Robotic Process Automation vendor UiPath discloses data breach
Last week, ZDnet reported in an exclusive that the tech unicorn UiPath admitted having accidentally exposed the personal details of...
Month: December 2020
Pay2Key hackers stole data from Intel’s Habana Labs
Pay2Key ransomware operators claim to have compromised the network of the Intel-owned chipmaker Habana Labs and have stolen data. Intel-owned...
Hacked Subway UK marketing system used in TrickBot phishing campaign
Subway UK confirmed the hack of a marketing system that was used to send out phishing messages to deliver malware to...
In 2020, cybercriminals started laundering four times more money
According to the Kaspersky Fraud Prevention report, in 2020, attackers most often tried to make unauthorized money transfers by using...
Slipstream – NAT Slipstreaming Allows An Attacker To Remotely Access Any TCP/UDP Services Bound To A Victim Machine, Bypassing The Victim’s NAT/firewall, Just By The Victim Visiting A Website
NAT Slipstreaming allows an attacker to remotely access any TCP/UDP services bound to a victim machine, bypassing the victim's NAT/firewall...
403Bypasser – Burpsuite Extension To Bypass 403 Restricted Directory
An burpsuite extension to bypass 403 restricted directory. By using PassiveScan (default enabled), each 403 request will be automatically scanned...
Security Affairs Newsletter is back!
Security Affairs newsletter is back, it is the right time to subscribe to it. Every day I receive several emails...
Security Affairs newsletter Round 293
A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs free for...
PgMiner botnet exploits disputed CVE to hack unsecured PostgreSQL DBs
Researchers have discovered a botnet dubbed PgMiner that targets PostgreSQL databases running on Linux servers to install a cryptocurrency miner....
NI CompactRIO controller flaw could allow disrupting production
A serious flaw in National Instruments CompactRIO controllers could allow remote attackers to disrupt production processes in an organization. A...
Here’s a Quick Guide to Safeguarding Credentials
Safeguarding your authentication credentials is your best defense towards preventing your identity from falling into wrong hands. A recent...
WordPress Easy WP SMTP zero-day potentially exposes hundreds of thousands of sites to hack
Threat actors are actively exploiting a zero-day vulnerability in the popular Easy WP SMTP WordPress plugin installed on more than...
Spotify reset user passwords after accidentally personal information exposure
Spotify is informing users that their personal information might have been accidentally shared with some of its business partners. Spotify...
Facebook links cyberespionage group APT32 to Vietnamese IT firm
Facebook has suspended some accounts linked to APT32 that were involved in cyber espionage campaigns to spread malware. Facebook has...
Pavel Durov’s team advised the Ministry of Finance of Ukraine on cryptocurrencies.
The Minister of Digital Transformation Mikhail Fedorov said that his department is in contact with the team of the developer...
Microsoft releases patches for 58 vulnerabilities
On Tuesday, Microsoft released fixes for 58 vulnerabilities for more than ten products for Windows and other software in their...
Spear-Phishing Campaigns Targeting Tibet and Taiwan
Tibetan community is being targeted by a Spear-phishing campaign; it is suspected that malicious actors behind these operations are...
Gustave – Embedded OS kernel fuzzer
GUSTAVE is a fuzzing platform for embedded OS kernels. It is based on QEMU and AFL (and all of its...
Carnivore – Tool For Assessing On-Premises Microsoft Servers Authentication Such As ADFS, Skype, Exchange, And RDWeb
Carnivore is an assessment tool for Skype for Business, Exchange, ADFS, and RDWeb servers as well as some O365 functionality....
Re: Disable Windows Defender and most other 3rd party antiviruses
Posted by Roberto Franceschetti on Dec 11No. Secure antivirus deployments would include a "tamper protection" password. You cannot uninstall the...
Cross-site request forgery (CSRF) in OpenAsset Digital Asset Management 11.2.1/12.0.19 disclosure
Posted by Jack Misiura via Fulldisclosure on Dec 11Title: Cross-site request forgery (CSRF) Product: OpenAsset Digital Asset Management by OpenAsset...
Stored cross-site scripting (XSS) in OpenAsset Digital Asset Management 11.2.1/12.0.19 disclosure
Posted by Jack Misiura via Fulldisclosure on Dec 11Title: Stored cross-site scripting (XSS) Product: OpenAsset Digital Asset Management by OpenAsset...
IP access control bypass in OpenAsset Digital Asset Management 11.2.1/12.0.19 disclosure
Posted by Jack Misiura via Fulldisclosure on Dec 11Title: IP access control bypass Product: OpenAsset Digital Asset Management by OpenAsset...
Self-reflected XSS in WordPress DirectoriesPro 1.3.45 plugin disclosure.
Posted by Jack Misiura via Fulldisclosure on Dec 11Title: Self-reflected XSS Product: WordPress DirectoriesPro Plugin by SabaiApps Vendor Homepage: https://directoriespro.com/...
