Poly Network Recoups $610M Stolen from DeFi Platform

A threat actor called “Mr. White Hat” has returned the $610 million they stole from the decentralized finance platform Poly Network. The breached company did everything from threaten to sic law enforcement on the attacker on up to its ultimate offer: the position of chief security officer in...

The driver’s vulnerability allows for the functionality of Storage Spaces controllers on Microsoft Windows operating systems, enabling attackers to increase their privileges.

The vulnerability of the driver for enabling Storage Spaces on Microsoft Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the TrustAccess network firewall, related to deficiencies in information protection mechanisms, allows attackers to perform privileged operations.

The vulnerability of TrustAccess is related to deficiencies in information protection mechanisms. Exploiting this vulnerability allows a perpetrator with access to the directory where TrustAccess is installed to perform privileged operations through a DLL hijacking attack. This is achieved by...

CVE-2020-36363

Amazon AWS CloudFront TLSv1.22019 allows TLSECDHERSAWITHAES128CBCSHA256 and TLSECDHERSAWITHAES256CBCSHA384, which some entities consider to be weak ciphers...

PT-2021-6468 · Xen +1 · Xen +1

Name of the Vulnerable Software and Affected Versions: Xen affected versions not specified Description: The issue is related to weaknesses in the authentication procedure of the Xen hypervisor. Exploitation of this issue allows an attacker to access confidential data, compromise its integrity, an...

The vulnerability of Google Chrome browser extensions, related to security configuration errors, allows attackers to access confidential information.

The vulnerability of Google Chrome browsers is related to the insufficient implementation of policies. Exploiting this vulnerability can allow a malicious actor to gain access to confidential information...

The vulnerability of Google Chrome’s Autofill component, related to authentication procedures that lack sufficient safeguards, allows attackers to access sensitive information.

The vulnerability of Google Chrome’s Autofill component is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to gain access to confidential information...

PT-2021-3755 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a security feature bypass in the Windows Hello facial recognition component, which is caused by weaknesses in the authorization mechanism. This can allow an attacker...

The vulnerability of the print spooler driver for Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Windows Print Spooler in operating systems related to the Windows platform is associated with deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by loading a malicious DLL library remotely...

What is DNS (Domain Name System) Spoofing and Cache Poisoning❓

What Is DNS spoofing? Domain Name System DNS harming and caricaturing are sorts of cyberattack that adventure DNS worker weaknesses to redirect traffic from real workers towards counterfeit ones. Whenever you’ve ventured out to a fake page, you might be astounded on the best way to determine it —...

The vulnerability of Windows operating system filter controllers allows attackers to increase their privileges.

The vulnerability of filter administrators in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server lies in their security vulnerabilities related to data protection, which allows attackers to gain unauthorized access to protected information.

The vulnerabilities of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server are related to deficiencies in data protection. Exploiting these vulnerabilities can allow attackers to gain unauthorized access to protected information...

Malware Can Use This Trick to Bypass Ransomware Defense in Antivirus Solutions

Researchers have disclosed significant security weaknesses in popular antivirus software applications that could be abused to deactivate their protections and take control of allow-listed applications to perform nefarious operations on behalf of the malware to defeat anti-ransomware defenses. The...

The vulnerability of signature verification functions (GOST DSA, EDDSA, and ECDSA) in the Nettle library, due to deficiencies in the cryptographic algorithms used, allows a perpetrator who has not undergone authentication verification to execute arbitrary code.

The vulnerability of signature verification functions GOST DSA, EDDSA, and ECDSA in the Nettle library is related to the shortcomings of the cryptographic algorithms used. Exploiting this vulnerability could allow an attacker to execute arbitrary code by submitting invalid signatures...

The vulnerability in the implementation of the Extensible Authentication Protocol over LAN (EAPOL) on the NetBSD operating system allows a perpetrator to induce a service failure.

The vulnerability of the Extensible Authentication Protocol over LAN EAPOL implementation in the NetBSD operating system is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Denial Of Service (DoS)

kernel is vulnerable to denial of service. A NULL pointer dererence in ov511modeinitregs and ov518modeinitregs when there are zero endpoints allows an attacker with the ability to induce the error conditions to crash the system...

The vulnerability of the Java Management Extensions (JMX) component of the Cisco Hosted Collaboration Mediation Fulfillment software allows a attacker to trigger a service failure.

The vulnerability of the Java Management Extensions JMX component of the Cisco Hosted Collaboration Mediation Fulfillment software is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to cause service interruptions...

Scheme Flooding Allows User Tracking Across Browsers

A security researcher has discovered a vulnerability that allows websites to track users across a number of different desktop browsers — including Apple Safari, Google Chrome, Microsoft Edge, Mozilla Firefox and Tor — posing a threat to cross-browser anonymity. Called “scheme flooding,” the flaw...

Apple AirDrop Bug Could Leak Your Personal Info to Anyone Nearby

New research has uncovered privacy weaknesses in Apple's wireless file-sharing protocol that could result in the exposure of a user's contact information such as email addresses and phone numbers. "As an attacker, it is possible to learn the phone numbers and email addresses of AirDrop users – ev...

Vulnerabilities of Cisco IOS XE operating systems, which allow attackers to compromise the confidentiality and integrity of protected information

The vulnerability of Cisco IOS XE operating systems is related to deficiencies in security mechanisms. Exploiting this vulnerability can allow attackers to compromise the confidentiality and integrity of the protected information...