Security Affairs

NOVEMBER 17, 2020

The analysis of a shellcode requires know-how of which system library and functions will be invoked to help its execution, and depends on the operating system it can be a wide variation of commands from direct calls to an OS functions calls to the hash of the API of certain OS libraries. Video: [link] 2. Slide: [link] 3.

Libraries 309

Libraries IT Security Information Security 309

Security Affairs

MARCH 27, 2020

A few days ago, Microsoft warned of hackers actively exploiting two zero-day remote code execution vulnerabilities in Windows Adobe Type Manager Library. The vulnerabilities affects the way Windows Adobe Type Manager Library handles a specially-crafted multi-master font – Adobe Type 1 PostScript format.

Libraries 357

Libraries Risk Security IT 357

Security Affairs

APRIL 29, 2020

The discovery urges Apple into implementing additional security measures to protect these components, following the approach already adopted by Google to protect multimedia processing libraries. Multimedia processing libraries are used by the modern mobile OS to automatically manage multimedia files (i.e. images, audio, and videos).

Libraries 361

Libraries Paper Security Cybersecurity 361

Security Affairs

FEBRUARY 16, 2021

Experts at Shielder disclosed a flaw in the Telegram app that could have exposed users’ secret messages, photos, and videos to remote attackers. The experts discovered that sending a sticker to a Telegram user could have exposed his secret chats, photos, and videos to remote attackers. ” continues the report.

Access 316

Access Libraries Encryption Security 316

Security Affairs

MAY 7, 2020

. “A possible memory overwrite vulnerability in Quram qmg library allows possible remote arbitrary code execution. The vulnerability resides in the Skia Android graphics library and affects the way Android OS running on Samsung devices handles the custom Qmage image format (.qmg). system libraries.” or libhwui.so

IT 353

IT Libraries Security Access 353

Security Affairs

JULY 31, 2020

IndieFlix is a US-based entertainment company offering a subscription-based online video streaming service that mainly specializes in independent titles, including feature films, shorts, and documentaries. Original post at: [link]. The data bucket discovered by CyberNews contains over 90,000 files related to the IndieFlix streaming service.

Access 219

Access Authentication Marketing Security 219

Security Affairs

DECEMBER 28, 2023

. “As a result, like with many supply chain libraries, the impact of this vulnerability could be severe if leveraged by threat actors.” ” reads the report published by SonicWall.

Authentication 349

Authentication Libraries Passwords Information Security 349

Security Affairs

OCTOBER 16, 2018

Keep swiping to the top left corner until VoiceOver tells you that you can select the Photo Library (“Fototeca” in Rodriguez’ video). Tap to select Photo Library. After selecting the Photo Library, iOS will take you back to the message screen, but you’ll see a blank space where the keyboard should be.

Access 277

Access Libraries Security IT 277

Security Affairs

SEPTEMBER 8, 2020

.” CVE-2020-1129 – Microsoft Windows Codecs Library Remote Code Execution Vulnerability , which can be exploited to perform code execution if an affected system views a specially crafted image. Since this vulnerability resides in the codecs library, multiple applications could be affected.

Libraries 292

Libraries Security Information Security IT 292

Security Affairs

FEBRUARY 21, 2019

The flaw is an “Absolute Path Traversal” issue in the library that could be exploited to execute arbitrary code by using a specially-crafted file archive. The issue affects a third-party library, called UNACEV2.DLL The flaw resides in the way an old third-party library, called UNACEV2.DLL, dll library in 2005.

Libraries 279

Libraries Archiving Security IT 279

Security Affairs

OCTOBER 22, 2018

Lilith Wyatt, a security researcher at Cisco Talos, has discovered a critical remote code execution vulnerability ( CVE-2018-4013 ) in the LIVE555 media streaming library that is used by popular media players, including VLC and MPlayer. LIVE555 Streaming Media is a set of open-source C++ libraries maintained by Live Networks Inc.

Libraries 266

Libraries Security IT 266

Security Affairs

SEPTEMBER 14, 2023

The executable is a backdoor that accesses the Linux API and invokes syscalls using the statically linked dietlibc library. “While checking videos on Free Download Manager that are hosted on YouTube, we identified several tutorials demonstrating how to install this software on Linux machines.” ” continues the report.

Cloud 332

Cloud Libraries Passwords IT 332

Security Affairs

JANUARY 12, 2024

“As a result, like with many supply chain libraries, the impact of this vulnerability could be severe if leveraged by threat actors.” reads the report published by SonicWall.

