5780 matches found
On xDedic, a Flash Zero Day, Facial Recognition, and More
Mike Mimoso and Chris Brook discuss the news of the week, including a password issue at Github, the xDedic marketplace, another Flash zero day, and how the poorly the FBI is doing with facial recognition software. Download: ThreatpostNewsWrapJune172016.mp3 Music by Chris Gonsalves...
Adobe Patches Flash Zero Day Under Attack by APT Group
Adobe on Thursday patched a zero-day vulnerability in Flash Player that has been used in targeted attacks carried out by a new APT group operating primarily against high-profile victims in Russia and Asia. Researchers at Kaspersky Lab privately disclosed the flaw to Adobe after exploits against t...
DNC Hacked, Research on Trump Stolen
Two separate APT groups believed to have ties to the Russian government have been fingered in attacks against the Democratic National Committee resulting in the theft of research done by the DNC on presumptive Republican nominee Donald Trump. Researchers at Crowdstrike, called in to investigate b...
$90K Windows Zero Day Gets a Price Cut
A Windows zero-day for sale on the black market for $90,000 just received a price drop. The flaw that allegedly leaves all versions of Windows users exposed to a local privilege escalation LPE vulnerability can now be snatched up for $85,000. According to Trustwave, which has been monitoring the...
On TeamViewer, the MySpace and Tumblr Breaches, and the 90K Windows Zero Day
Mike Mimoso and Chris Brook discuss the news of the week, including the back and forth around whether or not TeamViewer was hacked, the fallout around the years-old MySpace and Tumblr breaches, and a 90K Windows zero day. Download: ThreatpostNewsWrap-June32016.mp3 Music by Chris Gonsalves...
WordPress Patches WP Mobile Detector Plugin Zero Day
A WordPress plugin was patched Thursday night, close to a week after reports began to surface of public attacks against a zero-day vulnerability. WP Mobile Detector was pulled from the WordPress Plugin Directory once the attacks went public. It was restored last night and users are urged to updat...
SolarWinds Server & Application Monitor (SAM) Alert Handling Local Privilege Escalation
The version of SolarWinds Server & Application Monitor SAM running on the remote host is affected by a privilege escalation vulnerability in the Alert Manager component due to improper handling of specially crafted alerts. A local attacker can exploit this to gain elevated privileges and execute...
Impact Windows total series operating system Zero-Day vulnerabilities on the Black Market the price reached a 9 million-vulnerability warning-the black bar safety net
Recently,an ID called BuggiCorp hacking,is a underground hacker forums sell for the Windows operating system Zero-Day vulnerabilities in the program. Zero-Day Attack,translated as“zero-day attack”, a“zero day attack”or“initial attack”and the like. Hackers can exploit the vulnerability,and attack...
Hackers Selling Unpatched Microsoft Windows Zero-Day Exploit for $90,000
How much a Windows zero-day exploit that affects all versions of Windows operating system costs on the black market? It's $95,000, at least, for the one recently spotted by security researchers. Researchers from Trustwave's SpiderLabs team have uncovered a zero-day exploit on Russian underground...
mercadodeplanes.com XSS vulnerability
Vulnerable URL: http://www.mercadodeplanes.com/wp-content/plugins/wp-table-reloaded/js/tabletools/zeroclipboard.swf?id=%22catchealert/OPENBUGBOUNTY/;// Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...
Windows Zero Day Selling for $90,000
Hackers claim to have unearthed a zero-day vulnerability giving attackers admin rights to any Windows machine from Windows 2000 to a fully patched version of Windows 10. The zero day is for sale on the black market for $90,000. Security experts say the zero-day exploit looks legitimate and in the...
Hackers Find Bugs, Extort Ransom and Call it a Public Service
Crooks breaking into enterprise networks are holding data they steal for ransom under the guise they are doing the company a favor by exposing a flaw. The criminal act is described as bug poaching by IBM researchers and is becoming a growing new threat to businesses vulnerable to attacks. Accordi...
Exploit Kits Attacking Adobe Flash Player Zero Day
Update Exploits for the most recent Adobe Flash Player zero-day vulnerability have been integrated into the Angler, Neutrino and Magnitude exploit kits, and are leading compromised computers to different ransomware strains, banking malware, and a credential-stealing Trojan. A French researcher wh...
WordPress Plugin Job Script by Scubez - Remote Code Execution
WordPress Plugin Job Script by Scubez - Remote Code Execution !C:/Python27/python.exe -u JobScript Remote Code Execution Exploit Vendor: Jobscript Product web page: http://www.jobscript.in Affected version: Unknown Summary: JobScript is inbuilt structured website was developed in PHP and MySQL...
Apple iOS/watchOS/tvOS and OS X El Capitan IOAcceleratorFamily Denial of Service Vulnerability
Apple iOS is an operating system on Apple's cell phones. oS X El Capitan is a dedicated operating system developed for Mac computers. watchOS is a smartwatch operating system. A security vulnerability in IOAcceleratorFamily in Apple iOS, watchOS, and OS X El Capitan allows an attacker to exploit...
Windows Zero-Day Vulnerability, CVE-2 0 1 6-0 1 6 7: the attack Payment Card data-vulnerability warning-the black bar safety net
2 0 1 6 years 3 month, there has been a batch of economic motivation to the retail, Foodservice and hospitality industry as the target of the attack, these attacks, the message contains a large number of with embedded macros of the Microsoft Word document, once downloaded it will execute a named...
CVE-2016-4117: Flash Zero-Day Exploited in the Wild
On May 8, 2016, FireEye detected an attack exploiting a previously unknown vulnerability in Adobe Flash Player CVE-2016-4117 and reported the issue to the Adobe Product Security Incident Response Team PSIRT. Adobe released a patch for the vulnerability in APSB16-15 just four days later. Attackers...
CVE-2016-4117: Flash Zero-Day Exploited in the Wild
On May 8, 2016, FireEye detected an attack exploiting a previously unknown vulnerability in Adobe Flash Player CVE-2016-4117 and reported the issue to the Adobe Product Security Incident Response Team PSIRT. Adobe released a patch for the vulnerability in APSB16-15 just four days later. Attackers...
On Zero Days, SAP Vulnerabilities, and FBI vs. Tor
Mike Mimoso and Chris Brook discuss the news of the week, including zero day vulnerabilities–both in Adobe Flash and Windows, a nasty vulnerability in SAP business applications, Mozilla asking FBI to disclose a Tor exploit, and more. Download: ThreatpostNewsWrapMay132016.mp3 Music by Chris Gonsal...
Adobe Emergency Update Patches Flash Zero Day
As promised earlier this week, Adobe today released an updated version of Flash Player that includes a patch for a zero-day vulnerability. Adobe said it is aware of the existence of a public exploit for CVE-2016-4117, but said the flaw has not been publicly attacked. The vulnerability affects Fla...