Security Affairs

DECEMBER 12, 2021

Immediately after the disclosure of the Log4Shell flaw in Log4j library threat actors started including the exploit code in Linux botnets. Researchers at NetLab 360 reported that their Anglerfish and Apacket honeypots were already hit by attacks attempting to trigger the Log4Shell flaw in the Log4j library.

Honeypots 363

Honeypots Libraries Passwords Authentication 363

Security Affairs

DECEMBER 4, 2020

Hundreds of millions of Android users are potentially exposed to the risk of hack due to the use of Android Play Core Library versions vulnerable to CVE-2020-8913. The CVE-2020-8913 flaw is a local, arbitrary code execution vulnerability that resides exists in the SplitCompat.install endpoint in Android’s Play Core Library.

Libraries 338

Libraries e-Delivery Risk Passwords 338

Security Affairs

SEPTEMBER 7, 2020

The trick used by the Epic Macnchego gang consists of compiling the documents with a.NET library called EPPlus , instead of the standard Microsoft Office software. ” The library can generate files in multiple spreadsheet formats, it also supports Excel 2019. .” ” reads the analysis published by NVISO.

Libraries 338

Libraries Phishing Passwords Security 338

Security Affairs

MAY 2, 2024

Threat actors breached the Dropbox Sign production environment and accessed customer email addresses and hashed passwords Cloud storage provider DropBox revealed that threat actors have breached the production infrastructure of the DropBox Sign eSignature service and gained access to customer information and authentication data.

Passwords 332

Passwords Authentication Access Phishing 332

Security Affairs

AUGUST 23, 2024

The malicious code is written in GoLang, upon mounting the dmg it prompts users to enter their system and MetaMask passwords using the macOS osascript tool. Once the user inputs their credentials, the malware stores them in a directory and uses Chainbreak to dump Keychain passwords. ” reads the report published by Cado Security.

Passwords 322

Passwords Blockchain Libraries Archiving 322

Security Affairs

MARCH 10, 2020

Individuals can also buy computer files, financial information, PII, and usernames and passwords taken from computers infected with malicious software (malware) located both in the U.S. Once payment was complete, the FBI obtained the gamer accounts, including the user name and password for each account.” storefront.”

Sales 360

Sales Passwords Libraries Authentication 360

Security Affairs

MARCH 11, 2024

“When the OpenEdge Authentication Gateway (OEAG) is configured with an OpenEdge Domain that uses the OS local authentication provider to grant user-id and password logins on operating platforms supported by active releases of OpenEdge, a vulnerability in the authentication routines may lead to unauthorized access on attempted logins.”

Authentication 342

Authentication Passwords Libraries Access 342

Security Affairs

JANUARY 1, 2022

email and password pairs leaked online. The Largest compilation of emails and passwords (COMB), more than 3.2 A zero-day exploit for Log4j Java library could have a tsunami impact on IT giants. The development team behind the Linux Mint distro has fixed a security flaw that could have allowed users to bypass the OS screensaver.

Security 290

Security Libraries Ransomware Passwords 290

Security Affairs

OCTOBER 17, 2018

The Libssh library is affected by a severe flaw that could be exploited by attackers to completely bypass authentication and take over a vulnerable server. This means that if a remote attacker sends the “SSH2_MSG_USERAUTH_SUCCESS” response to libssh, the library considers that the authentication has been successfully completed.

Libraries 279

Libraries Authentication Passwords Security 279

Security Affairs

SEPTEMBER 14, 2020

. “By forging an authentication token for specific Netlogon functionality, he was able to call a function to set the computer password of the Domain Controller to a known value. After that, the attacker can use this new password to take control over the domain controller and steal credentials of a domain admin.”

Authentication 330

Authentication Passwords Libraries Paper 330

Security Affairs

JULY 25, 2021

In order to target Telegram, the malware creates the archive “telegram.applescript” for the “keepcoder.Telegram” folder which is located in the Group Containers folder (“~/Library/Group Containers/6N38VWS5BX.ru.keepcoder.Telegram”). This differs from the practice on iOS. ” reads the analysis published by Trend Micro.

Libraries 286

Libraries Passwords Archiving Access 286

Security Affairs

DECEMBER 28, 2023

SonicWall researchers pointed out that the Apache OfBiz is part of the supply chain of prominent software, such as Atlassian’s JIRA (used by over 120K companies ). “As a result, like with many supply chain libraries, the impact of this vulnerability could be severe if leveraged by threat actors.”

