Security Boulevard

MARCH 19, 2024

The post Discovering API secrets & endpoints using APKLeaks appeared first on Dana Epp's Blog. The post Discovering API secrets & endpoints using APKLeaks appeared first on Security Boulevard.

Mobile 64

Mobile Hacking 64

Penetration Testing

MARCH 29, 2024

This vulnerability could allow attackers to bypass SSH authentication on certain Linux... The post CVE-2024-3094 (CVSS 10): Backdoor Flaw Discovered in Popular Linux Compression Tool appeared first on Penetration Testing. A severe backdoor vulnerability (designated CVE-2024-3094) has been unearthed in versions 5.6.0

Penetration Testing 116

Penetration Testing Authentication 116

Schneier on Security

JANUARY 31, 2022

It was discovered in October, and disclosed last week — after most Linux distributions issued patches. It provides a mechanism for nonprivileged processes to safely interact with privileged processes. It also allows users to execute commands with high privileges by using a component called pkexec, followed by the command.

207

207

Penetration Testing

APRIL 21, 2024

... The post CVE-2024-2796: Critical Vulnerability Discovered in Popular API Developer Portal appeared first on Penetration Testing. Security researcher Jakob Antonsson has uncovered a critical vulnerability (CVE-2024-2796) within the Perforce Akana Community Manager Developer Portal.

Penetration Testing 87

Penetration Testing Software 87

Troy Hunt

JUNE 9, 2021

I've had a couple of cases to date where email addresses compromised by malware then discovered in the course of investigations have been provided to Have I Been Pwned (HIBP). Firstly by the Estonian Central Criminal Police a few years ago , then by the FBI and global counterparts this April and now, in the third such case, by NordLocker.

Malware 362

Malware 362

Schneier on Security

JANUARY 15, 2020

It was discovered by security researchers. Interestingly, it was discovered by NSA security researchers, and the NSA security advisory gives a lot more information about it than the Microsoft advisory does. According to her, the NSA discovered this vulnerability as part of its security research. (If

Media 312

Media Government Software Risk 312

Bleeping Computer

DECEMBER 18, 2023

Four vulnerabilities, one of which is rated critical, have been discovered in the Perforce Helix Core Server, a source code management platform widely used by the gaming, government, military, and technology sectors. [.]

Government 115

Government Technology 115

Penetration Testing

APRIL 3, 2024

These vulnerabilities, if left unpatched, could allow attackers to steal sensitive user data, hijack user... The post Multi Vulnerabilities Discovered in VeridiumID Authentication Platform – Patch Now appeared first on Penetration Testing.

Authentication 82

Authentication Penetration Testing 82

Digital Shadows

FEBRUARY 13, 2024

ReliaQuest has detected a variant of the SocGholish malware that uses Python instead of PowerShell for persistence, signaling an evolution in the TTPs of threat actors utilizing this malware.

Malware 138

Malware 138

Penetration Testing

FEBRUARY 9, 2024

The deception begins with an imitation of a Visual Studio update, a guise cleverly chosen... The post Mac Under Attack: New Rust Backdoor Discovered! This malware, coded in Rust, boasts unique features. appeared first on Penetration Testing.

Penetration Testing 84

Penetration Testing Malware 84

Security Boulevard

JUNE 16, 2023

ChatGPT security took center stage in April 2023 when Samsung employees leaked […] The post ChatGPT Security: Discovering and Securing AI Tools first appeared on Banyan Security. The post ChatGPT Security: Discovering and Securing AI Tools appeared first on Security Boulevard.

105

105

Schneier on Security

APRIL 12, 2019

Flame was discovered in 2012, linked to Stuxnet, and believed to be American in origin. Seems that Flame did not disappear after it was discovered, as was previously thought. It has recently been linked to more modern malware through new analysis tools that find linkages between different software.

Malware 212

Malware Software 212

Security Boulevard

JANUARY 5, 2022

Seth Goldhammer, vice president of product management at Spyderbat, said the command line tool scans a Linux system to discover vulnerable versions of Log4j. The post Spyderbat Tool Can Discover Log4j Vulnerabilities appeared first on Security Boulevard. These are typically harder to find.

