Security Affairs

JANUARY 20, 2025

Crooks used names typosquatting popular libraries, such as @async-mutex/mutex , dexscreener , solana-transaction-toolkit and solana-stable-web-huks. “It is important to verify a packages authenticity by examining its download counts, publisher history, and any associated GitHub repository links.

Libraries 254

Libraries Authentication IT Access 254

Security Affairs

MARCH 30, 2024

Red Hat warns of a backdoor in XZ Utils data compression tools and libraries in Fedora development and experimental versions. Red Hat urges users to immediately stop using systems running Fedora development and experimental versions because of a backdoor in the latest versions of the “xz” tools and libraries. rpm and xz-libs-5.6.0-2.fc40.x86_64.rpm

Libraries 350

Libraries Authentication Access Risk 350

Security Affairs

MARCH 11, 2024

Researchers released technical specifics and a PoC exploit for a recently disclosed flaw in Progress Software OpenEdge Authentication Gateway and AdminServer. ” The vulnerability CVE-2024-1403 (CVSS score 10) is an authentication bypass issue that impacts OpenEdge versions 11.7.18 If a match occurs, authentication is granted.

Authentication 342

Authentication Passwords Libraries Access 342

Security Affairs

DECEMBER 28, 2023

Experts warn of an authentication bypass zero-day flaw that affects Apache OfBiz, an open-source Enterprise Resource Planning (ERP) system. Experts warn of a zero-day flaw that affects Apache OfBiz, an open-source Enterprise Resource Planning (ERP) system. ” reads the report published by SonicWall.

Authentication 349

Authentication Libraries Passwords Information Security 349

Security Affairs

OCTOBER 17, 2018

The Libssh library is affected by a severe flaw that could be exploited by attackers to completely bypass authentication and take over a vulnerable server. The flaw is an authentication-bypass vulnerability that was introduced in Libssh version 0.6 and above have an authentication bypass vulnerability in the server code. .

Libraries 279

Libraries Authentication Passwords Security 279

Security Affairs

NOVEMBER 15, 2022

The issue can be exploited by triggering a recently disclosed VM sandbox escape vulnerability (CVE-2022-36067 aka Sandbreak) in the vm2 third-party library. The researchers explained that the template engine utilizes the vm2 library to prevent the execution of untrusted code. ” reads the advisory published by Oxeye.

Libraries 298

Libraries Authentication Paper Risk 298

Security Affairs

JULY 7, 2022

“Unlike other threats that hijack shared libraries by modifying the environment variable LD_PRELOAD, this malware uses 2 different ways to load the malicious library. “The shared object hooks functions from 3 libraries: libc, libcap and Pluggable Authentication Module (PAM). ” continues the experts.

Libraries 342

Libraries Cybersecurity Authentication Access 342

Security Affairs

MARCH 23, 2020

Microsoft warns of hackers actively exploiting two zero-day remote code execution vulnerabilities in Windows Adobe Type Manager Library. Microsoft warns of hackers exploiting two zero-day remote code execution (RCE) vulnerabilities in the Windows Adobe Type Manager Library, both issues impact all supported versions of Windows.

Libraries 335

Libraries Risk Authentication Security 335

Security Affairs

DECEMBER 12, 2021

Immediately after the disclosure of the Log4Shell flaw in Log4j library threat actors started including the exploit code in Linux botnets. Researchers at NetLab 360 reported that their Anglerfish and Apacket honeypots were already hit by attacks attempting to trigger the Log4Shell flaw in the Log4j library.

Honeypots 363

Honeypots Libraries Passwords Authentication 363

Security Affairs

DECEMBER 4, 2020

Hundreds of millions of Android users are potentially exposed to the risk of hack due to the use of Android Play Core Library versions vulnerable to CVE-2020-8913. The CVE-2020-8913 flaw is a local, arbitrary code execution vulnerability that resides exists in the SplitCompat.install endpoint in Android’s Play Core Library.

Libraries 338

Libraries e-Delivery Risk Passwords 338

Security Affairs

APRIL 9, 2024

Most of the Internet-facing devices are in South Korea, Hong Kong, the U.S., Sweden, and Finland. running on LG43UM7000PLA webOS 5.5.0 – 04.50.51 running on OLED55CXPUA webOS 6.3.3-442 442 (kisscurl-kinglake) – 03.36.50 running on OLED48C1PUB webOS 7.3.1-43 43 (mullet-mebin) – 03.33.85 running on OLED55CXPUA webOS 6.3.3-442

Authentication 351

Authentication Libraries Access Information Security 351

Security Affairs

SEPTEMBER 6, 2023

The attackers forged authentication tokens to access user email using an acquired Microsoft account (MSA) consumer signing key.