Authentication 349

Authentication Libraries Passwords Information Security 349

Security Affairs

APRIL 6, 2020

Cloud security firm Aqua Security uncovered a hacking campaign carried out during the past months, hackers are scanning the Internet for Docker servers running API ports exposed without a password. gopsutil – a process utility library, used for system and processes monitoring.

Mining 333

Mining Libraries Cloud Communications 333

Security Affairs

NOVEMBER 2, 2022

The company pointed out that no one’s content, passwords, or payment information were accessed, it also remarked that the issue was quickly resolved. The investigation revealed that the code accessed by the attackers contained some credentials, primarily, API keys, used by the development team.

Access 336

Access Phishing Passwords Authentication 336

Security Affairs

APRIL 8, 2021

To see if your email address has been exposed in this data leak or other security breaches, use our personal data leak checker with a library of 15+ billion breached records. Brute-forcing the passwords of LinkedIn profiles and email addresses. Change the password of your LinkedIn and email accounts.

Passwords 361

Passwords Phishing Personal data Libraries 361

Security Affairs

JANUARY 8, 2021

– Nissan internal core mobile library – Nissan/Infiniti NCAR/ICAR services – client acquisition and retention tools – sale / market research tools + data – various marketing tools – the vehicle logistics portal (2/n) — tillie, doer of crime (@antiproprietary) January 4, 2021.

Libraries 309

Libraries Marketing Sales Passwords 309

Security Affairs

DECEMBER 1, 2023

Skia is an open-source 2D graphics library that provides common APIs that work across a variety of hardware and software platforms. CVE-2023-49103 – The vulnerability resides in the Graphapi app, which relies on a third-party GetPhpInfo.php library that provides a URL. The vulnerability impacts ownCloud owncloud/graphapi 0.2.x

IT 319

IT Libraries Cybersecurity Passwords 319

Security Affairs

SEPTEMBER 24, 2020

An attacker could also exploit the flaw to disable security features in the Netlogon authentication process and change a computer’s password on the domain controller’s Active Directory. The only limitation on how to carry out a Zerologon attack is that the attacker must have access to the target network.

Authentication 350

Authentication Passwords Analytics Libraries 350

Security Affairs

DECEMBER 31, 2021

CVE-2021-45077 : Plaintext Password Storage. Researchers discovered multiple instances of known vulnerable jQuery libraries (such as jquery 1.4.2), for this reason, they are urging to update them to the latest available versions. CVE-2021-23147 : Insufficient UART Protection Mechanisms.

Communications 359

Communications Libraries Encryption Passwords 359

Security Affairs

OCTOBER 23, 2018

The key is stored in plain text to a local file called %AppData%Signalconfig.json on Windows PCs and on a Mac at ~/Library/Application Support/Signal/config.json. The issue could be easily addressed by requiring users to set a password that would be used to encrypt the key the database encryption key. Source Bleeping Computer.

Encryption 279

Encryption Passwords Libraries Cybersecurity 279

Security Affairs

JUNE 13, 2019

Furthermore, hardcoded password hashes and credentials were also found by doing an automated scan with IoT Inspector.” The validity of the password hashes and the embedded keys were also verified by emulating the device. Both libraries are affected by known vulnerabilities, some of which rated as critical.

Libraries 246

Libraries Passwords IoT Security 246

Security Affairs

JANUARY 14, 2021

out of 10, could be exploited by a remote authenticated attacker to change the password for any account user on affected systems. “A vulnerability in Cisco Connected Mobile Experiences (CMX) could allow a remote, authenticated attacker without administrative privileges to alter the password of any user on an affected system.”

Passwords 298

Passwords Authentication Analytics Libraries 298

Security Affairs

JUNE 9, 2022

It is a shared object (SO) library that is loaded into all running processes using LD_PRELOAD (T1574.006), and like a parasite infects the machine. Symbiote can be loaded by the linker via the LD_PRELOAD directive before any other shared objects allowing to “hijack the imports” from the other library files loaded for the application.

Libraries 364

Libraries Passwords Security IT 364

Security Affairs

JANUARY 22, 2021

Stolen records belong to 2 million user records of MyFreeCams Premium members, they include usernames, email addresses, MyFreeCams Token (MFC Token) amounts, and passwords in plain text. In response to the incident, MyFreeCams reset the passwords of impacted users. ” reported CyberNews. .” ” reported CyberNews.

Sales 290

Sales Passwords Marketing Libraries 290

Security Affairs

JANUARY 12, 2024

As a result, like with many supply chain libraries, the impact of this vulnerability could be severe if leveraged by threat actors.” SonicWall researchers pointed out that the Apache OfBiz is part of the supply chain of prominent software, such as Atlassian’s JIRA (used by over 120K companies ). “As reads the report published by SonicWall.

