Aggregator

Iranian Hacker Pleads Guilty in $19 Million Robbinhood Ransomware Attack on Baltimore

The Hackers News
10 months 2 weeks ago
An Iranian national has pleaded guilty in the U.S. over his involvement in an international ransomware and extortion scheme involving the Robbinhood ransomware. Sina Gholinejad (aka Sina Ghaaf), 37, and his co-conspirators are said to have breached the computer networks of various organizations in the United States and encrypted files with Robbinhood ransomware to demand Bitcoin ransom payments.
The Hacker News

Cybercriminals Are Turning Ordinary Citizens Into Money Mules in a New ‘Rent-a-Bank-Account’ Scam

GBHackers on Security | #1 Globally Trusted Cyber Security News Platform
10 months 2 weeks ago

Cybercriminals are exploiting vulnerable individuals by transforming them into unwitting money mules through a sophisticated fraud known as the ‘rent-a-bank-account’ scam. This scam involves fraudsters enticing people, often those in financial distress, with promises of quick cash in exchange for temporarily “lending” their bank accounts for transactions. Luring Victims with Promises of Easy Money A […]

The post Cybercriminals Are Turning Ordinary Citizens Into Money Mules in a New ‘Rent-a-Bank-Account’ Scam appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Aman Mishra

How Can We Solve the 'Insane' Deepfake Video Problem?

BankInfoSecurity.com
10 months 2 weeks ago
Google Is Getting Accolades for Veo 3, But the AI Video Tool Has a Darker Side
AI enthusiasts are saying Veo 3 is one of Google's best products. The mind-blowing AI constructs cinematic video clips from text prompts, and the results look real. Veo 3 pushes deepfake capabilities into uncharted territory and introduces new threats to truth, trust and authenticity.

Zscaler Buys Red Canary to Elevate AI-Driven Threat Response

BankInfoSecurity.com
10 months 2 weeks ago
Red Canary Purchase Aims to Deliver Agentic AI-Powered Security Operations at Scale
Zscaler’s buy of Red Canary will unify its cloud-based security infrastructure with Red Canary’s MDR insights, giving rise to a next-gen SOC built on automation, AI, and rapid detection expertise. The integration will support a proactive SOC experience powered by AI workflows and security expertise.

CVE-2022-37878 | Aruba ClearPass Policy Manager up to 6.9.11/6.10.6 Web-based Management Interface command injection (ARUBA-PSA-2022-013)

Vuldb Updates
10 months 2 weeks ago
A vulnerability, which was classified as very critical, has been found in Aruba ClearPass Policy Manager up to 6.9.11/6.10.6. This issue affects some unknown processing of the component Web-based Management Interface. The manipulation leads to command injection. The identification of this vulnerability is CVE-2022-37878. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2022-37879 | Aruba ClearPass Policy Manager up to 6.9.11/6.10.6 Web-based Management Interface privilege escalation (ARUBA-PSA-2022-013)

Vuldb Updates
10 months 2 weeks ago
A vulnerability, which was classified as very critical, was found in Aruba ClearPass Policy Manager up to 6.9.11/6.10.6. Affected is an unknown function of the component Web-based Management Interface. The manipulation leads to privilege escalation. This vulnerability is traded as CVE-2022-37879. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2022-37880 | Aruba ClearPass Policy Manager up to 6.9.11/6.10.6 Web-based Management Interface privilege escalation (ARUBA-PSA-2022-013)

Vuldb Updates
10 months 2 weeks ago
A vulnerability has been found in Aruba ClearPass Policy Manager up to 6.9.11/6.10.6 and classified as very critical. Affected by this vulnerability is an unknown functionality of the component Web-based Management Interface. The manipulation leads to privilege escalation. This vulnerability is known as CVE-2022-37880. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2022-37881 | Aruba ClearPass Policy Manager up to 6.9.11/6.10.6 Web-based Management Interface privilege escalation (ARUBA-PSA-2022-013)

Vuldb Updates
10 months 2 weeks ago
A vulnerability was found in Aruba ClearPass Policy Manager up to 6.9.11/6.10.6 and classified as very critical. Affected by this issue is some unknown functionality of the component Web-based Management Interface. The manipulation leads to privilege escalation. This vulnerability is handled as CVE-2022-37881. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2022-37882 | Aruba ClearPass Policy Manager up to 6.9.11/6.10.6 Web-based Management Interface privilege escalation (ARUBA-PSA-2022-013)

Vuldb Updates
10 months 2 weeks ago
A vulnerability was found in Aruba ClearPass Policy Manager up to 6.9.11/6.10.6. It has been classified as very critical. This affects an unknown part of the component Web-based Management Interface. The manipulation leads to privilege escalation. This vulnerability is uniquely identified as CVE-2022-37882. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2022-33735 | Huawei WS7200-10 11.0.2.13 Password Verification excessive authentication (sa-20220628-01)

Vuldb Updates
10 months 2 weeks ago
A vulnerability classified as problematic has been found in Huawei WS7200-10 11.0.2.13. This affects an unknown part of the component Password Verification. The manipulation leads to improper restriction of excessive authentication attempts. This vulnerability is uniquely identified as CVE-2022-33735. The attack can only be initiated within the local network. There is no exploit available.
vuldb.com

CVE-2021-46834 | Huawei JAD-AL50 102.0.0.225 Cross Device Task Management permission (huawei-sa-20220819-01)

Vuldb Updates
10 months 2 weeks ago
A vulnerability was found in Huawei JAD-AL50 102.0.0.225. It has been rated as critical. Affected by this issue is some unknown functionality of the component Cross Device Task Management. The manipulation leads to permission issues. This vulnerability is handled as CVE-2021-46834. Access to the local network is required for this attack. There is no exploit available.
vuldb.com

CVE-2020-36602 | Huawei 576up005 HOTA-CM-H-Shark-BD Headset out-of-bounds write (huawei-sa-20220826-01)

Vuldb Updates
10 months 2 weeks ago
A vulnerability was found in Huawei 576up005 HOTA-CM-H-Shark-BD, 577HOTA-CM-H-Shark-BD, 581up-HOTA-CM-H-Shark-BD, 586-HOTA-CM-H-Shark-BD, 588-HOTA-CM-H-Shark-BD, 606-HOTA-CM-H-Shark-BD, BI-ACC-REPORT and CM-H-Shark-BD and classified as critical. This issue affects some unknown processing of the component Headset Handler. The manipulation leads to out-of-bounds write. The identification of this vulnerability is CVE-2020-36602. It is possible to launch the attack on the physical device. There is no exploit available.
vuldb.com

Managed ad