: Buffer Copy without Checking Size of Input

TP-Link TL-WR802NUS, ArcherC50v5US v4200 = 2020.06 contains a buffer overflow vulnerability in the httpd process in the body message. The attack vector is: The attacker can get shell of the router by sending a message through the network, which may lead to remote code execution...

PT-2021-18166

Name of the Vulnerable Software and Affected Versions: TP-Link TL-WR802NUS versions prior to 2020.06 Archer C50v5 US version 4 200 or earlier Description: The issue is related to a buffer overflow in the httpd process, specifically in the body message. This can be exploited by an attacker sending...

The Opportunities—and Obstacles—for Women at NSA and Cyber Command

WIRED spoke with three women working in cybersecurity in the US intelligence community about the progress of recent years and the work that remains...

Hackers From China Target Vietnamese Military and Government

A hacking group related to a Chinese-speaking threat actor has been linked to an advanced cyberespionage campaign targeting government and military organizations in Vietnam. The attacks have been attributed with low confidence to the advanced persistent threat APT called Cycldek or Goblin Panda,...

A child sent out gibberish tweet from official US Nuclear-agency account

By Deeba Ahmed A Child’s Gibberish Tweet from US Nuclear-agency Account Sends Twitter into Frenzy - Sparks Debates on National Security. This is a post from HackRead.com Read the original post: A child sent out gibberish tweet from official US Nuclear-agency account...

Cl0p ransomware gang leaks sensitive data from 6 US universites

By Habiba Rashid For now, there has been no confirmation from any of the universities if they were targeted and breached by the Cl0p ransomware gang. This is a post from HackRead.com Read the original post: Cl0p ransomware gang leaks sensitive data from 6 US universites...

Safe Connections Act could help domestic abuse survivors take control of their digital lives

A bill introduced in the US Senate could help domestic abuse and sex trafficking survivors—including those tracked by stalkerware-type applications—regain digital independence through swift, shared phone plan termination and the extension of mobile phone plan subsidies. Titled the Safe Connection...

US charges Swiss hacker behind massive Verkada security camera hack

By Habiba Rashid The hacker Till Kottmann aka “deletescape” has been indicted for conspiracy, wire fraud, and aggravated identity theft by the US DOJ. This is a post from HackRead.com Read the original post: US charges Swiss hacker behind massive Verkada security camera hack...

HPESBNW04100 rev.4 - Aruba Instant (IAP), Multiple Vulnerabilities

Potential Security Impact: Local: Authentication Bypass; Remote: Arbitrary File Download, Arbitrary File Modification, Code Execution, Cross-Site Scripting XSS, Denial of Service DoS, Execution of Arbitrary Commands, Unauthenticated Arbitrary Code Execution, Unauthorized Disclosure of Information...

Sensitive data from US shipping management software firm exposed online

By Habiba Rashid In total, 103 GB worth of data belonging to New Jersy based Descartes Aljex Software was left exposed on a misconfigured AWS S3 Bucket. This is a post from HackRead.com Read the original post: Sensitive data from US shipping management software firm exposed online...

Operation Dianxun Cyberespionage Campaign Targeting Telecommunication Companies

ARCHIVED STORY Operation Diànxùn: Cyberespionage Campaign Targeting Telecommunication Companies By Thomas Roccia · MAR 16, 2021 In this report the McAfee Advanced Threat Research ATR Strategic Intelligence team details an espionage campaign, targeting telecommunication companies, dubbed Operation...

COVID-19 testing service in US exposes patients’ photos, passports

By Habiba Rashid COVID-19 testing service in the State of Utah stored passport scans and other highly personal data on unsecured Amazon S3 buckets. This is a post from HackRead.com Read the original post: COVID-19 testing service in US exposes patients photos, passports...

‘Retaliation’ for Russia's SolarWinds Spying Isn't the Answer

It will be hard pointing to a specific line the Kremlin crossed that the US hasn't crossed as well...

John McAfee Charged with Fraud in Cryptocurrency Scam

By Habiba Rashid John McAfee has been charged with fraud and money-laundering related to 2 cryptocurrency schemes, the US Justice Department said on Friday. This is a post from HackRead.com Read the original post: John McAfee Charged with Fraud in Cryptocurrency Scam...

Detection and Response to Exploitation of Microsoft Exchange Zero-Day Vulnerabilities

Beginning in January 2021, Mandiant Managed Defense observed multiple instances of abuse of Microsoft Exchange Server within at least one client environment. The observed activity included creation of web shells for persistent access, remote code execution, and reconnaissance for endpoint securit...

Gootloader exploits websites via SEO to spread ransomware, trojans

By Deeba Ahmed Researchers have warned that Gootloader campaigns generally target users in the US, Germany, France, and South Korea. This is a post from HackRead.com Read the original post: Gootloader exploits websites via SEO to spread ransomware, trojans...

Sourcecodesterk Doctor Appointment System SQL注入漏洞

Doctor Appointment System is a PHP/MySQLi based doctor appointment system. A SQL blind injection vulnerability exists in contactus.php in Doctor Appointment System 1.0. An attacker can exploit this vulnerability to insert malicious SQL queries via the firstname parameter...

National Security Risks of Late-Stage Capitalism

Early in 2020, cyberspace attackers apparently working for the Russian government compromised a piece of widely used network management software made by a company called SolarWinds. The hack gave the attackers access to the computer networks of some 18,000 of SolarWinds’s customers, including US...