article thumbnail

Security Affairs newsletter Round 342

Security Affairs

A new round of the weekly Security Affairs newsletter arrived! Every week the best security articles from Security Affairs free for you in your email box. The post Security Affairs newsletter Round 342 appeared first on Security Affairs. Follow me on Twitter: @securityaffairs and Facebook. Pierluigi Paganini.

article thumbnail

Researchers created a PoC for Apache OFBiz flaw CVE-2023-51467

Security Affairs

The SonicWall researchers discovered that the magic string requirePasswordChange=Y is the root cause of the authentication bypass regardless of the username and password field or other parameters in an HTTP request. The experts pointed out that almost all of these are honeypots.

Honeypots 129
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Two Linux botnets already exploit Log4Shell flaw in Log4j

Security Affairs

Researchers at NetLab 360 reported that their Anglerfish and Apacket honeypots were already hit by attacks attempting to trigger the Log4Shell flaw in the Log4j library. ssh/authorized_keys file, the attacker can directly log into the remote server without password authentication. After the public key is added to the ~/.ssh/authorized_keys

Honeypots 140
article thumbnail

Weekly Update 342

Troy Hunt

Off the back of the NCA's DDoS market honeypot , the BreachForums admin arrest and the takedown of RaidForums before that , if you're playing in this space you'd have to be looking over your shoulder by now. It's Zero Trust tailor-made for Okta. Book a demo today.

article thumbnail

Law enforcement agencies dismantled the illegal botnet proxy service IPStorm

Security Affairs

In June security firms Bitdefender and Barracuda discovered new IPStorm versions that are able to target also Android, Linux, and Mac. The experts from both security firms reported that IPStorm was infecting Android systems with ADB (Android Debug Bridge) port exposed online. reads the Intezer’s report.

article thumbnail

HinataBot, a new Go-Based DDoS botnet in the threat landscape

Security Affairs

Akamai’s SIRT recently discovered the new bot within HTTP and SSH honeypots, it stood out due to its large size and the lack of specific identification around its newer hashes. “The HinataBot family relies on old vulnerabilities and brute forcing weak passwords for distribution.

article thumbnail

Over 19,000 Orange Livebox ADSL modems leak WiFi credentials

Security Affairs

Threat actors are attempting to exploit a flaw in Orange LiveBox ADSL modems to retrieve their SSID and WiFi password in plaintext. Experts at Bad Packets observed a scan targeting their honeypot, further investigation allowed them to discover that they were leaking the local network access details. admin/admin). Pierluigi Paganini.