Authentication 338

Authentication Libraries Access Government 338

Security Affairs

MAY 2, 2024

Threat actors breached the Dropbox Sign production environment and accessed customer email addresses and hashed passwords Cloud storage provider DropBox revealed that threat actors have breached the production infrastructure of the DropBox Sign eSignature service and gained access to customer information and authentication data.

Passwords 332

Passwords Authentication Access Phishing 332

Security Affairs

APRIL 30, 2020

EventBot is a mobile banking trojan and infostealer that abuses Android’s accessibility features to steal user data from financial applications, read user SMS messages, and steal SMS messages to allow the malware to bypass two-factor authentication.” ” reads the analysis published by Cybereason. ” concludes the report.

Financial Services 358

Financial Services Libraries Encryption Authentication 358

Security Affairs

SEPTEMBER 24, 2020

The Netlogon service is an Authentication Mechanism used in the Windows Client Authentication Architecture which verifies logon requests, and it registers, authenticates, and locates Domain Controllers. The CVE-2020-1472 flaw is an elevation of privilege that resides in the Netlogon.

Authentication 350

Authentication Passwords Analytics Libraries 350

Security Affairs

JANUARY 12, 2024

In December, experts warned of an authentication bypass zero-day flaw that affects Apache OfBiz, an open-source Enterprise Resource Planning (ERP) system. An attacker can trigger the vulnerability, tracked as CVE-2023-51467 , to bypass authentication to achieve a simple Server-Side Request Forgery (SSRF). in the Apache OfBiz.

Honeypots 360

Honeypots Authentication Libraries Passwords 360

Security Affairs

APRIL 2, 2024

Researchers from the firmware security firm Binarly released a free online scanner to detect the CVE-2024-3094 Backdoor Last week, Microsoft engineer Andres Freund discovered a backdoor issue in the latest versions of the “xz” tools and libraries. The malicious build interferes with the authentication in sshd through systemd.

Authentication 334

Authentication Libraries Access Security 334

Security Affairs

DECEMBER 8, 2020

Security researchers at Digital Defense discovered three vulnerabilities in D-Link VPN routers, including command injection flaws, and an authenticated crontab injection flaw. The third flaw is an Authenticated Crontab Injection that could allow an authenticated user to inject arbitrary CRON entries that will then be executed as root.

Authentication 330

Authentication Access Libraries Security 330

Security Affairs

SEPTEMBER 14, 2020

The Netlogon service is an Authentication Mechanism used in the Windows Client Authentication Architecture which verifies logon requests, and it registers, authenticates, and locates Domain Controllers. The CVE-2020-1472 flaw is an elevation of privilege that resides in the Netlogon. published a detailed analysis of the flaw.

Authentication 330

Authentication Passwords Libraries Paper 330

Security Affairs

APRIL 6, 2020

In order to discover potential targets and locate the information it needs to authenticate against, the script passively collects data from /.ssh/config,bash_history, gopsutil – a process utility library, used for system and processes monitoring. gopsutil – a process utility library, used for system and processes monitoring.

Mining 340

Mining Libraries Cloud Communications 340

Security Affairs

APRIL 14, 2020

The two RCE flaws in Windows, tracked as CVE-2020-1020 and CVE-2020-0938 , are related to the Adobe Type Manager Library. In March, Microsoft warned of hackers exploiting the two zero-day remote code execution (RCE) vulnerabilities in the Windows Adobe Type Manager Library, both issues impact all supported versions of Windows.

Libraries 333

Libraries Authentication Security Risk 333

Security Affairs

SEPTEMBER 19, 2024

An attacker could chain the issue with the recently disclosed flaw CVE-2024-8190 to bypass admin authentication and execute arbitrary commands on the appliance. “Ivanti is disclosing a critical vulnerability in Ivanti CSA 4.6 is End-of-Life , and no longer receives updates for OS or third-party libraries. Patch 519). .

Cloud 309

Cloud Authentication Libraries Access 309

Security Affairs

SEPTEMBER 20, 2024

An attacker could chain the issue with the recently disclosed flaw CVE-2024-8190 to bypass admin authentication and execute arbitrary commands on the appliance. Patch 519). “If CVE-2024-8963 is used in conjunction with CVE-2024-8190 an attacker can bypass admin authentication and execute arbitrary commands on the appliance.”

Cloud 319

Cloud IT Authentication Cybersecurity 319

Security Affairs

NOVEMBER 2, 2022

These legitimate-looking emails directed employees to visit a fake CircleCI login page, enter their GitHub username and password, and then use their hardware authentication key to pass a One Time Password (OTP) to the malicious site.” ” reads the advisory published by the company.

