Security Affairs

DECEMBER 16, 2021

Experts warn that threat actors are actively attempting to exploit a second bug disclosed in the popular Log4j logging library. American web infrastructure and website security company Cloudflare warns that threat actors are actively attempting to exploit a second vulnerability, tracked as CVE-2021-45046 , disclosed in the Log4j library.

Libraries 363

Libraries Ransomware Access Security 363

Security Affairs

MARCH 20, 2020

Drupal developers released security updates for versions 8.8.x x that fix two XSS vulnerabilities affecting the CKEditor library. The Drupal development team has released security updates for versions 8.8.x x that address two XSS vulnerabilities that affect the CKEditor library. Drupal 8 versions prior to 8.7.x

Libraries 347

Libraries Risk Access Security 347

Krebs on Security

MARCH 17, 2022

For example, the popular library ES5-ext hadn’t updated its code in nearly two years. If so, the code broadcasts a “Call for peace:” A message that appears for Russian users of the popular es5-ext code library on GitHub. The message has been Google-Translated from Russian to English. ” . ”

Libraries 359

Libraries IT Security 359

Security Affairs

DECEMBER 18, 2021

Multiple flaws in the Log4J library are scaring organizations worldwide while threat actors are already exploiting them. While the experts were warning that threat actors are actively attempting to exploit a second vulnerability, tracked as CVE-2021-45046 , disclosed in the Log4j library a third security vulnerability made the headlines.

Libraries 364

Libraries Security Ransomware IT 364

Krebs on Security

JUNE 3, 2022

The new guidelines state that prosecutors should avoid charging security researchers who operate in “good faith” when finding and reporting vulnerabilities. ” What constitutes “good faith security research?” ” The new DOJ policy comes in response to a Supreme Court ruling last year in Van Buren v.

Security 310

Security Computer and Electronics Access Libraries 310

Security Affairs

APRIL 29, 2020

The discovery urges Apple into implementing additional security measures to protect these components, following the approach already adopted by Google to protect multimedia processing libraries. Multimedia processing libraries are used by the modern mobile OS to automatically manage multimedia files (i.e.

Libraries 361

Libraries Paper Security Cybersecurity 361

Security Affairs

APRIL 6, 2020

Cloud security firm Aqua Security uncovered a hacking campaign carried out during the past months, hackers are scanning the Internet for Docker servers running API ports exposed without a password. ” reads the post published by Aqua Security. gopsutil – a process utility library, used for system and processes monitoring.

Mining 340

Mining Libraries Cloud Communications 340

Security Affairs

AUGUST 26, 2019

The UK National Cyber Security Centre (NCSC) urges developers to drop Python 2 due to imminent End-of-Life to avoid attacks on a large scale. The UK National Cyber Security Centre (NCSC) is recommending developers to drop Python 2.x x due to the imminent End-of-Life. “Python 2.7 will not be maintained past 2020.

Security 279

Security Risk Ransomware Libraries 279

Security Affairs

DECEMBER 17, 2023

“Today we experienced an exploit on the Ledger Connect Kit, a Javascript library that implements a button allowing users to connect their Ledger device to third party DApps (wallet-connected Web sites). This is a good example of the industry working swiftly together to address security challenges.” and 1.1.7).”

Phishing 352

Phishing Libraries Authentication Access 352

Security Affairs

AUGUST 4, 2021

IN FRA:HALT is a set of vulnerabilities affecting a popular TCP/IP library commonly OT devices manufactured by more than 200 vendors. “Forescout Research Labs and JFrog Security Research exploited two of the Remote Code Execution vulnerabilities in their lab and show the potential effects of a successful attack.”

Manufacturing 332

Manufacturing Libraries Cloud Security 332

Security Affairs

MAY 2, 2023

Apple has released its first Rapid Security Response update, but many iPhone users reported problems during the installation of the iOS Security Response. On June 2022, Apple announced that the Rapid Security Response feature would be available starting with iOS 16.4.1, ” “iOS Security Response 16.4.1 (a)

Security 246

Security Libraries Education Cybersecurity 246

Security Affairs

JANUARY 11, 2022

Another gang, Night Sky ransomware operation, started exploiting the Log4Shell vulnerability in the Log4j library to gain access to VMware Horizon systems. The Night Sky ransomware operation started exploiting the Log4Shell flaw (CVE-2021-44228) in the Log4j library to gain access to VMware Horizon systems. trendmrcio[.]com,

Ransomware 340

Ransomware Libraries File names Encryption 340

Security Affairs

NOVEMBER 12, 2020

Google experts did not disclose the way the flaws have been exploited in the attacks, for example, it is not clear if they were chained by threat actors. “We would also like to thank all security researchers that worked with us during the development cycle to prevent security bugs from ever reaching the stable channel.”

