Research - Page 14

Sodinokibi ransomware operators start selling data Data previously stolen from Brooks International is available for purchase on hacking forums. Brooks International had refused to pay the ransom for unlocking the…

Mozilla Firefox security updates Twelve vulnerabilities were patched by Mozilla in Firefox products. The most critical of them are CVE-2020-6814 and CVE-2020-6815. These are memory and script safety bugs showing…

TL;DR We created and published a PoC exploit of the kr00k attack (CVE-2019-15126): https://github.com/hexway/r00kie-kr00kie All technical details can be found in the Process section. INTRODUCTION AND MOTIVATION In February 2020,…

Ransomware attacks news Ransomware attacks are getting more sophisticated and rapid. For instance, Evraz North America, a steel producer, fell victim to a recent nation-wide cyberattack, which lead to malfunctioning…

Kr00k vulnerability found in Wi-Fi chips by Cypress and Broadcom ESET published a white paper about a vulnerability in Wi-Fi chips that was assigned CVE-2019-15126. It causes vulnerable devices to…

Pipeline operations could be at risk The Cybersecurity and Infrastructure Security Agency (CISA) issued a warning to prevent further attacks on critical infrastructure. It came as a response to a…

Voatz app not ready for 2020 election Voatz voting app, which was supposed to be used in the 2020 Presidential elections, turned out to be vulnerable to numerous security flaws.…

Severe WhatsApp vulnerability patched Facebook has released a patch for WhatsApp vulnerability (CVE-2019-18426). WhatsApp Desktop prior to version 0.3.9309 allowed cross-site scripting and local files reading when paired with WhatsApp…

The new ransomware threat which is called Snake (EKANS) A new ransomware dubbed Snake was recently discovered. It not only encrypts data on infected machines but also removes all file…

Recent news about Citrix CVE-2019-19781 vulnerability Citrix has finally released patches for CVE-2019-19781. The vulnerability affects Citrix Application Delivery Controller (ADS) and Gateway products. There was some evidence of in-the-wild…