Vulnerability Summary for the Week of September 4, 2023

  High Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info canonical_ltd. -- snapd_for_linux Using the TIOCLINUX ioctl request, a malicious snap could inject contents into…

Comments Off on Vulnerability Summary for the Week of September 4, 2023

Multiple Nation-State Threat Actors Exploit CVE-2022-47966 and CVE-2022-42475

SUMMARY The Cybersecurity and Infrastructure Security Agency (CISA), Federal Bureau of Investigation (FBI), and Cyber National Mission Force (CNMF) identified the presence of indicators of compromise (IOCs) at an Aeronautical…

Comments Off on Multiple Nation-State Threat Actors Exploit CVE-2022-47966 and CVE-2022-42475

Vulnerability Summary for the Week of August 28, 2023

 High Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info earcms -- ear_app An issue found in Earcms Ear App v.20181124 allows a remote cyber threat…

Comments Off on Vulnerability Summary for the Week of August 28, 2023

VMware Releases Security Update for Tools

VMware has released a security update to address a vulnerability in VMware Tools. A cyber threat actor can exploit this vulnerability to obtain sensitive information. CISA encourages users and administrators…

Comments Off on VMware Releases Security Update for Tools

Infamous Chisel Malware Analysis Report

Infamous Chisel–A collection of components associated with Sandworm designed to enable remote access and exfiltrate information from Android phones. Executive Summary Infamous Chisel is a collection of components targeting Android…

Comments Off on Infamous Chisel Malware Analysis Report