CVE-2021-34392
Trusty TLK contains a vulnerability in the NVIDIA TLK kernel where an integer overflow in the tz_map_shared_mem function can bypass boundary checks, which might lead to denial of service.
Similar Posts
New Bugs Could Let Hackers Bypass Spectre Attack Mitigations On Linux Systems – KK Hack Labs
Cybersecurity researchers on Monday disclosed two new vulnerabilities in Linux-based operating systems that, if successfully exploited, could let attackers circumvent mitigations for speculative attacks such as Spectre and obtain sensitive information from kernel memory.Discovered by Piotr Krysiuk of Symantec’s Threat Hunter team, the flaws — tracked as CVE-2020-27170 and CVE-2020-27171 (CVSS
Threat intel firms suggest ransomware gang ‘BlackMatter’ has ties to DarkSide, REvil hackers
Written by Tim Starks Jul 28, 2021 | CYBERSCOOP Digital sleuths at cyber threat intelligence firms have found clues that a seemingly new ransomware organization has links to DarkSide and REvil, two gangs that suddenly disappeared shortly after major attacks. From the moment DarkSide vanished following the Colonial Pipeline incident and REvil went dark after…
Fake Telegram Desktop App Malware Campaign Persists
Application Security & Online Fraud , Cybercrime , Fraud Management & Cybercrime Google Ad Leads to Malicious App Disguised as Telegram Jeremy Kirk (jeremy_kirk) • March 17, 2021 Jannis Kirschner, an independent security researcher based in Basel, Switzerland, searched on Sunday for the desktop version of the popular messaging application Telegram. See Also:…
Vulnerability Management: Essential Components
Fraud Management & Cybercrime , Fraud Risk Management , Governance & Risk Management Steve Yurich, CISO of Penn National Insurance, on the Need for Frequent Scanning Suparna Goswami (gsuparna) • May 3, 2021 Steve Yurich, CISO at Penn National Insurance Effective vulnerability management requires more frequent scanning of infrastructure, says Steve…
Canada Post reports data breach to 44 large businesses, 950K customers affected – National
A malware attack on one of Canada Post’s suppliers has caused a data breach affecting 44 of the company’s large business clients and their 950,000 receiving customers, the postal agency confirmed Wednesday. It said the information affected is from July 2016 to March 2019, and 97 per cent of it comprised the names and…
Zoom Agrees to Settle Lawsuit Over ‘Zoombombing’
Zoom Video Communications, the videoconferencing company whose internet app became a mainstay of American life during the coronavirus pandemic, has agreed to pay $85 million and improve its security practices to settle a lawsuit claiming it violated the privacy of its users. Filed in March 2020, not long after the pandemic reached the United States,…