The Global Anycast Network

Share

RSS

More Articles…

• HTTP / 3, everything you need to know about the latest version protocol
• Machine learning and cybersecurity: UEBA applications and security
• Logic Bomb: what they are and how to prevent them
• Pass the hash: how to gain access without password
• Ransomware and NAS: a risk that is not considered
• SIEM monitoring: best practices
• Cyber Threat Hunting: on the hunt for security threats
• Ethical hacking: defending knowing how to attack

Categories …

• Backup as a Service (2)
  • Acronis Cloud Backup (11)
  • Veeam Cloud Connect (4)
• Cloud Conference (3)
• Cloud CRM (1)
• Cloud Server/VPS (20)
• Conferenza Cloud (4)
• ICT Monitoring (4)
• Log Management (2)
• News (17)
• ownCloud (4)
• Privacy (6)
• Secure Online Desktop (14)
• Security (9)
  • Ethical Phishing (3)
  • SOCaaS (15)
    • SIEM (5)
    • UEBA (4)
  • Vulnerabilities (83)
• Web Hosting (15)

Tags

Dark Reading:

• Zoom Joins Microsoft Teams on List of Enterprise Tools Hacked at Pwn2Own April 8, 2021
  White-hat hacking event shows yet again why there's no such thing as foolproof security against modern attacks.
• Fraudsters Use HTML Legos to Evade Detection in Phishing Attack April 8, 2021
  Criminals stitch pieces of HTML together and hide them in JavaScript files, researchers report.
• 600K Payment Card Records Leaked After Swarmshop Breach April 8, 2021
  A leaked database also contains the nicknames, hashed passwords, contact details, and activity history of Swarmshop admins, sellers, and buyers.
• Handcuffs Over AI: Solving Security Challenges With Law Enforcement April 8, 2021
  We've tried everything else ... now it's time to make the prospect of getting caught -- and punished -- a real deterrent to cybercrime.
• SecOps and DevOps: From Cooperation to Automation April 7, 2021
  Omdia Principal Analyst Eric Parizo discusses the major obstacles SecOps organizations face as they seek to build ties with DevOps teams, and offers a programmatic approach to help create a path toward DevSecOps.
• Did 4 Major Ransomware Groups Truly Form a Cartel? April 7, 2021
  An analysis of well-known extortion groups and their cryptocurrency transactions reveals the answer.
• Voice-Changing Software Found on APT Attackers' Server April 7, 2021
  Security researchers believe the presence of Morph Vox Pro could indicate APT-C-23 has new plans for their phishing campaigns.
• Cring Ransomware Used in Attacks on European Industrial Firms April 7, 2021
  Attackers exploited a vulnerability in Fortigate VPN servers to gain access to target networks, researchers report.
• Fortune 500 Security Shows Progress and Pitfalls April 7, 2021
  Fortune 500 companies have improved on email security and vulnerability disclosure programs but struggle in asset management and high-risk services.
• Rethinking Cyberattack Response: Prevention & Preparedness April 7, 2021
  The SolarWinds incident is the starkest reminder yet that complacency can exact a terrible price.

