Watch out, hackers can take over your Cosori Smart Air Fryer
Watch out, hackers could breach into your house by exploiting two remote code execution (RCE) vulnerabilities in the Cosori Smart...
Month: April 2021
WeChat users targeted by hackers using recently disclosed Chromium exploit
Threat actors used the Chrome exploit publicly disclosed last week in attacks aimed at WeChat users in China, researchers warn....
Crooks stole driver’s license numbers from Geico auto insurer
Car insurance provider Geico has suffered a data breach, attackers have stolen the driver’s licenses for policyholders for several weeks. Geico,...
Experts demonstrated how to hack a utility and take over a smart meter
Researchers from the FireEye’s Mandiant team have breached the network of a North American utility and turn off one of...
Crooks made more than $560K with a simple clipboard hijacker
Avast researchers analyzed the activity of a simple cryptocurrency malware dubbed HackBoss that allowed its operators to earn over $560K....
CVE-2021-23358
Summary: The package underscore from 1.13.0-0 and before 1.13.0-2, from 1.3.2 and before 1.12.1 are vulnerable to Arbitrary Code Injection...
CVE-2021-28349
Summary: Windows GDI+ Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-28348, CVE-2021-28350. Reference Links(if available): https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28349 CVSS...
CVE-2021-28348
Summary: Windows GDI+ Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-28349, CVE-2021-28350. Reference Links(if available): https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28348 CVSS...
CVE-2017-11450
Summary: coders/jpeg.c in ImageMagick before 7.0.6-1 allows remote attackers to cause a denial of service (application crash) or possibly have...
CVE-2019-17540
Summary: ImageMagick before 7.0.8-54 has a heap-based buffer overflow in ReadPSInfo in coders/ps.c. Reference Links(if available): https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15826 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=942578 https://security-tracker.debian.org/tracker/CVE-2019-17540 https://github.com/ImageMagick/ImageMagick/compare/7.0.8-53...7.0.8-54...
A week in security (April 12 – 18)
Last week on Malwarebytes Labs, our podcast featured Troy Hunt, Chloé Messdaghi, and Tanya Janca who discussed security fatigue with...
Lazarus APT conceals malicious code within BMP image to drop its RAT
This blog was authored by Hossein Jazi Lazarus APT is one of the most sophisticated North Korean Threat Actors that...
Threat Actors Target Covid-19 Vaccine Cold Chain Via Spear-Phishing Campaign
Cybercriminals are continuing to target the COVID-19 vaccine cold chain, the means of delivering and storing vaccines at safe temperatures,...
Nagios XI Servers: Seems to be Turning Into Cryptocurrency Miners for Attackers
Nagios XI is a popular enterprise server and network monitoring solutions. The feature “Configuration Wizard: Windows Management Instrumentation (WMI)” is...
Customers Deceived by Google for Collection of User Location Data
The Federal Court of Australia observed that somewhere between January 2017 and December 2018, Google LLC and Google Australia Pty...
Hackers have Access to Domino’s India 13TB of Internal Data
Popular pizza outlet Domino's India appears to have succumbed to a cyber assault. As per Alon Gal co-founder of an...
Targeted Malware Reverse Engineering Workshop follow-up. Part 1
On April 8, 2021, we conducted a webinar with Ivan Kwiatkowski and Denis Legezo, Senior Security Researchers from our Global...
Modded-Ubuntu – Run Ubuntu GUI On Your Termux With Much Features
Run Ubuntu GUI on your termux with much features. FeaturesFixed Audio Output Lightweight {Requires at least 4GB Storage} Katoolin3 tool...
Cypheroth – Automated, Extensible Toolset That Runs Cypher Queries Against Bloodhound’s Neo4j Backend And Saves Output To Spreadsheets
Automated, extensible toolset that runs cypher queries against Bloodhound's Neo4j backend and saves output to spreadsheets.DescriptionThis is a bash script...
Here’s a Quick Look at How Pakistani Counterfeiters Helped Russian Operatives
One company stood out in a cascade of U.S. sanctions imposed on Thursday on Russian cybersecurity companies and officials allegedly...
BazarLoader Malware: Abuses Slack and BaseCamp Clouds
The primary feature of the BazarLoader downloader, which is written in C++, is to download and execute additional modules. BazarLoader...
The Code Testing Company CodeCov Suffers a Data Breach Which Went Undetected for Months
U.S. federal authorities are investigating a safety violation at Codecov, which works on selling a tool that allows developers to...
CERT-In Issues “High” Severity Rating Advisory for WhatsApp Threats
The Indian Computer Emergency Response Team (CERT-In) has cautioned WhatsApp clients in India of various vulnerabilities it identified in the...
Spraygen – Password List Generator For Password Spraying
Password list generator for password spraying - prebaked with goodies Version 1.4 Generates permutations of Months, Seasons, Years, Sports Teams...
