[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox

📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> Cyber-Attack on Financial Apps
Hundreds of financial applications targeted by new Anubis malware campaign
> LastPass to Become Standalone Company
LogMeIn to set up password manager LastPass as an independent business
> CVE-2021-25452: Kernel Permanent Denial of Service Vulnerability in the Vision DSP Kernel Driver
There is a memory management and a path traversal vulnerability in the vision DSP kernel driver of Exynos S20 devices. These vulnerabilities can be leveraged by a malicious untrusted application to permanently disable the device until it is factory reset. Vulnerability Details The Exynos DSP driver...
> TAG to Open New Global Headquarters
Cybersecurity research and advisory firm to open new global headquarters in New York City
> Significant Disconnect Between SOC Leaders and Staff
More than 40% of SOC staff said lack of leadership or executive level support was a major barrier to success
> CVE-2021-25457: Kernel Information Disclosure in the Vision DSP Kernel Driver
There is a sensitive information disclosure vulnerability in the vision DSP kernel driver of S20 Exynos devices. The vulnerability can be used by malicious privileged applications to read the kernel’s and other application’s memory. Vulnerability Details The Exynos DSP driver implements an ioctl cal...
> Experts: Log4j Bug Could Be Exploited for “Years”
Vulnerability could remain stubbornly difficult to find and patch
> Christmas Payroll Fears After Ransomware Hits Software Provider
UKG suffered attack impacting its Kronos Private Cloud last week
> CVE-2021-25467: Kernel LPE in the Vision DSP Kernel Driver
There is a kernel virtual memory mapped IO buffer overflow vulnerability in the vision DSP kernel driver of S20 Exynos devices. The vulnerability could potentially be used by a malicious system application to compromise the kernel and gain further privileges. The vulnerability is only triggerable vi...
> Police Arrest Suspected Ransomware Actor in Romania
Individual targeted IT company for sensitive client data
> CVE-2021-25475: Kernel LPE in the Vision DSP Kernel Driver's ELF Linker
There is a vmalloc out of bounds write vulnerability in the vision DSP kernel driver of Samsung Exynos S20 devices. The vulnerability could potentially be used by a malicious system application to compromise the kernel and gain further privileges. Vulnerability Details The Exynos DSP driver implemen...
> Apache Log4J vulnerability
Late last week security researchers disclosed a critical, unauthenticated remote code execution (RCE) vulnerability in log4j2, a popular and widely used logging library for Java applications. CVE-2021-44228 scores the maximum 10.0 on the Common Vulnerability Scoring System (CVSS) due to a combinatio...
> CSAM Found on LSU Professor’s Computer
Cops called after IT department discovers files with “names that alarmed them”
> SANS Opens Free Holiday Hack Challenge
Cybersecurity training institute invites world to help Santa defeat cyber-villains
> CVE-2021-25458: Kernel NULL Pointer Dereference in Exynos ION Implementation
There is an ION memory buffer type confusion vulnerability in the Exynos ION kernel driver. The vulnerability can cause zero initialised memory to be treated as a valid pointer and cause a kernel NULL pointer exception. Untrusted applications can abuse this bug to cause a kernel crash and carry out...
> Hackers Target India’s Prime Minister
Prime Minister Modi’s Twitter account hacked to spread fake Bitcoin message
> Ex-NFL Star Gets Three Years for #COVID19 Fraud
Joshua Bellamy falsified information about his company
> CVE-2021-25491: Kernel NULL Pointer Dereferences due to Missing Error Checks
There are a series of memory corruption vulnerabilities in Samsung Exynos kernels, due to improper error checks, after dma_buf_vmap calls. These bugs can be abused by various privileged processes to cause NULL pointer accesses and crash the kernel. Vulnerability Details The kernel uses the dma_buf_v...
> “Sadistic” Online Extortionist Jailed for 32 Years
Birmingham man forced some victims to the point of suicide
> “Worst-Case Scenario” Log4j Exploits Travel the Globe
Log4j vulnerability affects huge sweep of applications and vendors