Android vulnerabilities could allow arbitrary code execution

Categories: Exploits and vulnerabilities

Categories: News

Tags: Google

Tags: Android

Tags: Qualcomm

Tags: WLAN

Tags: CVE-2022-25720

Tags: CVE-2022-25718

Tags: CVE-2022-25748

Tags: CVE-2022-20419

Tags: ActivityManager

Google has issued patches for 42 vulnerabilities, including four marked critical

(Read more…)

The post Android vulnerabilities could allow arbitrary code execution appeared first on Malwarebytes Labs.

Read more

Data Access Agreement offers a new path for UK – US data requests

Categories: News

Tags: Data access agreement

Tags: DAA

Tags: UK

Tags: US

Tags: crime

Tags: criminal

Tags: telecommunications

Tags: request

Tags: share

Tags: data

We take a look at a possibly controversial new way for two governments to make direct data requests in cases of law enforcement.

(Read more…)

The post Data Access Agreement offers a new path for UK – US data requests appeared first on Malwarebytes Labs.

Read more

Cyberstalking, pig masks, and cockroaches: Former eBay execs are sentenced

Categories: News

Tags: ebay

Tags: harassment

Tags: doxing

Tags: online threats

Tags: stalking

Tags: cyberstalking

Two former eBay executives have been sentenced to prison for their roles in a cyberstalking campaign aimed at the company’s critics.

(Read more…)

The post Cyberstalking, pig masks, and cockroaches: Former eBay execs are sentenced appeared first on Malwarebytes Labs.

Read more

BOD 23-01: Improving asset visibility and vulnerability detection on federal networks

Categories: News

Tags: BOD 23-01

Tags: asset visibility

Tags: vulnerability detection

Tags: federal networks

Tags: CISA

Tags: CDM

Tags:

CISA has issued BOD 23-10 which requires all FCEB entities to maintain an inventory of all IPv4- and IPv6-networked assets, perform regular, periodic scans of these devices, and provide this information to CISA.

(Read more…)

The post BOD 23-01: Improving asset visibility and vulnerability detection on federal networks appeared first on Malwarebytes Labs.

Read more

Admin from hell facing 10 years for sabotaging ex-employer’s network

Categories: News

Tags: hire

Tags: hiring

Tags: rehire

Tags: insider threat

Tags: ex-employee

Tags: logins

Tags: network

Tags: FBI

Failing to keep a tight reign on ex-employees’ credentials can lead to all manner of chaos.

(Read more…)

The post Admin from hell facing 10 years for sabotaging ex-employer’s network appeared first on Malwarebytes Labs.

Read more

Bogus job offers hide trojanised open-source software

Categories: News

Tags: malware

Tags: ZINC

Tags: microsoft

Tags: infection

Tags: C&C

Tags: open source

Tags: job offer

Tags: fake

Tags: LinkedIn

A North Korean ZINC group is accused of creating compromised versions of KiTTY, PuTTY, TightVNC, and other popular open-source software apps

(Read more…)

The post Bogus job offers hide trojanised open-source software appeared first on Malwarebytes Labs.

Read more

Ransomware-affected school district refuses to pay, gets stolen data released

Categories: News

Tags: compromise

Tags: ransomware

Tags: leak

Tags: extortion

Tags: LAUSD

Data stolen from Los Angeles Unified School District has been leaked online, after staff refused to pay the ransom related to a ransomware attack.

(Read more…)

The post Ransomware-affected school district refuses to pay, gets stolen data released appeared first on Malwarebytes Labs.

Read more