Honeypots 360

Honeypots Authentication Libraries Passwords 360

Security Affairs

FEBRUARY 15, 2019

The removed apps are Fast-search Lite, Battery Optimizer (Tutorials), VPN Browsers+, Downloader for YouTube Videos, Clean Master+ (Tutorials), FastTube, Findoo Browser 2019, and Findoo Mobile & Desktop Search. “Users may get introduced to these apps through the top free apps lists on the Microsoft Store or through keyword search.

Mining 278

Mining Libraries Analytics Security 278

Security Affairs

FEBRUARY 9, 2022

It is interesting to note that this month, Microsoft did not address critical vulnerabilities. 50 vulnerabilities are rated Important and one is rated Moderate in severity. Tag CVE ID CVE Title Severity Azure Data Explorer CVE-2022-23256 Azure Data Explorer Spoofing Vulnerability Important Kestrel Web Server CVE-2022-21986.NET

Security 246

Security Libraries Access IT 246

KnowBe4

JULY 19, 2023

KnowBe4 offers the world’s largest library of always-fresh security awareness and compliance training content that includes assessments, interactive training modules, videos, games, posters and newsletters via the KnowBe4 ModStore.

Libraries 98

Libraries Security awareness Compliance Security 98

Security Affairs

OCTOBER 5, 2022

The channel has more than 180,000 subscribers and according to Kaspersky the video with the malicious link had more than 64,000 views at the time of the discovery. The video was posted on January 2022, and according to Kaspersky’s telemetry, the first victims were compromised in March 2022.

Libraries 251

Libraries Personal data Passwords Cloud 251

Security Affairs

OCTOBER 9, 2020

Cisco fixed three high-severity flaws in Webex video conferencing system, Video Surveillance 8000 Series IP Cameras and Identity Services Engine. The most severe of these vulnerabilities is a Remote Code Execution and Denial of Service issue in Cisco’s Video Surveillance 8000 Series IP Cameras. received a CVSS score of 8.8

Authentication 246

Authentication Libraries Access Security 246

Security Affairs

APRIL 3, 2021

The popular video game publisher Activision is warning gamers that threat actors are actively disguising a remote-access trojan (RAT) in Duty Cheat cheat tool. On March 1st, the threat actor published a YouTube video advertising the COD Warzone 2020 as an “undetected” cheat and providing detailed instructions on how to use it.

Libraries 265

Libraries Access Security IT 265

Security Affairs

AUGUST 17, 2021

Most of the devices using the platform are video surveillance products such as IP cameras and baby monitors, an attacker could exploit this flaw to eavesdrop audio and video data. and above, please enable AuthKey and DTLS; If using ThroughTek SDK the older versions prior to v3.1.10, please upgrade library to v3.3.1.0

IoT 309

IoT Cloud Libraries Access 309

Security Affairs

SEPTEMBER 12, 2018

exe will drop malware components — several C++ and Python libraries and the Python 2.7 Core dynamic-link library (DLL) — along with the main ransomware executable (lockyfud.exe, which was created via PyInstaller ) in C:Users{user}AppDataLocalTempis-{random}.tmp.” When successfully run, the Facture_23100.31.07.2018.exe

Ransomware 276

Ransomware Libraries Encryption Archiving 276

Security Affairs

MARCH 15, 2019

The flaw is an “Absolute Path Traversal” issue in the library that could be exploited to execute arbitrary code by using a specially-crafted file archive. The issue affects a third-party library, called UNACEV2.DLL DLL that is used by WINRAR, it resides in the way an old third-party library, called UNACEV2.DLL,

Archiving 275

Archiving Libraries File names Security 275

Security Affairs

OCTOBER 20, 2018

The jQuery File Upload is a jQuery widget “with multiple file selection, drag&drop support, progress bars, validation and preview images, audio and video.”. There are a few Youtube videos demonstrating the attack for similar software packages.” wrote the expert. . ” concludes the expert.

File names 277

File names Libraries Security Access 277

eSecurity Planet

SEPTEMBER 22, 2022

Trellix security researchers have revealed a major vulnerability in the Python tarfile library that could be exploited in software supply chain attacks. Researchers made a video where they gain administrative privileges with the flaw by abusing Spyder IDE, a free and popular open-source environment made in Python.

