Alleged Russian Hacker Behind $100 Million Evil Corp Indicted

The US is charging Maksim Yakubets over two of the biggest cybertheft campaigns of the last decade, and offers a record reward for information on the case...

Breaking the Rules: A Tough Outlook for Home Page Attacks (CVE-2017-11774)

Attackers have a dirty little secret that is being used to conduct big intrusions. We’ll explain how they're "unpatching" an exploit and then provide new Outlook hardening guidance that is not available elsewhere. Specifically, this blog post covers field-tested automated registry processing for...

Blockchain Developer Gets Busted After Talk in North Korea

Hacker and Ethereum developer Virgil Griffith was recently arrested by US authorities for speaking at a conference on blockchain technologies...

us-aron.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1028447 Security Researcher metamorfosec Helped patch 1963 vulnerabilities Received 9 Coordinated Disclosure badges Received 31 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting us-aron.com website a...

SQL injection vulnerability in the us***.cl***.php file of Laikai e-commerce system

Laike e-commerce system is an open source e-commerce system. Laike e-commerce system us.cl.php file has a SQL injection vulnerability. Attackers can use the vulnerability to obtain sensitive information in the database...

Intel BMC Vulnerabilities​ - Lenovo Support US

Lenovo Security Advisory: LEN-29773 Potential Impact: Escalation of Privilege, Denial of Service and/or Information Disclosure Severity: Critical Scope of Impact: Industry-wide CVE Identifier: CVE-2019-11168, CVE-2019-11170, CVE-2019-11171, CVE-2019-11172, CVE-2019-11173, CVE-2019-11174,...

Russia Fails to Stop Alleged Hacker From Facing US Charges

The repercussions over custody and extradition of Aleksei Burkov have set off a geopolitical maelstrom...

SQL Injection Vulnerability in us*** Parameters of BioReda's Security Management System Platform

Based on the latest B/S architecture design, Bio Raider Security Management Platform is a digital, networked and security integrated system platform. Bio Raider Security Management System can be applied to government, enterprises, prisons, schools, smart communities and other security requirement...

Why Many People Got Mysterious Valentine’s Day Texts Today

The issue was reportedly caused by a maintenance update made to “messaging platforms of multiple carriers in the US."...

Verizon, AT&T, Sprint and T-Mobile to replace SMS with RCS Messaging in 2020

Mobile carriers in the United States will finally offer a universal cross-carrier communication standard for the next-generation RCS messaging service that is meant to replace SMS and has the potential to change the way consumers interact with brands for years to come. All major United States...

Threat Source newsletter (Oct. 17, 2019)

Newsletter compiled by Jon Munshaw. Welcome to this week’s Threat Source newsletter — the perfect place to get caught up on all things Talos from the past week. It’s rare that iOS jailbreaks make it onto the scene. Apple is usually able to patch them out quickly. But a recent exploit is actually...

CVE-2019-2951: Undefined Security Weakness

Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft component: US Federal Specific. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterpri...

jerome.az.gov Cross Site Scripting vulnerability OBB-995198

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| jerome.az.gov ---|--- Open Bug Bounty...

PT-2019-3708

Name of the Vulnerable Software and Affected Versions PeopleSoft Enterprise HCM Human Resources version 9.2 Description The issue is related to inadequate access control in the US Federal Specific component of the PeopleSoft Enterprise HCM Human Resources product. This can be exploited by a remot...

Iranian Hackers Targeted a US Presidential Candidate

A revelation from Microsoft offers a chilling reminder that Russia is not the only country interested in swaying the 2020 election...

Mariposa Botnet Author, Darkcode Crime Forum Admin Arrested in Germany

A Slovenian man convicted of authoring the destructive and once-prolific Mariposa botnet and running the infamous Darkode cybercrime forum has been arrested in Germany on request from prosecutors in the United States, who've recently re-indicted him on related charges. NiceHash CTO Matjaž "Iserdo...

A week in security (September 23 – 29)

Last week on Labs, we highlighted an Emotet campaign using Snowden’s new book as a lure, discussed how 15,000 webcams are vulnerable to attack, how insurance data security laws skirt political turmoil, and how the new iOS exploit checkm8 allows permanent compromise of iPhones. Other cybersecurity...

Hackers used fake job website to scam jobless US veterans

By Sudais If users who happen to be mostly military veterans, in this case, followed standard principles of double-checking URLs and not downloading files from untrusted sources, they could have remained safe and avoided being the victim. This is a post from HackRead.com Read the original post:...

Trump Still Doesn't Believe Russia Hacked the 2016 Election

Trump has publicly played down Russia’s role in the 2016 election. But even privately, he trusts conspiracy theories more than US intelligence agencies...

Bring your own LOLBin: Multi-stage, fileless Nodersok campaign delivers rare Node.js-based malware

We’ve discussed the challenges that fileless threats pose in security, and how Microsoft Defender Advanced Threat Protection Microsoft Defender ATP employs advanced strategies to defeat these sophisticated threats. Part of the slyness of fileless malware is their use of living-off-the-land...