Read Time:7 Second
saitoha libsixel v1.8.6 was discovered to contain a double free via the component sixel_chunk_destroy at /root/libsixel/src/chunk.c.
CVE-2020-14115
Read Time:9 Second
A command injection vulnerability exists in the Xiaomi Router AX3600. The vulnerability is caused by a lack of inspection for incoming data detection. Attackers can exploit this vulnerability to execute code.
CVE-2020-14112
Read Time:10 Second
Information Leak Vulnerability exists in the Xiaomi Router AX6000. The vulnerability is caused by incorrect routing configuration. Attackers can exploit this vulnerability to download part of the files in Xiaomi Router AX6000.
CVE-2020-14111
Read Time:9 Second
A command injection vulnerability exists in the Xiaomi Router AX3600. The vulnerability is caused by a lack of inspection for incoming data detection. Attackers can exploit this vulnerability to execute code.
Qakbot Debuts New Technique
Read Time:4 Second
Old botnet performs new trick by inserting itself into the middle of email threads
Alleged Kaseya Attacker Extradited to US
Read Time:3 Second
Defendant indicted over deployment of REvil ransomware arrives in America
AI Accountability Framework Created to Guide Use of AI in Security
Read Time:4 Second
The framework aims to mitigate ethical issues surrounding use of AI in security
Ragnar Locker ransomware – what you need to know
Read Time:10 Second
The FBI has warned that the Ragnar Locker gang has infected at least 52 critical infrastructure organisations across America with its ransomware.
Read more in my article on the Tripwire State of Security blog.
No, women in Ukraine aren’t up for a sexy webcam chat right now
Read Time:6 Second
No – there aren’t women in Ukraine are keen to have a sexy webcam chat with you right now.
Smashing Security podcast #265: The Nigerian supercop and Alexa vs. Alexa
Read Time:21 Second
The most famous policeman in Nigeria is in hot water over his links to Hushpuppi, has your Amazon Echo been talking to itself, and can an AI girlfriend save your marriage?
All this and much more is discussed in the latest edition of the award-winning “Smashing Security” podcast by computer security veterans Graham Cluley and Carole Theriault.
Plus don’t miss our featured interview with Jason Meller of Kolide.