3468 matches found
Encryption Under ‘Full-Frontal Nuclear Assault’ By U.S. Bills
Encryption expert Riana Pfefferkorn believes new proposed laws – the EARN IT Act and the Lawful Access to Encrypted Data Act – pose dire threats to cybersecurity and privacy. In this Threatpost interview, Pfefferkorn, who is associate director of Surveillance and Cybersecurity at the Stanford...
Russia's GRU Hackers Hit US Government and Energy Targets
A previously unreported Fancy Bear campaign persisted for well over a year—and indicates that the notorious group has broadened its focus...
events4.us Cross Site Scripting vulnerability OBB-1235781
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
US Charges 2 Chinese Hackers for Targeting COVID-19 Research and Trade Secrets
The U.S. Department of Justice DoJ yesterday revealed charges against two Chinese nationals for their alleged involvement in a decade-long hacking spree targeting dissidents, government agencies, and hundreds of organizations in as many as 11 countries. The 11-count indictment, which was unsealed...
Imperva Shields Against Windows DNS Server RCE Vulnerability (CVE-2020-1350)
Recently, Check Point researchers found a 17-year-old high-profile flaw, SIGRed CVE-2020-1350. The flaw is a wormable, critical vulnerability in the Windows DNS server, and can be triggered by a malicious DNS response. On a zero to 10 scale, this vulnerability has received a CVSS base score of 10...
D-Link DIR-867, DIR-878 and DIR-882 Authentication Bypass Vulnerabilities
The D-Link DIR-878 and D-Link DIR-867 are both a wireless router from AUO D-Link of Taiwan, China. A security vulnerability exists in the HNAP request handling in the DIR-867-US using firmware version 1.20B10 and earlier and the DIR-878 using firmware version 1.20B05 and earlier, which stems from...
lakess.atimo.us Cross Site Scripting vulnerability OBB-1233078
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Does TikTok Really Pose a Risk to US National Security?
Concerns about the Chinese government shouldn't be dismissed, experts say. But banning TikTok would be a drastic measure...
New Android Malware Now Steals Passwords For Non-Banking Apps Too
BlackRock does the data collection by abusing Android's Accessibility Service privileges, for which it seeks users' permissions under the guise of fake Google updates when it's launched for the first time on the device, as shown in the shared screenshots. Subsequently, it goes on to grant itself...
SQL Injection Vulnerability in LLJCMS us***.php File
LJCMS is a PHP+MYSQL+Smarty based, free and open source enterprise website system. LLJCMS us.php file has a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...
U.S. Dept Of Defense: RXSS - ████
Hello, friends today when I was checking some sites I found this bug on your own website. Detalis XSS Cross-Site Scripting XSS attacks are a type of injection, in which malicious scripts are injected into otherwise benign and trusted websites. XSS attacks occur when an attacker uses a web...
NVIDIA GPU Display Driver - June 2020 Security Bulletin - Lenovo Support US
Lenovo Security Advisory: LEN-36925 Potential Impact: Privilege escalation, denial of service, information disclosure, code execution, tampering Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2020-5962, CVE-2020-5963, CVE-2020-5964, CVE-2020-5965, CVE-2020-5966, CVE-2020-5967,...
Man convicted for identity theft & fraud against US Military, veterans
By Zara Khan The perpetrator was blatantly involved in victimizing thousands... This is a post from HackRead.com Read the original post: Man convicted for identity theft & fraud against US Military, veterans...
Amazon Says It Didn’t Mean to Ban Employees From Using TikTok
US lawmakers have repeatedly raised security concerns over the app's Chinese ownership. Are US businesses next?...
U.S. Dept Of Defense: Subdomain takeover due to an unclaimed Amazon S3 bucket on ███
Summary: An unclaimed Amazon S3 bucket on █████████ gives an attacker the possibility to gain full control over this subdomain. Description: ███████ pointed to an S3 bucket that did no longer exists. The bucket points to an Amazon S3 website bucket in the US East region. I claimed this bucket and...
Lazarus hackers use Magecart attack to steal card data from EU, US sites
By Deeba Ahmed Lazarus hackers are believed to be backed by the North Korean government. This is a post from HackRead.com Read the original post: Lazarus hackers use Magecart attack to steal card data from EU, US sites...
firefox security update
68.4.1-1.0.1 - fix LDLIBRARYPATH - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat one Wed Jan 08 2020 Jan Horak - Update to 68.4.1esr build1 Fri Jan 03 2020 Jan Horak - Update to 68.4.0esr build1 Wed Dec 18 2019 Jan Horak - Fix for wrong intl.acceptlang when using non...
Encryption-Busting EARN IT Act Advances in Senate
Plus: A massive crime bust in Europe, a warning from US Cyber Command, and more of the week's top security news...
freeads77.us Cross Site Scripting vulnerability OBB-1211929
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
sportslive7.us Cross Site Scripting vulnerability OBB-1211927
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...