Airport Facial Recognition, How Abusers Exploit Basic Apps, and More News
Catch up on the most important news from today in two minutes or less.
Source: Wired – Airport Facial Recognition, How Abusers
[...]
exploit
Hackers Exploit Critical Oracle WebLogic Server Vulnerability by Hiding Malware in Certificate Files(.cer)
Hackers abuse Oracle WebLogic Server Vulnerability CVE-2019-2725 to deliver Monero Miner. The vulnerability is easily exploitable, any unauthenticated attacker with HTTP access to
[...]
Hacker Leaked New Windows 10 Zero-day Exploit Online To Bypass Already Patched Bug
An anonymous hacker SanboxEscaper came back and leaked another Windows zero-day vulnerability that exploits already patched (CVE-2019-0841) local privilege escalation vulnerability in Windows
[...]
Mobile Exploit Fingerprints Devices with Sensor Calibration Data
Data from routines intended to calibrate motion sensors can identify individual iOS and Android devices in a newly released exploit.
Source: Dark
[...]
Anonymous Hacker Leaked Another 2 Windows Zero-day Exploit in GitHub
SanboxEscaper, an anonymous hacker, exploit writer leaked two more Windows zero-day bug in Github along with exploit code. Yesterday, she published a 5th
[...]
Hacker Leaked New Unpatched Windows 10 Task Scheduler Zero-day POC Exploit Online
An anonymous hacker leaked a new Windows zero-day Proofs-of-concept online that exploit the vulnerability resides in the Windows Task Scheduler. Sanboxescaper, a pseudonym
[...]
WhatsApp Hacked – Attackers Exploit iPhone or Android device by Making a WhatsApp call
A critical remote code execution vulnerability in WhatsApp allows hackers to deploy spyware remotely on the vulnerable devices. The vulnerability was discovered earlier
[...]
Hackers Actively Targeting Microsoft SharePoint Servers Via CVE-2019-0604 Exploit
Hackers are actively exploiting a recently patched critical remote code execution vulnerability in SharePoint Server versions to inject China Chopper web shell which
[...]
Financial Apps are Ripe for Exploit via Reverse Engineering
White hat hacker reverse engineers financial apps and finds a treasure trove of security issues.
Source: Threat Post – Web Security –
[...]
Google Project Zero Released Apple macOS Unpatched Zero-day PoC Exploit Online – Apple Crossed 90-day Deadline
Security Expert from Google Zero Project released a PoC Exploit for Apple macOS kernal zero-day vulnerability that is failed to patch by Apple
[...]