Monthly Archives: December 2019

Phases of intelligence-led penetration testing

December 31st, 2019 📆 | 4945 Views ⚑

An intelligence-led penetration testing can be defined as an assessment for a valuable addition of cyber threat intelligence in the

Tagged with: intelligence • penetration • phases • testing

Linux Kernel 5.0.0-rc7 f2fs Filesystem ttm_page_alloc.c. ttm_put_pages memory corruption

December 31st, 2019 📆 | 6225 Views ⚑

CVSS Meta Temp Score Current Exploit Price (≈) CTI Interest Score 5.5 $5k-$25k 4.72- A vulnerability was found in Linux

Tagged with: alloc • corruption • filesystem • kernel • linux • memory • pages

RavnAir says more flight delays and cancellations possible after cyberattack

December 31st, 2019 📆 | 8211 Views ⚑

An Alaska air carrier that suffered a cyberattack has experienced more disruption than initially projected. The RavnAir Group on Dec.

Tagged with: after • cancellations • cyberattack • delays • flight • possible • ravnair

Nagios XI 5.6.9 nocscreenapi.php host/hostgroup/servicegroup cross site scripting

December 31st, 2019 📆 | 3136 Views ⚑

CVSS Meta Temp Score CVSS is a standardized scoring system to determine possibilities of attacks. The Temp Score considers temporal

Tagged with: cross • hostgroup • nagios • nocscreenapi • scripting • servicegroup

China’s New Encryption Law Orders Corporate Inspections

December 31st, 2019 📆 | 7857 Views ⚑

A new law taking effect on the first day of the New Year will apply sweeping new rules to data

Tagged with: china • corporate • encryption • inspections • orders

libsixel 1.8.4 fromgif.c gif_out_code memory corruption

December 31st, 2019 📆 | 6974 Views ⚑

CVSS Meta Temp Score Current Exploit Price (≈) CTI Interest Score 5.5 $0-$5k 4.51 A vulnerability was found in libsixel

Tagged with: corruption • fromgif • libsixel • memory

Digital Lighting Artist Program – Student Montage – Winter 2020

December 31st, 2019 📆 | 5471 Views ⚑

The four month Digital Lighting Artist Certificate at Lost Boys | School of Visual Effects is an accelerated and highly

Tagged with: arnold • artist • CG lighting • digital • digital lighting • katana • lighting • lost boys • montage • program • renderman • school of VFX • student • Visual Effects • Vray • winter

Hackers used ransomware in truckstop.com virus – DC Velocity

December 31st, 2019 📆 | 2144 Views ⚑

Technology December 31, 2019 Freight matching marketplace restores “most major services” after 11 days. By Ben Ames The malware software

Tagged with: hackers • logistics • ransomware • Software & Systems • transportation • trucking • truckstop • velocity • virus

Laborator Neon Theme 2.0 on WordPress autosuggest-remote.php q cross site scripting

December 31st, 2019 📆 | 3410 Views ⚑

CVSS Meta Temp Score CVSS is a standardized scoring system to determine possibilities of attacks. The Temp Score considers temporal

Tagged with: autosuggest • cross • laborator • remote • scripting • theme • wordpress

4 patients sue Alabama health system after ransomware attack

December 31st, 2019 📆 | 6605 Views ⚑

Tagged with: after • alabama • attack • health • patients • ransomware • system

Naps May Actually Save Your Life

December 31st, 2019 📆 | 7445 Views ⚑

Scientists recently revealed that napping once or twice a week reduces the risk of a heart attack or stroke. Clip1-ShutterstockClip2-StringrClip3-ShutterstockClip4-ShutterstockClip5-StringrClip6-ShutterstockClip7-StringrClip8-Shutterstock

Tagged with: actually • attack • Cyber attack • evidence • health • heart • immune system • life • link • Naps • recover • reduce • Save

Truckstop.com is back up and running after malware attack

December 31st, 2019 📆 | 2934 Views ⚑

Truckstop.com says most of its major services are back online following what the load board company is now calling a