Libraries 340

Libraries Security IT Information Security 340

Security Affairs

JANUARY 17, 2022

Recently, the Chinese security firm Rising detected a Linux variant of the SFile ransomware that uses the RSA+AES algorithm mode. “For example, the variant captured this time uses nuctech-gj0okyci (nuctech is the English name of Nuctech Technology Co., as the suffix name. .” Pierluigi Paganini.

Ransomware 364

Ransomware Encryption Libraries Communications 364

Security Affairs

JULY 24, 2023

OpenSSH (Open Secure Shell) is a set of open-source tools and utilities that provide secure encrypted communication over a network. Qualys security researchers have been able to independently verify the vulnerability, develop a PoC exploit on installations of Ubuntu Desktop 22.04 ” reads the advisory published by Qualys.

Libraries 246

Libraries Authentication Encryption Security 246

Security Affairs

JUNE 17, 2022

With the example limit of 1, encrypt the file twice. The infection sequence can be carried out using a combination of Microsoft APIs, command-line interface (CLI) scripts, and PowerShell scripts, the enterprise security firm added. The versioning settings are under list settings for each document library. . Pierluigi Paganini.

Libraries 283

Libraries Encryption Ransomware Cloud 283

Security Affairs

NOVEMBER 17, 2020

The analysis of a shellcode requires know-how of which system library and functions will be invoked to help its execution, and depends on the operating system it can be a wide variation of commands from direct calls to an OS functions calls to the hash of the API of certain OS libraries. radare2 is one example of those tools.

Libraries 311

Libraries IT Security Information Security 311

Security Affairs

DECEMBER 13, 2021

Threat actors are already abusing Log4Shell vulnerability in the Log4j library for malicious purposes such as deploying malware. A few hours ago, researchers at NetLab 360 reported that their Anglerfish and Apacket honeypots were already hit by attacks attempting to trigger the Log4Shell flaw in the Log4j library. Pierluigi Paganini.

Mining 340

Mining Honeypots Libraries IT 340

Security Affairs

MARCH 15, 2019

We contacted Microsoft, but they claimed that it was not a product vulnerability since security had been weakened by 3rd party applications that allowed overly permissive file access. Those modules are used for authentication and key exchange in Internet Protocol security.

Libraries 275

Libraries Authentication Access IT 275

Security Affairs

NOVEMBER 27, 2018

The Event-Stream library is a very popular NodeJS module used to allow developers the management of data streams, it has nearly 2 million downloads a week. It has been estimated that the tainted version of the library was downloaded by nearly 8 million developers. For example: $ npm ls event-stream flatmap -stream. through 5.1.0

Libraries 263

Libraries Encryption IT Security 263

Security Affairs

SEPTEMBER 16, 2024

. “We released a fix for CVE-2024-38112 in our July 2024 security updates which broke this attack chain. See [ CVE-2024-38112 – Security Update Guide – Microsoft – Windows MSHTML Platform Spoofing Vulnerability[([link] Customers should both the July 2024 and September 2024 security update to fully protect themselves.”

Archiving 343

Archiving File names Libraries Passwords 343

Security Affairs

MARCH 3, 2020

The Kimsuky APT group has been analyzed by several security teams. The “ AutoUpdate.dll” library then gains persistence by setting the following registry key “ HKCUSoftwareMicrosoftWindowsCurrentVersionRunOnceWindowsDefender ”. An example of the C2 registration is the following: Figure 12: Network traffic performed by the malware.

IT 363

IT File names Libraries Communications 363

Security Affairs

SEPTEMBER 16, 2018

The script loads various resources from Feedify’s infrastructure, including a library named “feedbackembad -min-1.0.js Below an example script dubbed MagentoCore. <script but apparently, the hackers re-infected the library. Security Affairs – cybercrime, MageCart ). js ,” which was compromised by MageCart.

Cloud 272

Cloud Libraries Access Security 272

Security Affairs

MARCH 17, 2022

of the library wipe the content of arbitrary files and replace it with a heart emoji. This security incident involves destructive acts of corrupting files on disk by one maintainer and their attempts to hide and restate that deliberate sabotage in different forms. ” reads the analysis published by security firm Synk.

Libraries 304

Libraries Communications Security IT 304

Security Affairs

MAY 12, 2020

IBM security researcher continues to monitor the evolution of the infamous Zeus Sphinx banking Trojan (aka Zloader or Terdot ) that receives frequent updates and that was involved in active coronavirus scams. . The post Zeus Sphinx continues to be used in Coronavirus-themed attacks appeared first on Security Affairs.