Honeypots 360

Honeypots Authentication Libraries Passwords 360

Security Affairs

FEBRUARY 16, 2019

. “The campaign exploits legitimate operating system processes as well as security vendor products from companies like Avast and GAS Tecnologia to gain information about the target machine and steal password information, as well as keystate information and clipboard usage.” ” reads the analysis published by Cybereason.

Passwords 279

Passwords Archiving Libraries Security 279

Security Affairs

JULY 12, 2021

To see if any of your online accounts were exposed in previous security breaches, use our personal data leak checker with a library of 15+ billion breached records. Change the password of your LinkedIn and email accounts. Consider using a password manager to create unique strong passwords and store them securely.

Archiving 361

Archiving Passwords Data collection Sales 361

Security Affairs

SEPTEMBER 2, 2019

. “The malware is uploaded as gzip compressed tarball archives of binaries, scripts, and libraries. The libraries reside under the directory c/lib I thought it would be required to run the binaries in the tarball , but the binaries are compiled statically, so the libraries are extraneous.” ” wrote Cashdollar.

IoT 278

IoT Honeypots Libraries Archiving 278

Security Affairs

DECEMBER 31, 2020

The Emotet campaign uses malicious emails that attempt to trick recipients into opening the zipped archive with the password included in the message. Emails accessed in this way require user action: open the file, unzip it with a password. Emails accessed in this way require user action: open the file, unzip it with a password.

Passwords 277

Passwords Archiving Libraries Government 277

Security Affairs

SEPTEMBER 28, 2023

Google also addressed this month the following vulnerabilities in the Chrome browser: [$TBD][ 1478889 ] High CVE-2023-5186: Use after free in Passwords. Reported by [pwn2car] on 2023-09-05 [$2000][ 1475798 ] High CVE-2023-5187: Use after free in Extensions.

Libraries 330

Libraries Passwords Security IT 330

Security Affairs

NOVEMBER 28, 2023

The vulnerability, tracked as CVE-2023-49103 , resides in the Graphapi app, which relies on a third-party GetPhpInfo.php library that provides a URL. According to the advisory , in containerized deployments, these environment variables may include sensitive data such as the ownCloud admin password, mail server credentials, and license key.

Cybersecurity 327

Cybersecurity Libraries Passwords Access 327

Security Affairs

MARCH 19, 2020

CERT-FR’s alert states that the Pysa ransomware code based on public Python libraries. “ “The password database was leaked shortly before the attack. ” Once compromised the target network, attackers attempt to exfiltrate the company’s accounts and passwords database. .”

Ransomware 356

Ransomware Government Encryption Passwords 356

Security Affairs

JULY 14, 2021

The openssl program is a command line tool in macOS for using the various cryptography functions (SSL, TLS) of OpenSSL’s crypto library from the shell. During the installation process, Bundlore also ensures to collect the user’s password by presenting a misleading prompt as shown below (see Figure 9). cloudfront[.]net

Encryption 330

Encryption Passwords Libraries Security 330

Security Affairs

JULY 26, 2022

Dynamic-link library (DLL) side-loading is an attack method that takes advantage of how Microsoft Windows applications handle DLL files. In this campaign, the spam message contains an HTML file that has base64 encoded images and a password-protected ZIP file. The password-protected zip file contains an ISO file (i.e.

Passwords 260

Passwords File names Libraries Security 260

Security Affairs

MARCH 13, 2023

In order to compromise a target system, the samples require special conditions on it, such as the use of specific arguments and targeted services already being installed (with weak passwords). For MySQL and Postgres services, the malware scans for open ports 3306 and 5432, then pings the host’s database with a certain username and password.

Passwords 246

Passwords Libraries Authentication Communications 246

Security Affairs

MARCH 29, 2019

Organized toolsets (Tools folder on the desktop with Info Gathering, Exploitation, Password Attacks, etc.) With a library of offensive tools, it makes it easy for blue teams to keep up with offensive tooling and attack trends.” Windows-based C2 frameworks like Covenant (dotnet) and PoshC2 (PowerShell). ” concluded FireEye.

Passwords 279

Passwords Libraries Security IT 279

Security Affairs

JANUARY 27, 2021

Emotet is a modular malware, its operators could develop new Dynamic Link Libraries to update its capabilities. The Dutch National Police’s as part of the criminal investigation discovered a database containing email addresses, usernames, and passwords stolen by the bots.

Libraries 336

Libraries Passwords Ransomware IT 336