An attacker was able to siphon audio feeds from multiple Clubhouse rooms
An attacker demonstrated this week that Clubhouse chats are not secure, he was able to siphon audio feeds from “multiple...
Researchers uncovered a new Malware Builder dubbed APOMacroSploit
Researchers spotted a new Office malware builder, tracked as APOMacroSploit, that was employed in a campaign targeting more than 80...
Experts warn of threat actors abusing Google Alerts to deliver unwanted programs
Experts warn of threat actors using Google Alerts to promote a fake Adobe Flash Player updater that delivers unwanted programs....
Bug bounty hacker earned $5,000 reporting a Stored XSS flaw in iCloud.com
A white hat hacker has earned a $5,000 reward from Apple for reporting a stored cross-site scripting (XSS) vulnerability on...
CVE-2020-14628
Summary: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior...
CVE-2019-7575
Summary: SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer overflow in MS_ADPCM_decode in audio/SDL_wave.c....
CVE-2019-7577
Summary: SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a buffer over-read in SDL_LoadWAV_RW in audio/SDL_wave.c. Reference...
CVE-2019-13616
Summary: SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in BlitNtoN in video/SDL_blit_N.c...
CVE-2019-7636
Summary: SDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over-read in SDL_GetRGB in video/SDL_pixels.c....
Hack the Box Guide To: Templated
We start with a page showing "Site still under construction" landing page We can try adding something like /index.html and...
Darknet Markets are Scrambling to Attract Joker’s Stash Clients
The administrator behind Joker's Stash professes to have formally closed down the operation on 15th February. Meanwhile, criminal gangs offering...
Russian state systems are in danger because of Internet Explorer
This year, many government agencies will have to spend several hundred million rubles on updating their information systems due to...
Cyber Attack: Computer Systems of Lakehead University Remains Offline
Lakehead University (LU) based in Ontario; Canada is currently dealing with the cyber-attack that hit the institution on Tuesday; Consequently,...
Sequoia Capital Told Investors it was Hacked
Sequoia Capital told its investors on Friday that some personal and financial data may have been accessed by a third...
Bug in Brave Browser Expose Users’ Dark Web History
Brave, the web browser that insists on privacy, exposes users' activities to its Internet Service Providers on Tor's secret servers,...
Perfusion – Exploit For The RpcEptMapper Registry Key Permissions Vulnerability (Windows 7 / 2088R2 / 8 / 2012)
On Windows 7, Windows Server 2008R2, Windows 8, and Windows Server 2012, the registry key of the RpcEptMapper and DnsCache...
PE-Packer – A Simple Windows X86 PE File Packer Written In C And Microsoft Assembly
PE-Packer is a simple packer for Windows PE files. The new PE file after packing can obstruct the process of...
FBI warns of the consequences of telephony denial-of-service (TDoS) attacks
The Federal Bureau of Investigation (FBI) has issued a warning about the risks of telephony denial-of-service (TDoS) attacks on call centers....
Security Affairs newsletter Round 302
A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs free for...
The US Government is going to respond to the SolarWinds hack very soon
The US is going to respond to the SolarWinds supply chain attack within weeks, national security adviser Jake Sullivan told...
Sequoia Capital Venture Capital firm discloses a data breach
Sequoia Capital, one of the most prominent venture capital firms, told its investors that an unauthorized third party had access to...
CVE-2020-25681
Summary: A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow was discovered in the way RRSets...
CVE-2020-25681
Summary: A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow was discovered in the way RRSets...
CVE-2020-25682
Summary: A flaw was found in dnsmasq before 2.83. A buffer overflow vulnerability was discovered in the way dnsmasq extract...
