Page 317 - Vulnerabilities News Today

A critical-severity buffer-overflow flaw that affects IBM Integration Designer could allow remote attackers to execute code. IBM has patched a critical buffer-overflow error that affects Big Blue’s Integration Designer toolset, which helps enterprises create business processes that integrate applications and data. If exploited, the flaw could enable remote code execution. Click to Register The flaw (CVE-2020-27221) has a CVSS base score of 9.8 out of 10, making it critical in severity. It ste...

NurseryCam suspends service across 40 daycare centers until a security fix is in place. NurseryCam, a webcam service used across 40 daycare centers in the U.K. by parents who want to keep a watchful eye on their babies, has shut down following a data breach. The breach exposed the personal data of about 12,000 users to an attacker who said he or she was trying to improve the service’s security. The attacker was able to find a “loophole” in the system, according to reports; NurseryCam was ...

To revist this article, visit My Profile, then View saved stories. More than four years after a mysterious group of hackers known as the Shadow Brokers began wantonly leaking secret NSA hacking tools onto the internet, the question that debacle raised—whether any intelligence agency can prevent its "zero-day" stockpile from falling into the wrong hands—still haunts the security community. That wound has now been reopened, with evidence that Chinese hackers obtained and reused another...

minute read Share this article: The threat actors stole data and used Clop’s leaks site to demand money in an extortion scheme, though no ransomware was deployed. Researchers have identified a set of threat actors (dubbed UNC2546 and UNC2582) with connections to the FIN11 and the Clop ransomware gang as the cybercriminal group behind the global zero-day attacks on users of the Accellion legacy File Transfer Appliance product. Click to Register Multiple Accellion FTA customers, in...

Get Permission Some Accellion data breach victims have subsequently been extorted, with those not paying seeing their data publicly released by the Clop ransomware gang. This is that groups website. Software company Accellion has released preliminary findings around the security incident that has stung some customers that used its 20-year-old File Transfer Appliance. The company says that fewer than 100 customers have been attacked as the result of four now-patched vulnerabilities in the FTA,...

APT31, a Chinese-affiliated threat group, copied a Microsoft Windows exploit previously used by the Equation Group, said researchers.

Two breaches of the audio-based social media app reinforce privacy, security concerns.

DoppelPaymer ransomware gang claims credit for Kia’s outage, demands $20 million in double-extortion attack.

Click to Register Apple released its 2021 Platform Security guide, Thursday, outlining its current and year-ahead agenda for its device hardware, software and silicon security. This year’s 192-page report is beefed-up, compared to past reports, with a wealth of new insights into how Apple is tackling security and privacy within its entire mobile, desktop and cloud ecosystem. Previous Platform Security updates have taken a piecemeal approach to address Apple’s security universe, said Rich Mo...

A second malware that targets Macs with Apple's in-house M1 chip is infecting machines worldwide — but it's unclear why.