Access 336

Access Phishing Passwords Authentication 336

Security Affairs

JULY 24, 2023

The ssh-agent is a program that caches private keys for SSH public key authentication, reducing the need for regular passphrase input. The vulnerability can be exploited only if certain libraries are installed on systems running the vulnerable versions and the SSH authentication agent is forwarded to an attacker-controlled system.

Libraries 246

Libraries Authentication Encryption Security 246

Security Affairs

AUGUST 12, 2024

. “Attackers use the classic DLL sideloading technique: when the desktop.exe file is launched, the malicious VERSION.dll library is loaded into the corresponding process” reads the report published by Kaspersky. “This library is a backdoor packed with the VMProtect tool.

Libraries 343

Libraries Encryption Cloud Archiving 343

eSecurity Planet

JUNE 30, 2022

CISA noted that Basic authentication is simple and pretty convenient but unsecured by design. And it’s incompatible with multi-factor authentication (MFA) systems , so admins might be discouraged from enabling it. or Microsoft Active Directory Authentication Library uses tokens that expire quickly and cannot be reused elsewhere.

Authentication 116

Authentication Libraries Cloud Passwords 116

Security Affairs

DECEMBER 17, 2023

“Today we experienced an exploit on the Ledger Connect Kit, a Javascript library that implements a button allowing users to connect their Ledger device to third party DApps (wallet-connected Web sites). ” The initial observation suggests that the account probably did not have Multi-Factor Authentication (MFA) enabled.

Phishing 351

Phishing Libraries Authentication Access 351

Security Affairs

SEPTEMBER 14, 2024

Patch 518 and before allows a remote authenticated attacker to obtain remote code execution. is End-of-Life , and no longer receives updates for OS or third-party libraries. An attacker can trigger this high-severity vulnerability to achieve remote code execution under specific conditions. to address the vulnerability.

Cloud 312

Cloud Libraries Authentication Cybersecurity 312

Security Affairs

DECEMBER 31, 2021

Below is the list of flaws discovered by the researchers: CVE-2021-20173 : Post Authentication Command Injection via SOAP Interface. Researchers discovered multiple instances of known vulnerable jQuery libraries (such as jquery 1.4.2), for this reason, they are urging to update them to the latest available versions.

Communications 359

Communications Libraries Encryption Passwords 359

Security Affairs

JANUARY 22, 2021

The experts discovered that Amazon did not verify the authenticity of the email sender, this means that attackers can spoof an email address that is present in the list of approved addresses. ” continues the post. “To test this, I used an email spoofing service to spoof an email message and send an e-book to my device.

Authentication 360

Authentication Libraries Phishing Security 360

Security Affairs

MARCH 8, 2024

resides in the SAML authentication process of Cisco Secure Client, an unauthenticated, remote attacker can exploit the flaw to conduct a carriage return line feed (CRLF) injection attack against a user. An authenticated, local attacker can exploit the flaw to elevate privileges on an affected device. ” reads the advisory.

Security 334

Security IT Authentication Libraries 334

Security Affairs

JANUARY 14, 2021

out of 10, could be exploited by a remote authenticated attacker to change the password for any account user on affected systems. “A vulnerability in Cisco Connected Mobile Experiences (CMX) could allow a remote, authenticated attacker without administrative privileges to alter the password of any user on an affected system.”

Passwords 307

Passwords Authentication Analytics Libraries 307

Security Affairs

SEPTEMBER 14, 2024

Patch 518 and before allows a remote authenticated attacker to obtain remote code execution. is End-of-Life , and no longer receives updates for OS or third-party libraries. An attacker can trigger this high-severity vulnerability to achieve remote code execution under specific conditions. “An reads the advisory.

Cloud 332

Cloud IT Libraries Cybersecurity 332

Security Affairs

MARCH 15, 2019

The initial vulnerability that we discovered in October 2012 was related to the “Internet Key Exchange and Authenticated Internet Protocol Keying Modules”. Those modules are used for authentication and key exchange in Internet Protocol security. Tracking high-privileges libraries calls with DLL-based loggers.

Libraries 275

Libraries Authentication Access IT 275

Security Affairs

AUGUST 26, 2021

that allows remote authenticated attackers to execute arbitrary code as the root user via maliciously crafted meeting room. Another sample documented by the experts allows attackers to parse incoming web request data, while another file could be used to intercept certificate-based multi-factor authentication. ” reads the MAR.

Security 347

Security Authentication Libraries Passwords 347

Security Affairs

JANUARY 19, 2022

The vulnerability, tracked as CVE-2021-35247 , was discovered by Microsoft security researcher Jonathan Bar Or while monitoring attacks exploiting the vulnerabilities in the Log4j library. SolarWinds released Serv-U 15.3 that addresses the vulnerability by performing additional validation and sanitization.

Authentication 353

Authentication Ransomware Libraries Security 353