Software 143

Software Malware Cybersecurity 143

Heimadal Security

MARCH 16, 2022

The post New Linux Botnet Discovered appeared first on Heimdal Security Blog. The Log4j vulnerability gives threat actors the potential to take control of any Java-based, internet-facing server and launch Remote Code Execution (RCE) attacks. What Happened? A newly found botnet that […].

Internet 128

Internet Internet Software Cybersecurity 128

Penetration Testing

MARCH 27, 2024

This package is a cornerstone of Linux operating systems, providing tools for fundamental tasks like managing... The post CVE-2024-28085: Critical ‘WallEscape’ Flaw Discovered in Linux Utilities Package – Passwords at Risk appeared first on Penetration Testing.

Passwords 104

Passwords Penetration Testing Risk 104

Security Affairs

DECEMBER 10, 2023

Researchers discovered a lock screen bypass bug in Android 14 and 13 that could expose sensitive data in users’ Google accounts. The security researcher Jose Rodriguez ( @VBarraquito ) discovered a new lock screen bypass vulnerability for Android 14 and 13.

Accountability 137

Accountability Hacking Mobile Information Security 137

Security Boulevard

APRIL 12, 2024

Berkay Celik, Antonio Bianchi, Dongyan Xu* Permalink The post USENIX Security ’23 – PatchVerif: Discovering Faulty Patches in Robotic Vehicles appeared first on Security Boulevard. Authors/Presenters: *Hyungsub Kim, Muslum Ozgur Ozmen, Z.

64

64

Security Boulevard

JANUARY 8, 2024

When personal information is discovered, it presents enormous issues to individuals and businesses. Hackers can exploit vulnerabilities offline or online, accessing you via the internet, […] The post Discover the Consequences of a Data Breach appeared first on Kratikal Blogs.

Data breaches 64

Data breaches Internet Internet Data privacy 64

Security Boulevard

APRIL 10, 2024

Berkay Celik, Antonio Bianchi The post USENIX Security ’23 – Discovering Adversarial Driving Maneuvers against Autonomous Vehicles appeared first on Security Boulevard. Authors/Presenters: *Ruoyu Song, Muslum Ozgur Ozmen, Hyungsub Kim, Raymond Muller, Z.

Network Security 64

Network Security 64

Penetration Testing

DECEMBER 4, 2023

Recently, a critical vulnerability, designated as CVE-2023-49070, has been discovered in Apache... The post CVE-2023-49070: Critical Pre-auth RCE Vulnerability Discovered in Apache OFBiz appeared first on Penetration Testing.

Penetration Testing 111

Penetration Testing Software 111

Security Boulevard

FEBRUARY 1, 2024

Executive Summary The Cycode Research Team discovered a software supply chain vulnerability in one of Google’s open source flagship products, Bazel. Read more The post Cycode Discovers a Supply Chain Vulnerability in Bazel appeared first on Cycode. This vulnerability directly impacts the software supply.

Software 64

Software 64

Adam Levin

AUGUST 31, 2019

Project Zero, Google’s security research team, discovered fourteen previously unknown vulnerabilities, called zero day exploits, that were capable of compromising iPhones. The hacking campaign was active for at least two years before it was discovered by Project Zero.

Hacking 172

Hacking Accountability Malware Passwords 172

Security Boulevard

OCTOBER 14, 2022

This week in malware, we discovered and analyzed nearly five dozen packages flagged as malicious, suspicious, or dependency confusion attacks in npm and PyPI registries. The post This Week in Malware – Over 50 Packages Discovered appeared first on Security Boulevard.

Malware 124

Malware 124

Tech Republic Security

FEBRUARY 6, 2023

The post TrickGate crypter discovered after 6 years of infections appeared first on TechRepublic. New research from Check Point Research exposes a crypter that stayed undetected for six years and is responsible for several major malware infections around the globe.

Malware 114

Malware Cybersecurity 114

Heimadal Security

MARCH 28, 2022

The post New Korplug Variant Discovered appeared first on Heimdal Security Blog. The Korplug RAT (also known as PlugX) is a spyware that has previously been associated with Chinese APT organizations and has been linked to targeted assaults on significant institutions in a number of different countries.

