January 15, 2019—KB4480959 (OS Build 15063.1596)

None None...

20-Year-Old Man Arrested For Carrying Out Germany's Biggest Data Leak

German federal police have arrested a 20-year-old local student for stealing and publishing a massive trove of personal data of hundreds of politicians, journalists and other public figures last month. The young man, whose identity has not been revealed by the police, was arrested after police...

CVE-2018-16524

creationtimestamp| type| source ---|---|--- 2018-12-31 09:38:19+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/kriittisia-haavoittuvuuksia-freertos-kayttojarjestelmissa...

CVE-2018-0254

creationtimestamp| type| source ---|---|--- 2018-12-31 07:31:23+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/cisco-korjasi-kriittisia-haavoittuvuuksia...

CVE-2018-19968

creationtimestamp| type| source ---|---|--- 2018-12-11 16:14:19+00:00| seen| https://t.me/thehackernews/151...

Quarterly SPM Support Bulletin 2015 Q4

Question Quarterly SPM Support Bulletin 2015 Q4 Answer SPM Support Bulletin ICM 9.0.2 Released ICM 9.0.2 has been released. You can find the release documentation here. Highlights include; setting scheduler properties per process allowing more flexible on error handling, new charts in Presenter...

CVE-2018-16323

creationtimestamp| type| source ---|---|--- 2018-11-19 16:07:26+00:00| published-proof-of-concept| https://t.me/canyoupwnme/4772 2018-11-19 17:12:18+00:00| published-proof-of-concept| https://t.me/thebugbountyhunter/2043 2018-11-19 17:14:43+00:00| published-proof-of-concept|...

CVE-2018-0673

creationtimestamp| type| source ---|---|--- 2018-11-15 18:22:38+00:00| seen| https://t.me/cibsecurity/1237...

CVE-2018-15454

creationtimestamp| type| source ---|---|--- 2018-11-01 08:35:36+00:00| seen| https://t.me/SecLabNews/3529 2018-11-01 09:03:35+00:00| seen| https://t.me/securixykz/185 2026-08-11 21:07:36+00:00| seen| https://bsky.app/profile/vulnsea.com/post/3mstji4lhcz2m...

Google Makes 2 Years of Android Security Updates Mandatory for Device Makers

When it comes to security updates, Android is a real mess. Even after Google timely rolls out security patches for its Android platform, a major part of the Android ecosystem remains exposed to hackers because device manufacturers do not deliver patches regularly and on a timely basis to their...

CVE-2015-4631

creationtimestamp| type| source ---|---|--- 2018-10-19 00:23:10+00:00| seen| https://t.me/cibsecurity/754...

CVE-2018-17784

creationtimestamp| type| source ---|---|--- 2018-10-12 20:36:40+00:00| seen| https://t.me/VulnerabilityNews/2309...

gertrudebell.ncl.ac.uk XSS vulnerability

Open Bug Bounty ID: OBB-681321 Description| Value ---|--- Affected Website:| gertrudebell.ncl.ac.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-10500

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Samsung Galaxy Apps Fixed in version 6.4.0.15. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw...

CVE-2018-17046

translate man before 2018-08-21 has XSS via containers/outputBox/outputBox.vue and store/index.js...

19-Year-Old Hacker Arrested Over Making Hoax School and Flight Bomb Threats

British police have arrested a 19-year-old teen who is an alleged member of Apophis Squad cybercriminal group responsible for making hoax bomb threats to thousands of schools and airlines; and DDoSing ProtonMail and Tutanota secure email services. George Duke-Cohan was arrested in his bedroom at...

CVE-2018-15919

creationtimestamp| type| source ---|---|--- 2018-08-30 09:01:15+00:00| seen| https://t.me/SecLabNews/3022 2024-07-01 14:30:24+00:00| seen| Telegram/2G0LL9YDDO0dQKSo5p4zQWAL-pbipATIxiBPSKqKsYKP6RG0 2024-07-01 14:33:02+00:00| seen| Telegram/w0w9iKcyXi70OnNrtP96yLy6sw-7f3qLcDmBnN0l3DtxqHg 2024-07-01...

A week in security (August 13 – August 19)

Last week on Malwarebytes Labs, we talked about how Process Doppelgänging meets Process Hollowing in the Osiris dropper, provided hints, tips, and links for a safer school year, gave a recap of Black Hat USA 2018, offered some tips for a secure content management system, highlighted a silly...

CVE-2016-4483

creationtimestamp| type| source ---|---|--- 2018-08-17 02:03:16+00:00| seen| https://t.me/VulnerabilityNews/792...

Hacking the McDonald's Monopoly Sweepstakes

Long and interesting story -- now two decades old -- of massive fraud perpetrated against the McDonald's Monopoly sweepstakes. The central fraudster was the person in charge of securing the winning tickets...