3290 matches found
MedusaLocker Ransomware is back targeting organizations in US
Threat Level Attack Report For a detailed advisory, download the pdf file here Summary Since 2019, a ransomware-as-a-service RaaS known as MedusaLocker has been seen to target organizations, mostly in the healthcare sector by exploiting Remote Desktop Protocol RDP vulnerabilities...
Stack overflow
A stack overflow in the function DM In fillobjbystr of TP-Link Archer C50&A5USV5200407 allows attackers to cause a Denial of Service DoS via a crafted HTTP request...
Google Android Information Disclosure Vulnerability (CNVD-2022-50278)
Google Android is a Linux-based open source operating system from Google. Google Android suffers from an information disclosure vulnerability. An attacker can exploit this vulnerability to obtain sensitive information...
Google Android Information Disclosure Vulnerability (CNVD-2022-50275)
Google Android is a Linux-based open source operating system from Google. Google Android suffers from an information disclosure vulnerability. An attacker can exploit this vulnerability to obtain sensitive information...
Google Android elevation of privilege vulnerability (CNVD-2022-50276)
Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that can be exploited by an attacker to gain elevated privileges...
Motorola Solutions MOSCAD IP and ACE IP Gateways
1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely Vendor: Motorola Solutions Equipment: MOSCAD IP Gateway and ACE IP Gateway Vulnerability: Missing Authentication for Critical Function CISA is aware of a public report, known as “OT:ICEFALL” that details vulnerabilities found in...
Google Android Elevation of Privilege Vulnerability (CNVD-2022-52265)
Google Android is a Linux-based open-source operating system from the U.S. company Google. Google Android has an elevation of privilege vulnerability that could be exploited by attackers to cause a local privilege escalation that requires the user to execute the privilege...
habitica cross-site scripting vulnerability
habitica is an open source habit-forming program from the US-based HabitRPG. habitica versions v4.119.0 through v4.232.2 are vulnerable to a cross-site scripting vulnerability. The vulnerability stems from the program's lack of data validation filtering of user-supplied data and output. An attack...
The Power and Pitfalls of AI for US Intelligence
Artificial intelligence use is booming, but it's not the secret weapon you might imagine...
UK Approves WikiLeaks Chief Julian Assange's Extradition to the US
The WikiLeaks founder will appeal the UK Home Office's decision to extradite him to the US...
Adobe InCopy Resource Management Error Vulnerability (CNVD-2022-48786)
Adobe InCopy is a text editing software for authoring from Adobe U.S. A resource management error vulnerability exists in Adobe InCopy, which could be exploited by attackers to execute arbitrary code in the context of the current user...
State of OT Security in 2022: Big Survey Key Insights
Learn about the state of OT Security in 2022 by reading the key insights found through surveying more than 900 ICS business and security leaders in the US, Germany and Japan...
Google Android Information Disclosure Vulnerability (CNVD-2022-58404)
Google Android is a Linux-based open-source operating system from the US company Google. Google Android has an information leakage vulnerability that could be exploited by attackers to obtain sensitive information...
Google Android Denial of Service Vulnerability (CNVD-2022-61755)
Google Android is a Linux-based open source operating system from Google, a US-based company. The vulnerability is caused by an insecure deserialization flaw in the keystore library. An attacker could exploit the vulnerability to cause a denial of service situation...
How China Hacked US Phone Networks
Plus: Russia rattles its cyber sword, a huge Facebook phishing operation is uncovered, feds take down the SSNDOB marketplace, and more...
Ransomware Task Force priorities see progress in first year
This blog is part of our live coverage from RSA Conference 2022: US President Joseph R. Biden Jr., The White House, and law enforcement agencies across the world paid close attention last year when a group of more than 60 cybersecurity experts launched the Ransomware Task Force, heeding the group...
Hackers Selling US Colleges VPN Credentials on Russian Forums- FBI
By Waqas The network credentials and VPN access information were mainly acquired through ransomware, spear-phishing, and other cyberattacks. According to… This is a post from HackRead.com Read the original post: Hackers Selling US Colleges VPN Credentials on Russian Forums- FBI...
Good Luck Not Accidentally Hiring a North Korean Scammer
DPRK hackers are tricking their way into jobs with Western firms. A US government alert reminds employers they're on the front lines—and potentially on the hook...
Twitter fined $150M after using 2FA phone numbers for marketing
The Federal Trade Commission FTC and the Department of Justice DOJ have ordered Twitter to pay a $150M penalty for using users account security data deceptively. The deception violates an FTC order from 2011, that bars Twitter from "misleading consumers about the extent to which it protects the...