article thumbnail

Microsoft released out-of-band Windows fixes for 2 RCE issues

Security Affairs

Microsoft released two out-of-band security updates to address remote code execution (RCE) bugs in the Microsoft Windows Codecs Library and Visual Studio Code. The two vulnerabilities, tracked as CVE-2020-17022 and CVE-2020-17023 , have been rated as important severity. ” reads the advisory. ” reads the advisory.

Libraries 112
article thumbnail

Breaking RSA through Insufficiently Random Primes

Schneier on Security

Basically, the SafeZone library doesn’t sufficiently randomize the two prime numbers it used to generate RSA keys. Some of the keys are from printers from two manufacturers, Canon and Fujifilm (originally branded as Fuji Xerox). The creation date for the all the weak keys was 2020 or later.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

List of data breaches and cyber attacks in November 2020 – 586 million records breached

IT Governance

The post List of data breaches and cyber attacks in November 2020 – 586 million records breached appeared first on IT Governance UK Blog. Don’t pay ransom on the promise your data will be deleted, because it won’t be Almost 11 million patients impacted by Blackbaud incident – and still counting Ticketmaster fined £1.25

article thumbnail

FritzFrog P2P Botnet is back and targets Healthcare, Education and Government Sectors

Security Affairs

FritzFrog is a sophisticated botnet that was involved in attacks against SSH servers worldwide since January 2020. In August 2020, Guardicore Labs researchers published a detailed analysis of the threat, at the time the malware infected over 500 servers in the U.S. and Europe belonging to universities and a railway company.

article thumbnail

EventBot, a new Android mobile targets financial institutions across Europe

Security Affairs

“The Cybereason Nocturnus team is investigating EventBot, a new type of Android mobile malware that emerged around March 2020. Most recent versions of EventBot also include a ChaCha20 library that can improve performance, but it is not currently being used, a circumstance that suggests authors are actively working to optimize EventBot.

article thumbnail

GoDaddy discloses a new data breach

Security Affairs

million customers , and March 2020, which exposed data of 28,000 customers. .” According to the company, the attack is part of a multi-year campaign that was the cause of the data breaches disclosed in November 2021, which impacted 1.2 The malware intermittently redirected random customer websites to malicious sites.”

article thumbnail

Rhysida ransomware gang is auctioning data stolen from the British Library

Security Affairs

The Rhysida ransomware group claimed responsibility for the recent cyberattack on the British Library that has caused a major IT outage. The Rhysida ransomware gang added the British Library to the list of victims on its Tor leak site. It is one of the largest libraries in the world. ” reads the announcement.

Libraries 113