There is an out of bounds write vulnerability in Huawei Smartphone HUAWEI P30 versions 9.1.0.131(C00E130R1P21) when processing a message. An unauthenticated attacker can exploit this vulnerability by sending specific message to the target device. Due to insufficient validation of the input….
The Ad Observatory project at NYU was started by the Cybersecurity for Democracy group with over 6,500 volunteers at the University’s school of engineering in September 2020 Last week, Facebook Inc said it suspended accounts and access of New York University’s Ad Observatory project researchers, stating their research practices were against the company’s terms of…
Report: Builder Allows Cybercriminals to Create Specialized Office Documents Doug Olenick (DougOlenick) • April 8, 2021 An EtterSilent DocuSign template from a campaign in March 2021. (Source: Intel 471) Researchers at Intel 471 report cybercriminal gangs are using a newly discovered malicious document builder called “EtterSilent” to create differentiated, hard-to-discover, malicious documents that…
Application Security , Critical Infrastructure Security , Cybercrime as-a-service Cybereason Says Russian Hacking Group Prometei is Behind the Campaign Akshaya Asokan (asokan_akshaya) • April 25, 2021 A Russian botnet group called Prometei is exploiting critical Microsoft Exchange Server vulnerabilities to mine cryptocurrency from various organizations across the world, a new report by security…
Application Security , Biometrics , Encryption & Key Management Microsoft Promises Better ‘Zero Trust’ Capability, Passwordless Access Doug Olenick (DougOlenick) • June 25, 2021 Microsoft’s upcoming Windows 11 operating system will have new security capabilities and a new look. (Source: Microsoft) Security specialists are offering preliminary feedback on Microsoft’s sneak peek at the…
CISA, FBI Warn of Attacks Targeting Fortinet FortiOS | IT Security News 5. April 2021 The U.S. government is warning that Advanced Persistent Threat (APT) actors are exploiting vulnerabilities in Fortinet FortiOS in ongoing attacks targeting commercial, government, and technology services networks. read more Like this: Like Loading… Related Tags: SecurityWeek RSS Feed Sponsors Endpoint…
Critical Infrastructure Security , Endpoint Security , Governance & Risk Management CEO and CISO Panel Discusses Critical Infrastructure Protection Tom Field (SecurityEditor) • August 6, 2021 OT, IoT, IIoT – each has critical distinctions, and each is increasingly vital to protecting the world’s critical infrastructure from crippling cyberattacks. In a…
