According to a report by C’T magazine, researchers have found several data-leaking Spectre CPU vulnerabilities in Intel chips, which they are calling “Spectre Next Generation” or Spectre-NG. There are reportedly eight new CVE-listed vulnerabilities, which Intel has not confirmed for now. The company, however, has confirmed the reservation of Common Vulnerabilities […]
Hacking
GandCrab Version 3 Released With Autorun Feature and Desktop Background
GandCrab version 3 was released earlier this week with a few noticeable changes. The most noticeable change is the addition of a desktop background. Unfortunately, at this time GandCrab 3 cannot be decrypted for free. For those who wish to discuss GandCrab or receive support, you can post in our […]
Twitter urges its 330 million users to change passwords after bug exposed them in plain text
Twitter is urging all of its more than 330 million users to change their passwords after a bug exposed them in plain text on internal systems. Twitter is urging its users to immediately change their passwords after a glitch caused some of them to be stored in plain text. […]
Dark Web Increased E-commerce Fraud by 30 Percent, Report Finds
The e-commerce world is continually facing a threat to its rising fame and user appreciation; e-commerce fraud. There has been a steady rise in sales tied to e-commerce platforms across the globe with many embracing the trend. In the same manner, e-commerce fraud has been making a gradual climb from 2015 to […]
New Rowhammer attack can be used to hack Android devices remotely
Researchers from Vrije Universiteit in Amsterdam have demonstrated that it is possible to use a Rowhammer attack to remotely hack Android phones. What is a Rowhammer attack? “The Rowhammer attack targets the design of DRAM memory. On a system where the DRAM is insufficiently refreshed, targeted operations on a row […]
Microsoft Working on a Fix for Windows 10 Meltdown Patch Bypass
Microsoft’s patches for the Meltdown vulnerability have had a fatal flaw all these past months, according to Alex Ionescu, a security researcher with cyber-security firm Crowdstrike. Only patches for Windows 10 versions were affected, the researcher wrote today in a tweet. Microsoft quietly fixed the issue on Windows 10 Redstone […]
Microsoft Releases Two New Windows Updates Containing New Spectre 2 Mitigations
As the saying goes —if at first, you don’t succeed, then try, try again. This is the mantra that Microsoft seems to have taken up for dealing with the patching process meant to mitigate the effects of the Spectre v2 (CVE-2017-5715) vulnerability. The OS maker released yesterday two new Windows […]
Vulnerabilities Affecting Over One Million Dasan GPON Routers Are Now Under Attack
Two vulnerabilities affecting over one million routers, and disclosed earlier this week, are now under attack by botnet herders, who are trying to gather the vulnerable devices under their control. Attacks started yesterday, Thursday, May 3, according to Netlab, the network security division of Chinese cyber-security vendor Qihoo 360. […]
Microsoft addressed critical flaw in Windows Host Compute Service Shim library
Microsoft released an out of band update to address a critical remote code execution vulnerability in the Windows Host Compute Service Shim library (hcsshim). Microsoft announced that it has issued a security update to address a critical remote code execution vulnerability in the Windows Host Compute Service Shim library (hcsshim). […]
CVE-2018-2879 – Vulnerability in Oracle Access Manager can let attackers impersonate any user account
Security researchers have discovered a security vulnerability in Oracle Access Manager that can be exploited by a remote attacker to bypass the authentication and take over the account of any user. Security researcher Wolfgang Ettlinger from SEC Consult Vulnerability Lab has discovered a security vulnerability in Oracle Access Manager that can be […]