These 2 attacks allow to alter certified PDF Documents
Researchers disclosed two new attack techniques that allow modifying visible content on certified PDF documents without invalidating the digital signature....
Month: May 2021
Security Affairs newsletter Round 316
A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs free for...
Facefish Backdoor delivers rootkits to Linux x64 systems
Qihoo 360 NETLAB spotted a new backdoor dubbed Facefish that could allow attackers to take over Linux systems and steal...
FBI will share compromised passwords with HIBP Pwned Passwords
The FBI is going to share compromised passwords discovered during investigations with Have I Been Pwned (HIBP)’s ‘Pwned Passwords’ service....
Secure Search is a Browser Hijacker – How to Remove it Now?
Secured Search is a browser hijacker that changes your browser’s settings to promote securedsearch.com, let’s remove it. Secured Search is...
CVE-2021-21659
Summary: Jenkins URLTrigger Plugin 0.48 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks....
CVE-2021-20254
Summary: A flaw was found in samba. The Samba smbd file server must map Windows group identities (SIDs) into unix...
CVE-2021-1737
Summary: An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.2, Security...
CVE-2021-1738
Summary: An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.2, Security...
Apple’s Big Sur 11.4 Patches a Security Flaw that Could be Exploited to Take Screenshots
Big Sur 11.4 was updated this week to fix a zero-day vulnerability that allowed users to capture screenshots, capture video,...
Kaspersky detected a new method of cyber attacks on corporate data
Kaspersky Lab noted that the new attacks differ from cyberattacks using encryption viruses in that the scammers do not use...
Fearing Data Breach, BBMP Shuts Down COVID-19 Test Data Collection Portal
The Bruhat Bengaluru Mahanagara Palike (BBMP) has shut down its COVID-19 test data collection portal after a possible data breach,...
SonicWall Urges Customers to ‘immediately’ Patch NSM On-Prem Bug
SonicWall urges customers to “immediately” patch a post-authentication vulnerability that impacts on-premises versions of the Network Security Manager (NSM) multi-tenant...
This Entertainment-Themed Campaign Installs Malware in User Computer System
A popular phishing campaign tries to somehow get users to believe that they've enrolled in the film streaming platform to...
IMAPLoginTester – Script That Reads A Text File With Lots Of E-Mails And Passwords, And Tries To Check If Those Credentials Are Valid By Trying To Login On IMAP Servers
IMAPLoginTester is a simple Python script that reads a text file with lots of e-mails and passwords, and tries to...
slopShell – The Only Php Webshell You Need
php webshell Since I derped, and forgot to talk about usage. Here goes. For this shell to work, you need...
SonicWall fixes an NSM On-Prem bug, patch it asap!
SonicWall urges customers to address a post-authentication flaw that affects on-premises versions of the Network Security Manager (NSM). SonicWall urges...
CVE-2020-15782 flaw in Siemens PLCs allows remote hack
Industrial cybersecurity firm Claroty discovered a new flaw in Siemens PLCs that can be exploited by a remote and unauthenticated...
CVE-2021-27823
Summary: An information disclosure vulnerability was discovered in /index.class.php (via port 8181) on NetWave System 1.0 which allows unauthenticated attackers...
CVE-2021-32606
Summary: In the Linux kernel 5.11 through 5.12.2, isotp_setsockopt in net/can/isotp.c allows privilege escalation to root by leveraging a use-after-free....
CVE-2020-25672
Summary: A memory leak vulnerability was found in Linux kernel in llcp_sock_connect Reference Links(if available): https://lists.fedoraproject.org/archives/list/[email protected]/message/PW3OASG7OEMHANDWBM5US5WKTOC76KMH/ http://www.openwall.com/lists/oss-security/2020/11/01/1 https://lists.fedoraproject.org/archives/list/[email protected]/message/UTVACC6PGS6OSD3EYY7FZUAZT2EUMFH5/ https://www.openwall.com/lists/oss-security/2020/11/01/1 https://lists.fedoraproject.org/archives/list/[email protected]/message/VEIEGQXUW37YHZ5MTAZTDCIMHUN26NJS/...
CVE-2021-21659
Summary: Jenkins URLTrigger Plugin 0.48 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks....
CVE-2021-20254
Summary: A flaw was found in samba. The Samba smbd file server must map Windows group identities (SIDs) into unix...
CISA-FireEye: 16 malware families from China infect Pulse Secure VPN appliances
FireEye Mandiant, working in in tandem with the Cybersecurity and Infrastructure Security Agency and Ivanti, reported details of 16 malware...
