Page 322 - Vulnerabilities News Today

Since the 2008 terrorist attack on Mumbai, coastal security has assumed particular importance among India’s national security concerns. Because that attack came through a sea route, the national government and state governments along India’s long coastline have taken several steps to address potential capacity issues of various intelligence and security forces. One such step is the biennial coastal security exercise called “Sea Vigil.” The second edition, “Sea Vigil-21,” was held on...

The “KindleDrip” attack would have allowed attackers to siphon money from unsuspecting victims. Three vulnerabilities in the Amazon Kindle e-reader would have allowed a remote attacker to execute code and run it as root – paving the way for siphoning money from unsuspecting users. Yogev Bar-On, researcher at Realmode Labs, found that it was possible to email malicious e-books to the devices via the “Send to Kindle” feature to start a chain of attack – a discovery that earned him $18...

Einstein is in violation of the the HHS 60-day breach notification rule, but unlikely to face penalty.

Cisco is stoppering critical holes in its SD-WAN solutions and its smart software manager satellite. Cisco is warning of multiple, critical vulnerabilities in its software-defined networking for wide-area networks (SD-WAN) solutions for business users. Cisco issued patches addressing eight buffer-overflow and command-injection SD-WAN vulnerabilities. The most serious of these flaws could be exploited by an unauthenticated, remote attacker to execute arbitrary code on the affected system with r...

A phishing campaign spoofs Xerox notifications to lure victims into clicking on malicious HTML attachments.

Seven flaws in open-source software Dnsmasq could allow DNS cache poisoning attacks and remote code execution. Researchers have uncovered a set of flaws in dnsmasq, popular open-source software used for caching Domain Name System (DNS) responses for home and commercial routers and servers. The set of seven flaws are comprised of buffer overflow issues and flaws allowing for DNS cache-poisoning attacks (also known as DNS spoofing). If exploited, these flaws could be chained together to allow rem...

By Eduard Kovacs on January 20, 2021 Researchers at Israel-based boutique cybersecurity consultancy JSOF this week disclosed the details of seven potentially serious DNS-related vulnerabilities that could expose millions of devices to various types of attacks. The vulnerabilities, collectively tracked as DNSpooq, impact Dnsmasq, a widely used piece of open source software designed to provide DNS, DHCP, router advertisement and network boot capabilities for small networks. Its DNS subsystem “...

The attack vector was not the Orion platform but rather an email-protection application for Microsoft 365. Malwarebytes is the latest discovered victim of the SolarWinds hackers, the security company said – except that it wasn’t targeted through the SolarWinds platform. “While Malwarebytes does not use SolarWinds, we, like many other companies were recently targeted by the same threat actor,” it disclosed in a Tuesday web posting. Instead of using the SolarWinds Orion network-management...

Users of dating apps – like Tinder, Match and Bumble – should be on the lookout for investment-fraud scammers.

The company also issued patches for Tesla-based GPUs as part of an updated, separate security advisory. NVIDIA has newly disclosed three security vulnerabilities in the NVIDIA Shield TV, which could allow denial of service, escalation of privileges and data loss. The NVIDIA Shield TV is a set-top gadget that acts as a hub for the smart home, streams PC games from a gaming PC to a TV; and allows local and online media playback and streaming. Android games compatible with Android TV are compatibl...