CVE-2021-38111
Summary: The DEF CON 27 badge allows remote attackers to exploit a buffer overflow by sending an oversized packet via...
Katie Moussouris hacked Clubhouse. Her emails went unanswered for weeks: Lock and Code S02E15
Nearly one year after the exclusive app Clubhouse launched on the iOS store, its popularity skyrocketed. The app, which is...
How to troubleshoot hardware problems that look like malware problems
Sometimes it’s hard to figure out what exactly is going wrong with your computer. What do you do if you’ve...
A week in security (August 9 – August 15)
Last week on Malwarebytes Labs: Home routers are being hijacked using a vulnerability disclosed just 2 beforeRansomware turncoat leaks Conti...
LockBit 2.0 Ransomware Victim: beardowadams[.]com
LockBit 2.0 Ransomware NOTE: The information on this page is automated and scraped directly from the LockBit 2.0 Onion Dark...
New AdLoad Malware Circumvents Apple’s XProtect to Infect macOS Devices
As part of multiple campaigns detected by cybersecurity firm SentinelOne, a new AdLoad malware strain is infecting Macs bypassing Apple's...
Critical Flaws Allowing Domain Hijacking Assaults Patched By Node.js Developers
A vulnerability in Node.js that would permit a remote actor to carry out domain hijacking assaults has been patched. Last week,...
Threat Group Aggah Targets Industries Via Spear-Phishing Campaigns
A spear-phishing attack that seems to have commenced in early July 2021, targeting various manufacturing industries in Asia has been...
Hackers can ‘Poison’ Open-source Code on the Internet
A Cornell University Tech team with researchers discovered a new kind of backdoor attack that can modify natural-language modelling systems...
Ficker – An Info-Stealer Malware Being Distributed by Russians
Threat actors are using the Malware-as-a-Service (MaaS) model to attack Windows users, according to researchers. The new info-stealer malware “Ficker”...
PickleC2 – A Post-Exploitation And Lateral Movements Framework
PickleC2 is a post-exploitation and lateral movements framework. DocumentationReadTheDocs OverviewPickleC2 is a simple C2 framework written in python3 used to...
CamPhish – Grab Cam Shots From Target’S Phone Front Camera Or PC Webcam Just Sending A Link.
Grab cam shots from target's phone front camera or PC webcam just sending a link. What is CamPhish?CamPhish is techniques...
How to use n8n to automatically scrape Victims from Ransomware dark web onion blogs via TOR proxy
Step one, get n8n up and running. Step two, have a spare device to install tor on and use as...
US FINRA warns US brokerage firms and brokers of ongoing phishing attacks
The US FINRA warns US brokerage firms and brokers of an ongoing phishing campaign impersonating its representatives to steal sensitive info. The...
Threat actor claims to be selling data of more than 100 million T-Mobile customers
T-Mobile is investigating a possible data breach after a threat actor published a post on a forum claiming to be...
A job ad published by the UK’s Ministry of Defence revealed a secret hacking squad
A job ad published by the UK’s Ministry of Defence has revealed the existence of a previously undisclosed secret SAS...
CVE-2020-22036
Summary: A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 in filter_intra at libavfilter/vf_bwdif.c, which might lead to memory corruption...
CVE-2021-3246
Summary: A heap buffer overflow vulnerability in msadpcm_decode_block of libsndfile 1.0.30 allows attackers to execute arbitrary code via a crafted...
CVE-2021-3246
Summary: A heap buffer overflow vulnerability in msadpcm_decode_block of libsndfile 1.0.30 allows attackers to execute arbitrary code via a crafted...
CVE-2021-3246
Summary: A heap buffer overflow vulnerability in msadpcm_decode_block of libsndfile 1.0.30 allows attackers to execute arbitrary code via a crafted...
CVE-2017-12613
Summary: When apr_time_exp*() or apr_os_exp_time*() functions are invoked with an invalid month field value in Apache Portable Runtime APR 1.6.2...
CVE-2020-21684
Summary: A global buffer overflow in the put_font in genpict2e.c of fig2dev 3.2.7b allows attackers to cause a denial of...
CVE-2021-28216
Summary: BootPerformanceTable pointer is read from an NVRAM variable in PEI. Recommend setting PcdFirmwarePerformanceDataTableS3Support to FALSE. Reference Links(if available): https://bugzilla.tianocore.org/show_bug.cgi?id=2957...
ESET: 77% of Russian residents believe they are being tracked via their smartphones
According to a survey conducted by ESET, a company specializing in anti-virus software development and protection against cyberthreats, most Russians...
