> TODAY'S SUMMARY (1 articles)
Today's cybersecurity news highlights several key trends and threats. Ransomware attacks continue to rise, with a notable increase in targeted phishing campaigns exploiting current events. Zero-day vulnerabilities are being actively exploited across multiple platforms, emphasizing the need for timely patching. Additionally, increased attention is given to supply chain attacks, as threat actors seek to compromise third-party vendors. Organizations are urged to enhance their security posture through regular training and incident response planning. Lastly, the importance of multi-factor authentication (MFA) remains paramount in mitigating unauthorized access attempts.
|
// AI-powered summary generated at 04:00
I like using procdump on Windows.
It’s quite handy for software development when systems have memory leaks or performance issues, procdump allows to set thresholds to trigger creation of a core dump.
BUT, it’s also super useful to search processes for secrets and other information.
For instance, thi...
FlyTrap malware hits over 140 countries to claim more than 10,000 victims
Poll shows Americans and Brits doubt the cyber-safety of possible digital COVID-19 vaccination card
Summary The NPU device’s kernel driver implements a set of ioctl handlers one of which uses unsanitized user data as an index into a function pointer array. The user provided values can exceed the boundaries of the legitimate array and might cause user controlled values to be called as function poin...
Payments also climb by 82% in the same period
Around half of businesses and consumers saw at least one sustained additional infection in May 2021, according to a new Webroot report
Summary The NPU device’s kernel driver implements a custom mmap handler that exposes trusted kernel data to user space. These exposed structures contain sensitive data, including kernel pointers, which can be controlled by a user process. The content of these structures is inherently trusted by the...
2,658 HoC staff members were put through a cybersecurity training course during the 2020/21 financial year
Using random words is more effective than using complex combinations for passwords, says the National Cyber Security Council (NCSC)
Summary Due to a bug in the way mappings are closed it is possible to free a kmallocated memory chunk arbitrary times. This vulnerability can be used to craft a use after free scenario against any kernel structure that is allocated from the kmalloc-64 cache. There is rich public literature on how su...
A security researcher reveals how it was possible to exploit the command center for global farming equipment, which could have had disastrous consequences
Physical shopping carts used by retailers can potentially be locked or unlocked by hacker, though the actual risk is small
Summary The NPU device’s kernel driver implements a set of ioctl handlers one of which uses unsanitized user data as an offset to retrieve a kernel structure. Fields of the structure are written with user provided values. A malicious actor can use this vulnerability to overwrite kernel memory with c...
Though the big social media platforms claim to have made progress, researcher alleges little has been achieved, and it's still possible to disseminate false information
Student researcher reveals how it could be possible to hack an attendance system remotely and also change the responses that other students provide
Summary In a previous advisory we disclosed multiple vulnerabilities within the NPU device’s mmap handler and discussed how it exposes sensitive kernel data. This advisory focuses on the implementation errors in the same handler. The mapping function ignores the requested size parameter and fails to...
A panel of experts debate what needs to be done to combat the increasing growth and impact of ransomware
Reading isn't always good for you, as a hacker reveals that a malicious eBook could potentially lead to a very bad day for a victim
Samsung’s neural processing framework has received a lot of attention from the security community since its introduction. Hardware isolation vulnerabilities have been demonstrated, both on the NPU and DSP cores (1, 2), that could be used to compromise the kernel. The surrounding kernel code was also...
Three Disney workers were among 17 suspects arrested in Florida’s Operation Child Protector