ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode
Security Affairspublished ()ingested @securityaffairs

Security Affairs newsletter Round 106

criticalRansomwareimportance 60CVE-2017-7184
Read the original
Tagscve-2017-7184ransomware

Vulnerabilities mentionedAll →

CVEVulnerabilityCVSSEPSSFlagsAffectedExposurePublished
CVE-2017-7184
The xfrm_replay_verify_len function in net/xfrm/xfrm_user.c in the Linux kernel through 4.10.6 does not validate certain size data after an XFRM_MSG_NEWAE updat

The xfrm_replay_verify_len function in net/xfrm/xfrm_user.c in the Linux kernel through 4.10.6 does not validate certain size data after an XFRM_MSG_NEWAE update, which allows local users to obtain root privileges or cause a denial of service (heap-based out-of-bounds access) by leveraging the CAP_NET_ADMIN capability, as demonstrated during a Pwn2Own competition at CanSecWest 2017 for the Ubuntu 16.10 linux-image-* package 4.8.0.41.52.

NVD description · AI analysis pending		7.82%
  • linux linux kernel
—

Indicators of compromiseAll →

TypeIndicatorContext
email[email protected]rs’ activities and discoveries. For more info contact me at [email protected] Thanks for supporting Security Affairs. Once again thank yo
Full article531 words · extracted from securityaffairs.com · click to collapse

A new round of the weekly SecurityAffairs newsletter arrived!

The best news of the week with Security Affairs.

First of all, let me inform you that at the #infosec16 SecurityAffairs was awarded as The Best European Personal Security Blog
http://securityaffairs.co/wordpress/48202/breaking-news/securityaffairs-best-european-personal-security-blog.html

·      Android Chrysaor spyware went undetected for years
·      UEFI Vulnerabilities allow to fully compromise Gigabyte Mini PCs
·      Joining the dots between the ancient Moonlight Maze espionage campaigns and the Turla APT
·      Cyber Risk and Cyber Insurance – Insurance challenge to the CIO as corporate Cyber Security Effectiveness manager
·      Japan plans to develop a hack-proof satellite system
·      Attackers can siphon data from Splunk Enterprise if an authenticated user visits a malicious webpage
·      Linux Kernel vulnerability CVE-2017-7184 disclosed at Pwn2Own 2017 fixed
·      Phishing campaigns target airline consumers seeking business credentials
·      Forcepoint spotted the modular Felismus RAT, it appears the work of skilled professionals
·      95,000 job seekers affected by the McDonalds Canada data breach
·      Still problems for Schneider Electric, Schneider Modicon TM221CE16R has a hardcoded password
·      Download and install the last iOS 10.3.1, attackers can hack you over Wi-Fi
·      South Korean users targeted with a new stealthy malware, the ROKRAT RAT
·      ClearEnergy ransomware aim to destroy process automation logics in critical infrastructure, SCADA and industrial control systems.
·      United Cyber Caliphate published a kill list of 8,786 individuals in US, UK
·      Crooks took control over operations of a Brazilian bank for 5 hours
·      Be careful, Cisco Mobility Express shipped with some Cisco Aironet devices has a hard-coded password
·      Scottrade Bank admits a data breach that potentially exposed 20,000 customers records
·      Be careful, Cisco Mobility Express is shipped with some Cisco Aironet devices has a hard-coded password. Fix it!
·      Operation Cloud Hopper – APT10 goes after Managed Service Providers
·      Philadelphia Ransomware, a new threat targets the Healthcare Industry
·      Apache Struts 2 vulnerability exploited to deliver the Cerber ransomware
·      IoT Amnesia Botnet puts at risk hundreds of thousands of DVRs due to unpatched flaw
·      Vulnerability in Apple Music for Android could be exploited to steal user data
·      WikiLeaks leaked files on the Grasshopper framework, a CIA Tool for creating customized malware installers
·      Sathurbot botnet, over 20,000 bots launched a distributed WordPress password attack
·      Brickerbot botnet, the thingbot that permanently destroys IoT devices
·      RensenWare ransomware – You will decrypt files only scoring .2 Billion in TH12 Game
·      The Shadow Brokers release more alleged NSA hacking tools and exploits

Hurry up, subscribe to the newsletter, next Sunday you will receive all the news directly in your inbox.I desire to inform you that Security Affairs is now open to sponsored content.
I’ll offer the opportunity to:
•    Insert banners of various sizes in all the posts on Security Affairs.
•    Publish sponsored posts written by the customers that can include any kind of commercial reference.
•    Arrange a monthly/quarterly/annual campaign (for big customers) to advertise customers’ activities and discoveries.
For more info contact me at [email protected]
Thanks for supporting Security Affairs.

Once again thank you!

[adrotate banner=”9″]

Pierluigi Paganini

(Security Affairs – Newsletter)

you might also like

leave a comment

Text extracted automatically; images, tables and formatting may be missing. Original: https://securityaffairs.com/57879/breaking-news/security-affairs-newsletter-round-106-news-week.html