Remove 11
article thumbnail

An RCE in Annke video surveillance product allows hacking the device

Security Affairs

Researchers from Nozomi Networks discovered a critical vulnerability that can be exploited to hack a video surveillance product made by Annke. The vulnerability, tracked as CVE-2021-32941 can be exploited by an attacker to hack a video surveillance product made by Annke, a provider of home and business security solutions.

article thumbnail

Wazawaka Goes Waka Waka

Krebs on Security

Wazawaka has since “lost his mind” according to his erstwhile colleagues, creating a Twitter account to drop exploit code for a widely-used virtual private networking (VPN) appliance, and publishing bizarre selfie videos taunting security researchers and journalists. Wazawaka, a.k.a. Matveev, a.k.a. “Orange,” a.k.a.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Thales at GITEX 2021 – An Exciting Time With Exciting News

Thales Cloud Protection & Licensing

Thales at GITEX 2021 – An Exciting Time With Exciting News. Wed, 11/03/2021 - 07:29. The GITEX 2021 conference was met with high attendance along with safety protocols, and it lived up to its usual innovative expectations. Recap the highlights of the Thales participation at GITEX 2021 in our video!

article thumbnail

LPE flaw in Linux kernel allows attackers to get root privileges on most distros

Security Affairs

Experts discovered a Local Privilege Escalation, tracked as CVE-2021-33909, that could allow attackers to get root access on most Linux distros. Qualys researchers discovered a local privilege escalation (LPE) tracked as CVE-2021-33909, aka Sequoia, an unprivileged attacker can exploit the flaw to get root privileges on most Linux distros.

Access 141
article thumbnail

China Issues Provisions on the “Scope of Necessary Personal Information Required for Common Types of Mobile Internet Applications”

Hunton Privacy

On March 12, 2021, the Cyberspace Administration of China released Provisions on the “Scope of Necessary Personal Information Required for Common Types of Mobile Internet Applications” (the “Provisions”) (available here in Chinese ). The Provisions will become effective beginning May 1, 2021.

article thumbnail

EnemyBot malware adds new exploits to target CMS servers and Android devices

Security Affairs

CVE Number Affected devices CVE-2021-44228, CVE-2021-45046 Log4J RCE CVE-2022-1388 F5 BIG IP RCE No CVE (vulnerability published on 2022-02) Adobe ColdFusion 11 RCE CVE-2020-7961 Liferay Portal – Java Unmarshalling via JSONWS RCE No CVE (vulnerability published on 2022-04) PHP Scriptcase 9.7

CMS 143
article thumbnail

StrongPity APT spreads backdoored Android Telegram app via fake Shagle site

Security Affairs

The StrongPity APT group targeted Android users with a trojanized version of the Telegram app served through a website impersonating a video chat service called Shagle. The campaign has been active since November 2021, threat actors served the malicious app through a website impersonating a video chat service called Shagle.