New Zealanders victimized by crime are least likely to report cybercrimes and sexual assaults
Settlement reached over 2014 data breach at the University of Pittsburgh Medical Center
I like using procdump on Windows.
It’s quite handy for software development when systems have memory leaks or performance issues, procdump allows to set thresholds to trigger creation of a core dump.
BUT, it’s also super useful to search processes for secrets and other information.
For instance, thi...
More than half of employees working remotely undermine company security policies
Underground criminals are selling access to organizations for as much as $10,000
Summary The NPU device’s kernel driver implements a set of ioctl handlers one of which uses unsanitized user data as an index into a function pointer array. The user provided values can exceed the boundaries of the legitimate array and might cause user controlled values to be called as function poin...
Scammers are attempting to trick recipients into giving away payment details in a new smishing campaign
Numerous public Salesforce Communities are reportedly misconfigured and could expose sensitive information
Summary The NPU device’s kernel driver implements a custom mmap handler that exposes trusted kernel data to user space. These exposed structures contain sensitive data, including kernel pointers, which can be controlled by a user process. The content of these structures is inherently trusted by the...
The NCSC unveils the first five cyber companies that will participate in its new startup program
Chinese espionage group UNC215 reportedly leveraged RDP to access an Israeli government network
Summary Due to a bug in the way mappings are closed it is possible to free a kmallocated memory chunk arbitrary times. This vulnerability can be used to craft a use after free scenario against any kernel structure that is allocated from the kmalloc-64 cache. There is rich public literature on how su...
Florida cops arrest martial arts instructor accused of hiding cameras in restroom
FlyTrap malware hits over 140 countries to claim more than 10,000 victims
Summary The NPU device’s kernel driver implements a set of ioctl handlers one of which uses unsanitized user data as an offset to retrieve a kernel structure. Fields of the structure are written with user provided values. A malicious actor can use this vulnerability to overwrite kernel memory with c...
Poll shows Americans and Brits doubt the cyber-safety of possible digital COVID-19 vaccination card
Payments also climb by 82% in the same period
Summary In a previous advisory we disclosed multiple vulnerabilities within the NPU device’s mmap handler and discussed how it exposes sensitive kernel data. This advisory focuses on the implementation errors in the same handler. The mapping function ignores the requested size parameter and fails to...
Around half of businesses and consumers saw at least one sustained additional infection in May 2021, according to a new Webroot report
2,658 HoC staff members were put through a cybersecurity training course during the 2020/21 financial year