Spyware 116

Spyware Cybersecurity 116

Penetration Testing

APRIL 3, 2024

These vulnerabilities, if left unpatched, could allow unauthenticated attackers to take down vital... The post Critical Vulnerabilities Discovered in Ivanti Connect Secure and Policy Secure appeared first on Penetration Testing.

Penetration Testing 72

Penetration Testing 72

Security Boulevard

APRIL 14, 2023

The post Permiso Discovers Smishing Attack to Steal AWS Credentials appeared first on Security Boulevard. Nathan Eades, a threat researcher for Permiso, said cybercriminals are leveraging Simple Notification Service (SNS) to.

Social Engineering 119

Social Engineering Engineering Mobile Cybersecurity 119

Heimadal Security

FEBRUARY 23, 2022

The post New Phishing Method Discovered appeared first on Heimdal Security Blog. The attackers pose as reputable in order to trick the victims into putting their faith in them and disclosing their personal information. The information collected via phishing may be utilized for a […].

Phishing 112

Phishing Cyber Attacks Passwords Cybersecurity 112

Security Boulevard

DECEMBER 5, 2023

Conducted by researchers at Blackwing Intelligence, a firm specializing in hardware and software product […] The post Hello Authentication Vulnerabilities Discovered: Stay Safe appeared first on TuxCare. The post Hello Authentication Vulnerabilities Discovered: Stay Safe appeared first on Security Boulevard.

Authentication 59

Authentication Software Cybersecurity Risk 59

We Live Security

MARCH 14, 2022

The post CaddyWiper: New wiper malware discovered in Ukraine appeared first on WeLiveSecurity. This is the third time in as many weeks that ESET researchers have spotted previously unknown data wiping malware taking aim at Ukrainian organizations.

Malware 136

Malware 136

Security Affairs

JANUARY 17, 2024

The method allow to discover stealthy and poweful surveillance software like NSO Group ‘s Pegasus , Intellexa ‘s Predator , QuaDream ‘s Reign. Cybersecurity researchers from Kaspersky have identified a “lightweight method,” called iShutdown, to identify the presence of spyware on Apple iOS devices.

Spyware 130

Spyware Mobile Malware Surveillance 130

Heimadal Security

JULY 10, 2023

Although the variants may differ, they originate from the same threat actor, and this ransomware is still a work in progress, aiming to optimize […] The post New Ransomware Strain Discovered: Big Head appeared first on Heimdal Security Blog.

Ransomware 83

Ransomware Malware Cybersecurity 83

Security Boulevard

JANUARY 8, 2024

Discover the future of secure and innovative authentication with WebAuthn. The post Ditch the Passwords: Discover the Magic of WebAuthn and Passkeys appeared first on Security Boulevard. Say goodbye to passwords and hello to passwordless auth and passkeys.

Passwords 69

Passwords Authentication 69

The Hacker News

AUGUST 2, 2023

Cybersecurity researchers have discovered a bypass for a recently fixed actively exploited vulnerability in some versions of Ivanti Endpoint Manager Mobile (EPMM), prompting Ivanti to urge users to update to the latest version of the software. Tracked as CVE-2023-35082 (CVSS score: 10.0)

Mobile 93

Mobile Software Cybersecurity 93

Heimadal Security

JUNE 21, 2023

Zyxel announced patches are available and should be applied immediately for the newly discovered vulnerability CVE-2023-27992. Critical Command Injection Flaw Discovered in NAS Devices appeared first on Heimdal Security Blog. More about CVE-2023-27992 According to the Common Vulnerability Scoring System (CVSS), the flaw was marked 9.8,

Authentication 99

Authentication Cybersecurity 99

Security Affairs

AUGUST 28, 2023

A security researcher demonstrated how to discover a target’s IP address by sending a link over the Skype mobile app. The security researcher Yossi discovered that is possible to discover a target’s IP address by sending a link over the Skype mobile app. The problem only impacts the Skype mobile app.

Mobile 125

Mobile Media VPN Risk 125