Exploits and vulnerabilities – Page 24 – Computer Security Articles

Amazon Photos vulnerability could have given attackers access to user files and data

June 30, 2022 admin Amazon, amazon drive, amazon photos app, amazon photos app for android, Android, checkmzrx, erez yalon, Exploits and vulnerabilities

Credit to Author: Jovi Umawing| Date: Thu, 30 Jun 2022 15:25:24 +0000

The retail giant patched a serious flaw in its Amazon Photos app that left user access token exposed to potential attackers.

The post Amazon Photos vulnerability could have given attackers access to user files and data appeared first on Malwarebytes Labs.

MalwareBytes Security

Update now! Mozilla fixes security vulnerabilities and introduces a new privacy feature for Firefox

June 30, 2022 admin cve-2022-34468, cve-2022-34470, cve-2022-34478, cve-2022-34479, cve-2022-34482, cve-2022-34483, cve-2022-34484, enhanced tracking protection, Exploits and vulnerabilities, Firefox, ms-msdt, query parameter stripping

Credit to Author: Pieter Arntz| Date: Thu, 30 Jun 2022 14:01:41 +0000

Mozilla has released Firefox updates to the Release Channel that fix several security vulnerabilities and introduce a new privacy feature called Query Parameter Stripping.

The post Update now! Mozilla fixes security vulnerabilities and introduces a new privacy feature for Firefox appeared first on Malwarebytes Labs.

MalwareBytes Security

CISA Log4Shell warning: Patch VMware Horizon installations immediately

June 27, 2022 admin exploit, Exploits and vulnerabilities, log4shell, Malwarebytes news, VMware, Vulnerability

Credit to Author: Christopher Boyd| Date: Mon, 27 Jun 2022 09:54:58 +0000

CISA warns of log4shell being actively exploited to compromise VMware Horizon systems. We take a look at their warning.

The post CISA Log4Shell warning: Patch VMware Horizon installations immediately appeared first on Malwarebytes Labs.

MalwareBytes Security

DFSCoerce, a new NTLM relay attack, can take control over a Windows domain

June 21, 2022 admin dfscoerce, dfsnm, EPA, Exploits and vulnerabilities, nltm, petitpotam, relay attack

Credit to Author: Pieter Arntz| Date: Tue, 21 Jun 2022 15:49:12 +0000

A researcher has posted a PoC for yet another NTLM relay attack method dubbed DFSCoerce. It is high time to retire NTLM.

The post DFSCoerce, a new NTLM relay attack, can take control over a Windows domain appeared first on Malwarebytes Labs.

MalwareBytes Security

Hertzbleed exposes computers’ secret whispers

June 16, 2022 admin AMD, constant-time code, CPU, cryptography, cve-2022-23823, cve-2022-24436, dvfs, Exploits and vulnerabilities, hertzbleed, Intel, side-channel attack

Credit to Author: Pieter Arntz| Date: Thu, 16 Jun 2022 16:28:42 +0000

Hertzbleed is a new side-channel attack that can recover sensitive information from a targeted system by applying CPU timing.

The post Hertzbleed exposes computers’ secret whispers appeared first on Malwarebytes Labs.

MalwareBytes Security

Update now! Microsoft patches Follina, and many other security updates

June 15, 2022 admin adobe, atlassian, Citrix, confluence, cve-2022-26397, cve-2022-30136, cve-2022-30139, cve-2022-30163, cve-2022-30190, drupal, Exploits and vulnerabilities, follina, gitlab, google, Hyper-V, ldap, msdt, nfs, Patch Tuesday, SAP, synlapse

Credit to Author: Pieter Arntz| Date: Wed, 15 Jun 2022 13:17:05 +0000

Patch Tuesday for June 2022 brought a fix for Follina and many other security vulnerabilities. Time to figure out what needs to be prioritized.

The post Update now! Microsoft patches Follina, and many other security updates appeared first on Malwarebytes Labs.

MalwareBytes Security

“Multiple adversaries” exploiting Confluence vulnerability, warns Microsoft

June 14, 2022 admin APT, atlassian, confluence, Exploits and vulnerabilities, nation state, ransomware

Credit to Author: Christopher Boyd| Date: Tue, 14 Jun 2022 12:43:08 +0000

Microsoft has warned of APT groups and ransomware authors exploiting the now patched Confluence vulnerability. We take a look at the dangers.

The post “Multiple adversaries” exploiting Confluence vulnerability, warns Microsoft appeared first on Malwarebytes Labs.

MalwareBytes Security

Don’t panic! “Unpatchable” Mac vulnerability discovered

June 14, 2022 admin Exploits and vulnerabilities, m1, mit csail, PAC, pacman, SOC, speculative execution

Credit to Author: Pieter Arntz| Date: Tue, 14 Jun 2022 09:53:27 +0000

Researchers at MIT have published details about an attack that uses a flaw in the M1 security feature pointer authentication codes.

The post Don’t panic! “Unpatchable” Mac vulnerability discovered appeared first on Malwarebytes Labs.