Security Affairs

MARCH 30, 2023

Popular voice and video conferencing software 3CX was the victim of a supply chain attack, SentinelOne researchers reported. As of Mar 22, 2023, SentinelOne observed a spike in behavioral detections of the 3CXDesktopApp, which is a popular voice and video conferencing software product. “Unfortunately the rumors are true.

File names 86

File names Manufacturing Libraries Cybersecurity 86

Security Affairs

JULY 20, 2023

Later variants masquerade as adult video content, “Baidu Waimai” food delivery platform, and Adobe Flash. Later variants masquerade as adult video content, “Baidu Waimai” food delivery platform, and Adobe Flash. Lookout first detected WyrmSpy as early as 2017, while it first discovered DragonEgg at the start of 2021.

File names 83

File names Libraries Cybersecurity IT 83

Security Affairs

MARCH 15, 2019

The flaw is an “Absolute Path Traversal” issue in the library that could be exploited to execute arbitrary code by using a specially-crafted file archive. The flaw is an “Absolute Path Traversal” issue in the library that could be exploited to execute arbitrary code by using a specially-crafted file archive.

Archiving 83

Archiving Libraries File names Security 83

Security Affairs

OCTOBER 20, 2018

The jQuery File Upload is a jQuery widget “with multiple file selection, drag&drop support, progress bars, validation and preview images, audio and video.”. The plugin is widely adopted by numerous server-side platforms that support standard HTML form file uploads: PHP, Python, Ruby on Rails, Java, Node.js, Go, and others.

File names 88

File names Libraries Security Access 88

Security Affairs

FEBRUARY 5, 2019

The expert discovered that it is possible to abuse the OpenDocument scripting framework by adding an onmouseoverevent to a link included in the ODT file. By exploiting the vulnerability it is possible to trigger the automatic execution of a specific python library included in the suite using a hidden onmouseover event.

File names 96

File names Libraries Security IT 96

Security Affairs

JUNE 5, 2019

“This malware, which we named BlackSquid after the registries created and main component file names, is particularly dangerous for several reasons.” “The miner in resource is the primary miner used, but it also determines if the targeted system has a video card. ” states Trend Micro.

Mining 63

Mining File names Libraries IT 63