CVE-2021-22333
There is an Improper Validation of Array Index vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause code to execute, thus obtaining system permissions.
Similar Posts
A Critical Serv-U Vulnerability Exploited in the Wild, Fixed by SolarWinds
A Critical Serv-U Vulnerability Exploited in the Wild, Fixed by SolarWinds | IT Security News Android App Android App with push notifications Sponsors Endpoint Cybersecurity www.endpoint-cybersecurity.com – Consulting in building your security products– Employee awareness training– Security tests for applications and pentesting… and more. Daily Summary Categories CategoriesSelect Category(ISC)2 Blog (323)(ISC)2 Blog infosec (13)(ISC)² Blog (386)2020-12-08 – Files…
Is Darknet Forum Ransomware Chatter Ban Having an Impact?
Cybercrime , Fraud Management & Cybercrime , Fraud Risk Management Report: XSS and Exploit Forum Members Using Workarounds to Violate the Ban Doug Olenick (DougOlenick) • August 6, 2021 A forum user receives a warning for attempting to trade ransomware. (Source: Digital Shadows) The decision by the Russian-speaking darknet forums XSS and Exploit…
Android Apps with 5.8 million Installs Caught Stealing Users’ Facebook Passwords
Google intervened to remove nine Android apps downloaded more than 5.8 million times from the company’s Play Store after the apps were caught furtively stealing users’ Facebook login credentials. “The applications were fully functional, which was supposed to weaken the vigilance of potential victims. With that, to access all of the apps’ functions and, allegedly,…
AWS veteran Charlie Bell to join Microsoft as cybersecurity lead – Cloud – Security
It’s semi-official: Former 23-year Amazon Web Services veteran Charlie Bell has been named an executive vice president at AWS rival Microsoft, where he will lead a newly formed engineering organisation focused on security, compliance, identity and management – presuming he comes to an amicable agreement with his former employer. Bell will be a senior engineering…
Massive Cyberattack Led to Khaos in Iranian Train System
A recent massive cyberattack involving wiper malware Meteor was successful in destroying Iran’s national rail infrastructure as well as the ministry of transportation’s website, resulting in significant train service interruptions throughout the country, according to The Hacker News. On July 9, the Iranian train system was rendered obsolete as a result of a massive attack…
Researchers, cyber security agency urge action by Microsoft cloud database users – Cloud – Security
Researchers who discovered a massive flaw in the main databases stored in Microsoft’s Azure cloud platform have now urged all users to change their digital access keys, not just the 3300 it notified this week. Researchers at a cloud security company called Wiz discovered this month they could have gained access to the primary digital…