Full Disclosure

• Backdoor.Win32.Small.n / Unauthenticated Remote Command Execution (SYSTEM) April 8, 2021
  Posted by malvuln on Apr 08Discovery / credits: Malvuln - malvuln.com (c) 2021 Original source: https://malvuln.com/advisory/fb24c3509180f463c9deaf2ee6705062.txt Contact: malvuln13 () gmail com Media: twitter.com/malvuln Threat: Backdoor.Win32.Small.n Vulnerability: Unauthenticated Remote Command Execution (SYSTEM) Description: The backdoor malware listens on TCP Port 1337, upon successful connection we get handed a remote shell from the infected host with SYSTEM...
• [SYSS-2020-032] Open Redirect in Tableau Server (CVE-2021-1629) April 8, 2021
  Posted by Vladimir Bostanov on Apr 08Advisory ID: SYSS-2020-032 Product: Tableau Server Manufacturer: Tableau Software, LLC, a Salesforce Company Affected Version(s): 2019.4-2019.4.17, 2020.1-2020.1.13, 2020.2-2020.2.10, 2020.3-2020.3.6, 2020.4-2020.4.2 Tested Version(s): 2020.2.1 (20202.20.0525.1210) 64-bit Windows Vulnerability Type: URL Redirection to Untrusted Site (CWE-601) Risk Level: Medium Solution Status: Fixed Manufacturer Notification: 2020-07-29 Solution Date:...
• Backdoor.Win32.Hupigon.das / Unauthenticated Open Proxy April 8, 2021
  Posted by malvuln on Apr 08Discovery / credits: Malvuln - malvuln.com (c) 2021 Original source: https://malvuln.com/advisory/7afe56286039faf56d4184c476683340.txt Contact: malvuln13 () gmail com Media: twitter.com/malvuln Threat: Backdoor.Win32.Hupigon.das Vulnerability: Unauthenticated Open Proxy Description: The malware drops an hidden executable named "winserv.com" under Windows dir, which accepts TCP connections on port 8080. Afterwards, it connects to a...
• Trojan.Win32.Hotkeychick.d / Insecure Permissions April 8, 2021
  Posted by malvuln on Apr 08Discovery / credits: Malvuln - malvuln.com (c) 2021 Original source: https://malvuln.com/advisory/aff493ed1f98ed05c360b462192d2853.txt Contact: malvuln13 () gmail com Media: twitter.com/malvuln Threat: Trojan.Win32.Hotkeychick.d Vulnerability: Insecure Permissions Description: creates an insecure dir named "Sniperscan" under c:\ drive and grants change (C) permissions to the authenticated user group. Standard users can rename the...
• Trojan-Downloader.Win32.Genome.qiw / Insecure Permissions April 8, 2021
  Posted by malvuln on Apr 08Discovery / credits: Malvuln - malvuln.com (c) 2021 Original source: https://malvuln.com/advisory/5cddc4647fb1c59f5dc7f414ada7fad4.txt Contact: malvuln13 () gmail com Media: twitter.com/malvuln Threat: Trojan-Downloader.Win32.Genome.qiw Vulnerability: Insecure Permissions Description: Genome.qiw creates an insecure dir named "tmp" under c:\ drive and grants change (C) permissions to the authenticated user group. Standard users can...
• Trojan-Downloader.Win32.Genome.omht / Insecure Permissions April 8, 2021
  Posted by malvuln on Apr 08Discovery / credits: Malvuln - malvuln.com (c) 2021 Original source: https://malvuln.com/advisory/01055838361f534ab596b56a19c70fef.txt Contact: malvuln13 () gmail com Media: twitter.com/malvuln Threat: Trojan-Downloader.Win32.Genome.omht Vulnerability: Insecure Permissions Description: Genome.omht creates an insecure dir named "wjmd97" under c:\ drive and grants change (C) permissions to the authenticated user group. Standard users can...
• Trojan.Win32.Hosts2.yqf / Insecure Permissions April 8, 2021
  Posted by malvuln on Apr 08Discovery / credits: Malvuln - malvuln.com (c) 2021 Original source: https://malvuln.com/advisory/274a6e846c5a4a2b3281198556e5568b.txt Contact: malvuln13 () gmail com Media: twitter.com/malvuln Threat: Trojan.Win32.Hosts2.yqf Vulnerability: Insecure Permissions Description: Hosts2.yqf creates an insecure dir named "mlekaocYUmaae" under c:\ drive and grants change (C) permissions to the authenticated user group. Standard users can...
• usd20210005: Privileged File Write in Check Point Identity Agent < R81.018.0000 April 8, 2021
  Posted by Responsible Disclosure via Fulldisclosure on Apr 08### Advisory: Privileged File Write Description =========== The Check Point Identity Agent allows low privileged users to write files to protected locations of the file system. Details ======= Advisory ID: usd-2021-0005 Product: Check Point Identity Agent Affected Version: < R81.018.0000 Vulnerability Type: Symlink Vulnerability Security Risk: High […]
• CVE-2021-26709 - Multiple Pre-Auth Stack Buffer Overflow in D-Link DSL-320B-D1 ADSL Modem April 8, 2021
  Posted by Gabriele Gristina on Apr 08Multiple Pre-Auth Stack Buffer Overflow in D-Link DSL-320B-D1 ADSL Modem ======== < Table of Contents > ========================================= 0. Overview 1. Details 2. Solution 3. Disclosure Timeline 4. Thanks & Acknowledgements 5. References 6. Credits 7. Legal Notices ======== < 0. Overview > =============================================== Release Date: 7 March 2021 Revision: […]
• SEC Consult SA-20210407-0 :: Arbitrary File Upload and Bypassing .htaccess Rules in Monospace Directus Headless CMS April 7, 2021
  Posted by SEC Consult Vulnerability Lab on Apr 07SEC Consult Vulnerability Lab Security Advisory < 20210407-0 > ======================================================================= title: Arbitrary File Upload and Bypassing .htaccess Rules product: Monospace Directus Headless CMS vulnerable version: < v8.8.2 fixed version: v8.8.2, v9 is not affected because of different architecture CVE number: CVE-2021-29641 impact: High...