Libraries 341

Libraries Sales Government IT 341

Security Affairs

MAY 27, 2022

Security researchers devised a technique, dubbed GhostTouch, to remotely control touchscreens using electromagnetic signals. “In places like a cafe, library, meeting room, or conference lobbies, people might place their smartphone face-down on the table2. “We demonstrate the feasibility of this attack in the real world.”

Paper 363

Paper Libraries Passwords Authentication 363

Security Affairs

MAY 5, 2023

Upon executing one of the infected apps, it loads a heavily obfuscated native library containing a dropper that decrypts and runs malicious code from the app assets. Once discovered, the apps have been quickly removed from the Play Store, but the threat actors might have already uploaded other tainted apps that have yet to be discovered.

Libraries 246

Libraries Cybersecurity Security IT 246

OpenText Information Management

OCTOBER 25, 2024

GenAI can improve cybersecurity processes, such as automated threat detection, code review, and security testing. However, the same technology presents unique security challenges that traditional methods struggle to address. GenAI applications have both a supply chain to be secured and distinct vulnerabilities.

Security 64

Security Libraries Paper Cybersecurity 64

Security Affairs

JULY 12, 2021

LinkedIn’s refusal to treat malicious scraping as a security problem can potentially allow cybercriminals to gather data on new victims with impunity. To see if any of your online accounts were exposed in previous security breaches, use our personal data leak checker with a library of 15+ billion breached records.

Archiving 361

Archiving Passwords Data collection Sales 361

Security Affairs

JUNE 25, 2022

The malicious packages, which were reported to PyPI, are: loglib-modules — appears to target developers familiar with the legitimate ‘loglib’ library. pyg-modules — appears to target developers familiar with the legitimate ‘pyg’ library. ” reads the post published by Sonatype. . com:8000/upload.

Libraries 246

Libraries Metadata Security IT 246

Security Affairs

JANUARY 22, 2021

Security experts at Realmode Labs discovered multiple vulnerabilities in the Kindle e-reader that could have allowed an attacker to take over victims’ devices. Realmode Labs reported the flaws to Amazon on October 17 and the company released security updates to address them on December 10, 2020. Pierluigi Paganini.

Authentication 361

Authentication Libraries Phishing Security 361

Security Affairs

JUNE 22, 2022

Magecart threat actors have switched most of their operations server-side to avoid detection of security firms. Malwarebytes researchers observed the use of 3 different themes by the threat actor to hide their skimmer, named after JavaScript libraries: hal-data[.]org/gre/code.js org” and “js.staticounter[.]net,”

Cleanup 326

Cleanup CMS Libraries Phishing 326

The Last Watchdog

AUGUST 19, 2024

Related: Europe mandates resiliency Requiring a formal inventory of all components, libraries and modules in all business applications can help lock down software supply chains, especially in light of the SolarWinds and Colonial Pipeline attacks. He drew a vivid parallel between food safety and software security.

Security 173

Security Libraries Cloud Cybersecurity 173

Security Affairs

MARCH 7, 2019

UPnP-enabled devices running outdated software are exposed to a wide range of attacks exploiting known flaws in UPnP libraries. In early 2013, researchers at Rapid7 published an interesting whitepaper entitled “Security Flaws in Universal Plug and Play” that evaluated the global exposure of UPnP-enabled network devices.

Libraries 268

Libraries Communications Data collection Security 268

Security Affairs

JULY 17, 2024

Trend Micro researchers discovered that the flaw was actively exploited in the wild in May and reported it to Microsoft which addressed the zero-day with the July 2024 Patch Tuesday security updates. The archives are disseminated in cloud-sharing websites, Discord servers, and online libraries, and other means.

Archiving 321

Archiving Ransomware Libraries Passwords 321

Security Affairs

APRIL 8, 2021

To see if your email address has been exposed in this data leak or other security breaches, use our personal data leak checker with a library of 15+ billion breached records. An example of leaked data: What’s the impact of the leak? Consider using a password manager to create strong passwords and store them securely.

Passwords 361

Passwords Phishing Personal data Libraries 361

Security Affairs

JULY 14, 2021

These malware are the most predominant malware in macOS, also with a history of evading and bypassing the built-in Xprotect, Gatekeeper, Notarization and File Quarantine security features of macOS. An example of one such DMG file with bash scripts is shown below (see Figure 1). Figure 1: DMG file initiating bash script installation.

Encryption 332

Encryption Passwords Libraries Security 332