CVE-2020-27222
Summary: In Eclipse Californium version 2.3.0 to 2.6.0, the certificate based (x509 and RPK) DTLS handshakes accidentally fails, because the...
Month: February 2021
CVE-2020-12525
Summary: M&M Software fdtCONTAINER Component in versions below 3.5.20304.x and between 3.6 and 3.6.20304.x is vulnerable to deserialization of untrusted...
Android devices caught in Matryosh botnet
Researchers at Netlab have discovered a new botnet that re-uses the Mirai framework to pull vulnerable Android devices into DDoS...
How NOT to fail at PDF redaction
The heated spat between Europe and AstraZeneca over a contract has segued into an unexpected blunder that left many of...
A week in security (February 1 – February 7)
Last week on Malwarebytes Labs, we dug into a load of security events. We first peered into how Fonix ransomware...
Domestic Kitten – An Iranian Surveillance Operation
Check Point researchers as of late revealed the full degree of Domestic Kitten's broad surveillance operation against Iranian residents that...
Experts Confirm Shady Ransomware Business, Block-chain Transactions on Rise
Chainalysis, a blockchain investment firm, recently published a report that confirms that ransomware operating cybercrime groups don't always work in...
Nespresso Prepaid Vending Machines Hacked by a Belgian Researcher for Free Coffee
Polle Vanhoof, a Belgian cybersecurity researcher discovered there a flaw in the older Nespresso prepaid coffee machine smart cards and...
Plex Media Servers Actively Abused To Amplify DDoS Attacks
Research workers with NetScout's Atlas Security Engineering and Response Team have warned against the threat actors campaign, they said that...
Hackers Used Internet Explorer Zero-Day Vulnerability To Target Security Researchers
In recent times, during the attacks against the security and vulnerability researchers in North Korea, an Internet Explorer zero-day vulnerability...
Wifi-Password – Quickly Fetch Your WiFi Password And If Needed, Generate A QR Code Of Your WiFi To Allow Phones To Easily Connect
Quickly fetch your WiFi password and if needed, generate a QR code of your WiFi to allow phones to easily...
Ditto – A Tool For IDN Homograph Attacks And Detection
Ditto is a small tool that accepts a domain name as input and generates all its variants for an homograph...
Domestic Kitten has been conducting surveillance targeting over 1,000 individuals
Iran-linked APT group Domestic Kitten, also tracked as APT-C-50, has been conducting widespread surveillance targeting over 1,000 individuals. Domestic Kitten,...
Novel phishing technique uses Morse code to compose malicious URLs
Cybercriminals devised a new phishing technique that leverages the Morse code to hide malicious URLs and bypass defense. Experts spotted...
Victims of Ziggy ransomware can recover their files for free
The Ziggy ransomware gang has shut down its operations and released the decryption keys fearing the ongoing investigation of law enforcement....
COMB breach: 3.2B email and password pairs leaked online
The Largest compilation of emails and passwords (COMB), more than 3.2 billion login credentials, has been leaked on a popular...
Hacking Nespresso machines to have unlimited funds to purchase coffee
Some commercial Nespresso machines that are used in Europe could be hacked to add unlimited funds to purchase coffee. Some...
CVE-2020-36225
Summary: A flaw was discovered in OpenLDAP before 2.4.57 leading to a double free and slapd crash in the saslAuthzTo...
CVE-2020-36224
Summary: A flaw was discovered in OpenLDAP before 2.4.57 leading to an invalid pointer free and slapd crash in the...
CVE-2020-36223
Summary: A flaw was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Values Return Filter control...
CVE-2020-36222
Summary: A flaw was discovered in OpenLDAP before 2.4.57 leading to an assertion failure in slapd in the saslAuthzTo validation,...
CVE-2020-36221
Summary: An integer underflow was discovered in OpenLDAP before 2.4.57 leading to slapd crashes in the Certificate Exact Assertion processing,...
Operation LadyBird: International Law Enforcement Agencies Crackdown Emotet
European and US law agencies earlier this week directed a brilliant crackdown on Emotet. Emotet is a botnet of corrupted...
Webdev Tutorials Site ‘SitePoint’ has Disclosed a Data Breach
The website Sitepoint, which provides access to online study and information on web development content tutorials and books, reported...
