Aggregator

开发人气手游《精灵宝可梦GO》的美国 Niantic 公司正就将游戏业务出售给沙特政府系的美国手游开发商Scopley 展开谈判。出售价格据报道约为 35 亿美元。出售对象包括《精灵宝可梦GO》及其他手游。《精灵宝可梦GO》于 2016 年上线，在全球颇受青睐。Scopley 是沙特公共投资基金（PIF）设立的一家游戏集团的旗下公司。该游戏集团的业务是投资和运营游戏公司。Scopley 意在通过收购确保稳定的利润来源。

Currently trending CVE - hypeScore: 2 - WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A SQL Injection vulnerability was discovered in the WeGIA application, `familiar_docfamiliar.php` endpoint. This vulnerability could allow an attacker to execute arbitrary SQL queries,

Currently trending CVE - hypeScore: 2 - WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. An OS Command Injection vulnerability was discovered in the WeGIA application, `gerenciar_backup.php` endpoint. This vulnerability could allow an attacker to execute arbitrary code rem

Пираты превратили популярные игры в криптоферму.

本报告有助于全面了解工控系统安全现状，多方位感知工控系统安全态势，为研究工控安全相关人员提供参考。

一种新型钓鱼攻击利用隐形Unicode字符混淆JavaScript，针对美国政治行动委员会，个性化且隐蔽性强，难以检测，威胁网络安全。

A sophisticated cyberattack campaign targeting Chinese-speaking users, malicious actors have weaponized fake versions of popular applications such as Signal, Line, and Gmail. These fake and weaponized apps are distributed via deceptive download pages that deliver malware capable of altering system defenses, evading detection, and exfiltrating sensitive data. The attackers exploit search engine manipulation to push […]

The post Weaponized Signal, Line, and Gmail Apps Delivers Malware That Changes System Defenses appeared first on Cyber Security News.

美国报业巨头李氏企业公司（Lee Enterprises）成为最新一家遭到勒索软件攻击之后在公开声明中避免提及勒索软件的上市公司。李氏在递交到 SEC 的 Form 8-K 文件中称，“威胁行为者非法访问了公司网络，加密了关键应用，窃取了特定文件。”这显然是典型的双重勒索攻击。该公司称，截至 2 月 12 日尚无确凿证据表明敏感信息或个人身份信息在攻击期间泄露，尚未恢复正常服务的产品营收占总营收的 5%。李氏企业出版了 70 多家日报和近 350 家周刊和特定主题出版物。

A vulnerability has been found in Google Android and classified as problematic. This vulnerability affects unknown code of the component KASLR. The manipulation leads to information disclosure. This vulnerability was named CVE-2018-9384. It is possible to launch the attack on the local host. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability was found in Google Android and classified as problematic. This issue affects some unknown processing of the file MiniThumbFile.java of the component Thumbnail Handler. The manipulation leads to information disclosure. The identification of this vulnerability is CVE-2018-9379. The attack needs to be approached locally. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability was found in Google Android. It has been classified as problematic. Affected is an unknown function of the file Parcel.cpp. The manipulation leads to insufficiently random values. This vulnerability is traded as CVE-2018-9434. An attack has to be approached locally. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability was found in Google Android. It has been declared as problematic. Affected by this vulnerability is the function asn1_ber_decoder of the file asn1_decoder.c. The manipulation leads to out-of-bounds read. This vulnerability is known as CVE-2018-9383. Local access is required to approach this attack. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability classified as critical has been found in Google Android. This affects an unknown part. The manipulation leads to memory corruption. This vulnerability is uniquely identified as CVE-2018-9401. It is possible to launch the attack on the local host. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability, which was classified as critical, has been found in Google Android. This issue affects some unknown processing of the file UserDictionaryProvider.java. The manipulation leads to improper access controls. The identification of this vulnerability is CVE-2018-9375. An attack has to be approached locally. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability, which was classified as critical, was found in Google Android. Affected is an unknown function of the file WifiServiceImpl.java of the component Wi-Fi Hotspot. The manipulation leads to permission issues. This vulnerability is traded as CVE-2018-9382. Local access is required to approach this attack. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability has been found in Google Android and classified as problematic. Affected by this vulnerability is an unknown functionality of the file mnh-sm.c. The manipulation leads to integer overflow. This vulnerability is known as CVE-2018-9387. Attacking locally is a requirement. There is no exploit available. It is recommended to apply a patch to fix this issue.