Libraries 114

Libraries Archiving Risk Security 114

Security Affairs

MARCH 7, 2019

UPnP-enabled devices running outdated software are exposed to a wide range of attacks exploiting known flaws in UPnP libraries. Most of the devices discovered by the expert still use old versions of UPnP libraries that are affected by years old flaws. CVE-2013-0229 , a vulnerability found MiniUPnPd before 1.4,

Libraries 268

Libraries Communications Data collection Security 268

Security Affairs

FEBRUARY 14, 2022

“All uploaded content on video at the request of VOYO is available to users, but unfortunately we will not be able to broadcast live broadcasts and sports matches and upload new and missed content to the video library until further notice.” ” states the company.

Ransomware 246

Ransomware Libraries Security IT 246

Security Affairs

JUNE 7, 2019

“Today, Komodo were made aware of an issue with one of the libraries used by the Agama wallet, potentially putting some user funds at risk.” JavaScript library. Once discovered the flaw, the company decided to exploit it to protect the funds, anticipating the hackers and moving them to a secure location. security team.

IT 242

IT Libraries Risk Security 242

Security Affairs

MAY 27, 2022

Below are a couple of video PoCs of attacks devised by the experts that show GhostTouch attack to answer the phone call and connect the malicious Bluetooth. “In places like a cafe, library, meeting room, or conference lobbies, people might place their smartphone face-down on the table2. Redmi 8, and an iPhone SE (2020).

Paper 363

Paper Libraries Passwords Authentication 363

Security Affairs

JANUARY 22, 2021

” Once the e-book is sent to a target device, the attacker could have exploited a buffer overflow flaw in the JPEG XR image format library as well as a privilege escalation issue in the “stackdumpd” root process to inject arbitrary commands and run the code as root.

Authentication 360

Authentication Libraries Phishing Security 360

CILIP

NOVEMBER 29, 2023

Partnership to Campaign: Green Libraries is growing Global leaders, thinkers, and activists from industry and politics will gather this weekend in Dubai for the first day of COP28 to rethink, reboot, and refocus the climate agenda. The Green Libraries partnership gathered unprecedented momentum during its first year.

Libraries 82

Libraries Security IT 82

Security Affairs

MARCH 18, 2020

TrueFire has over 1 million users, its customer could pay to receive guitar tutorial from a library of over 900 courses and 40,000 video lessons. The news of the incident was reported by several websites and forums, such as Guitar.com and Jazzguitar. be , which are regularly visited by guitarists.

Data breaches 310

Data breaches Access Libraries Passwords 310

Security Affairs

MARCH 25, 2024

Developers of cryptographic libraries can either set the DOIT bit and DIT bit bits, which disable the DMP on some CPUs.” ” The experts published a paper that includes details about their study, they also published a video PoC for the attack. ” said the researchers.

Libraries 330

Libraries Paper Access Security 330

Krebs on Security

OCTOBER 18, 2022

The Massachusetts SNAP benefits card looks more like a library card than a payment card. Left) A video still showing a couple purchasing almost $1,200 in baby formula using SNAP benefits. Right) A video still of a woman leaving from the CVS in Seat Pleasant. Image: The Baltimore Banner.

Retail 292

Retail Libraries IT Risk 292

Security Affairs

JUNE 5, 2019

“The miner in resource is the primary miner used, but it also determines if the targeted system has a video card. . “Simultaneous with its attacks, BlackSquid also downloads and executes two XMRig cryptocurrency-mining components.! continues the analysis.

Mining 231

Mining File names Libraries IT 231

CILIP

AUGUST 6, 2024

Approaching AI at the National Library of Scotland Image of the National Library of Scotland by Magnus Hagdorn, from Flickr Robert Cawston, Director of Digital and Service Transformation, introduces a new AI Statement for the National Library of Scotland.

Libraries 77

Libraries Artificial Intelligence Metadata Data collection 77

Preservica

MARCH 18, 2022

Academic libraries are in the midst of rapid, widespread changes as it shifts into the digital age. Our libraries have been a steady flame for patrons to depend on, not just throughout the pandemic, but throughout history. See how Preservica customers are creating engaging internal and public access.

Libraries 96

Libraries Digital preservation Archiving e-Discovery 96

Security Affairs

JANUARY 7, 2023

Cyble researchers recently uncovered a phishing campaign targeting users of the popular video conferencing and online meeting platform Zoom to deliver the IcedID malware. Cyber researchers warn of a modified Zoom app that was used by threat actors in a phishing campaign to deliver the IcedID Malware.

Phishing 246

Phishing Libraries Cybersecurity IT 246