CVE-2021-22349
There is an Input Verification Vulnerability in Huawei Smartphone. Successful exploitation of insufficient input verification may cause the system to restart.
Security researchers have found a long-standing vulnerability in the Azure Cosmos DB fully managed non-structured query language database, which allows attackers to remotely take over the information store with a trivial exploit. Named ChaosDB, the vulnerability gives any Azure user full administrative access to other customers’ Cosmos DB instances, security vendor Wiz Research Team said….
The New York Department of Financial Services (“NYDFS”) recently released its Cyber Insurance Risk Framework (the “Framework”), which provides best practices for managing cyber insurance risk. The stated goal of the Framework is to grow “a robust cyber insurance market that maintains the financial stability of insurers and protects insureds.” While the Framework is directed…
Выявлена новая вредоносная кампания, инициатором которой предположительно является северокорейская APT-группа Lazarus. Злоумышленники рассылают поддельные письма, предлагая инженерную должность в крупной американской или европейской компании. В AT&T Cybersecurity (ранее AlienVault) проанализировали три образца вредоносных документов Word, распространявшихся в мае и июне от имени Airbus, General Motors и германского производителя военной техники Rheinmetall. Оказалось, что все эти…
The Lactalis Group, one of the world’s largest food products groups, said it was hit by a cyberattack during which the intruders gained access to some of its computer systems. “The Lactalis Group has detected an intrusion on part of its computer network. We immediately took steps to contain this attack and have notified the…
Encryption & Key Management , Governance & Risk Management , Patch Management MTProto Has Since Been Patched Akshaya Asokan (asokan_akshaya) • July 20, 2021 Security researchers identified flaws in messaging app Telegram’s cryptographic protocol, MTProto, that enabled intruders to access encrypted chats and alter the messages. Those flaws have since been patched in…
A new type of malware campaign has been discovered that apparently blocks access to the most popular torrent site, The Pirate Bay, and a number of other sites known for redistributing pirated content. According to a recent report published by the cybersecurity firm SophosLabs, the malware dubbed as “vigilante” instead of stealing passwords or extorting…