Tagged with: after • attack • malware • running • truckstop

How to list the content of a database – Webhacking

December 31st, 2019 📆 | 7286 Views ⚑

Portswigger Web Security Academy – SQL Injection Lab: Listing the contents of the database Recommended reading – SQL Injection Cheat

Tagged with: content • database • webhacking

kind-of 6.0.2 Type Detection index.js ctorName Attribute privilege escalation

December 31st, 2019 📆 | 3241 Views ⚑

CVSS Meta Temp Score Current Exploit Price (≈) CTI Interest Score 5.5 $0-$5k 3.86 A vulnerability classified as critical was

Tagged with: attribute • ctorname • detection • escalation • index • privilege

Ingenious Cold War keylogger the Russians used to bug Selectric typewriters in the US embassy / Boing Boing

December 31st, 2019 📆 | 2278 Views ⚑

In the 1970s, the Soviets managed to intercept top secret communications in the US embassy in Moscow and nobody could

Tagged with: boing • embassy • ingenious • keylogger • russians • selectric • typewriters

GPAC 0.8.0/0.9.0-development-20191109 isomedia/box_code_base.c dinf_New() denial of service

December 31st, 2019 📆 | 2546 Views ⚑

CVSS Meta Temp Score Current Exploit Price (≈) CTI Interest Score 3.5 $0-$5k 3.27 A vulnerability, which was classified as

Tagged with: 20191109 • denial • development • isomedia • service

Starbucks Devs Leave API Key in GitHub Public Repo

December 31st, 2019 📆 | 6522 Views ⚑

One misstep from developers at Starbucks left exposed an API key that could be used by an attacker to access

Tagged with: github • leave • public • starbucks

GPAC 0.8.0/0.9.0-development-20191109 media_tools/av_parsers.c av1_parse_tile_group() memory corruption

December 31st, 2019 📆 | 7609 Views ⚑

CVSS Meta Temp Score Current Exploit Price (≈) CTI Interest Score 5.5 $0-$5k 3.15 A vulnerability, which was classified as

Tagged with: 20191109 • development • group • media • parse • parsers • tools

How to list the content of a database – Webhacking

December 31st, 2019 📆 | 4550 Views ⚑

Portswigger Web Security Academy – SQL Injection Lab: Listing the contents of the database Recommended reading – SQL Injection Cheat

Tagged with: content • database • webhacking

Truckstop.com says ransomware knocked its sites offline

December 31st, 2019 📆 | 3225 Views ⚑

Tagged with: knocked • offline • ransomware • sites • truckstop

GPAC 0.8.0/0.9.0-development-20191109 odf/ipmpx_code.c ReadGF_IPMPX_WatermarkingInit() memory corruption

December 31st, 2019 📆 | 5819 Views ⚑

A vulnerability has been found in GPAC 0.8.0/0.9.0-development-20191109 and classified as critical. This vulnerability affects the function ReadGF_IPMPX_WatermarkingInit() of the

Tagged with: 20191109 • development • ipmpx • memory • readgf • watermarkinginit

John Maddison: Fortinet Security Fabric Will Enable Digital Innovation | Accelerate 2020

December 31st, 2019 📆 | 7738 Views ⚑

Learn more: https://ftnt.net/60561ZOT0 https://ftnt.net/60571ZOTF Digital Innovation is causing major disruption across all companies and industries. Disruption creates new opportunities but

Tagged with: digital • enable • fabric • fortinet • innovation • maddison • security

Moss Adams reports data breach

December 31st, 2019 📆 | 7978 Views ⚑

Moss Adams, a Seattle-based Top 20 Firm, issued a notice of a data security incident that it detected in October

Tagged with: adams • breach • reports

GPAC 0.8.0/0.9.0-development-20191109 isomedia/box_funcs.c gf_isom_box_parse_ex() memory corruption

December 31st, 2019 📆 | 2307 Views ⚑

CVSS Meta Temp Score Current Exploit Price (≈) CTI Interest Score 5.5 $0-$5k 2.96 A vulnerability was found in GPAC

Tagged with: 20191109 • corruption • development • funcs • isomedia • memory • parse