Latest Information Disclosure news

Hacker posts data of 10,000 American Express accounts for free

A threat actor has posted data of 10,000 American Express credit card holders on a hacker forum for free. In the same forum post, the actor is also claiming to sell more data of Mexican banking customers of American Express, Santander, and Banamex.
- Ax Sharma
- January 05, 2021
- 09:05 AM
- 0
Indian government sites leaking patient COVID-19 test results

Multiple Indian government department websites are leaking COVID-19 lab test results for patients online. These reports uploaded by testing labs across the country as part of the national 'test, trace, isolate' efforts, expose patient's details, test site location, COVID-19 test results, dates, and the healthcare provider's info.
- Ax Sharma
- January 05, 2021
- 04:45 AM
- 0
Cisco fixes WebEx bugs allowing 'ghost' attackers in meetings

Cisco has fixed today three Webex security vulnerabilities that would have allowed unauthenticated remote attackers to join ongoing meetings as ghost participants.
- Sergiu Gatlan
- November 18, 2020
- 01:33 PM
- 0
NVIDIA fixes high severity flaws in Windows display driver

NVIDIA has released security updates to address high severity vulnerabilities in the Windows GPU display driver that could lead to code execution, escalation of privileges, information disclosure, and denial of service.
- Sergiu Gatlan
- October 01, 2020
- 02:08 PM
- 0
Adobe releases out-of-band security update for Adobe Media Encoder

Adobe has released an out-of-band security update for Adobe Media Encoder that fixes three 'Important' security vulnerabilities.
- Lawrence Abrams
- September 15, 2020
- 10:33 AM
- 0
KrØØk attack variants impact Qualcomm, MediaTek Wi-Fi chips

Qualcomm and MediaTek Wi-Fi chips were found to have been impacted by new variants of the KrØØk information disclosure vulnerability discovered by ESET researchers Robert Lipovský and Štefan Svorenčík.
- Sergiu Gatlan
- August 06, 2020
- 04:00 PM
- 0
Adobe fixes critical bugs in Creative Cloud, Media Encoder

Adobe has released security updates to address four critical vulnerabilities that could allow attackers to execute arbitrary code and write arbitrary files on Windows devices running vulnerable versions of Creative Cloud, Adobe Download Manager, and Adobe Media Encoder.
- Sergiu Gatlan
- July 14, 2020
- 11:48 AM
- 0
NVIDIA fixes code execution bug in GeForce Experience software

NVIDIA has addressed a vulnerability in the Windows NVIDIA GeForce Experience (GFE) software that could allow local attackers to execute arbitrary code, trigger a denial of service (DoS) state, or access privileged information on unpatched systems.
- Sergiu Gatlan
- July 08, 2020
- 11:35 AM
- 1
Citrix fixes 11 flaws in ADC, Gateway, and SD-WAN WANOP appliances

Citrix today patched a set of 11 vulnerabilities found to affect its Citrix ADC, Citrix Gateway, and Citrix SD-WAN WANOP (appliance models 4000-WO, 4100-WO, 5000-WO, and 5100-WO) networking products.
- Sergiu Gatlan
- July 07, 2020
- 08:21 AM
- 0
NVIDIA patches high severity flaws in Windows, Linux drivers

NVIDIA has released security updates to address security vulnerabilities found in GPU Display and CUDA drivers and Virtual GPU Manager software that could lead to code execution, denial of service, escalation of privileges, and information disclosure on both Windows and Linux machines.
- Sergiu Gatlan
- June 24, 2020
- 05:49 PM
- 0
New Cisco Webex Meetings flaw lets attackers steal auth tokens

A new vulnerability found in the Cisco Webex Meetings client for Windows could allow local authenticated attackers to gain access to sensitive information including usernames, authentication tokens, and meeting information.
- Sergiu Gatlan
- June 18, 2020
- 09:00 AM
- 0
New Windows 10 SMBv3 flaw can be used for data theft, RCE attacks

A new security vulnerability was found in the compression mechanism of the Microsoft Server Message Block 3.1.1 (SMBv3) network communication protocol used by multiple versions of Windows 10 and Windows Server.
- Sergiu Gatlan
- June 10, 2020
- 10:56 AM
- 0
Cisco Security Appliances Targeted for DoS Attacks via Old Bug

A critical vulnerability fixed in mid-2018 has been resurrected recently in denial-of-service and information disclosure attempts against Cisco's appliances Adaptive Security (ASA) and Firepower.
- Ionut Ilascu
- December 22, 2019
- 11:01 AM
- 0
FortiGuard Used Hardcoded Key, XOR to Encrypt Communications

Security researchers found that multiple security products from Fortinet use weak encryption and static keys to communicate with FortiGuard services in the cloud, such as AntiSpam, AntiVirus, and Web Filter.
- Ionut Ilascu
- November 25, 2019
- 01:01 PM
- 0
Adobe Patches Critical Remote Code Execution Bugs in Illustrator

Adobe released security updates to address security issues that could allow attackers to execute malicious code remotely, elevate privileges, and gain unauthorized access to information on systems running unpatched Illustrator, Animate CC, Bridge CC, and Media Encoder versions.
- Sergiu Gatlan
- November 12, 2019
- 11:22 AM
- 0
Jira Server and Service Desk Fix Critical Security Bugs

Atlassian released updates for Jira Service Desk and Jira Service Desk Data Center to fix a critical-severity security bug that can be exploited by anyone with access to a vulnerable customer portal.
- Ionut Ilascu
- September 21, 2019
- 01:01 PM
- 0
URGENT/11 VxWorks RTOS Vulnerabilities Found, Critical Systems Affected

Almost a dozen serious vulnerabilities have been sitting for the past 13 years in the VxWorks real-time operating system (RTOS) used to power mission-critical embedded devices.
- Ionut Ilascu
- July 29, 2019
- 11:20 AM
- 0
ProFTPD Vulnerability Lets Users Copy Files Without Permission

Under certain conditions, ProFTPD servers are vulnerable to remote code execution and information disclosure attacks after successful exploitation of an arbitrary file copy vulnerability in the mod_copy module.
- Sergiu Gatlan
- July 22, 2019
- 03:45 PM
- 0
Intel Fixes Priv Escalation Vulnerability in Enterprise SSD

Intel today released security updates for two of its products, to fix vulnerabilities that could lead to privilege escalation, denial of service, and information disclosure.
- Ionut Ilascu
- July 10, 2019
- 04:56 AM
- 0
July Android Security Update Fixes Four Critical RCE Flaws

Three critical remote code execution (RCE) in the Media framework and another one in the Android system were fixed by Google in the Android Open Source Project (AOSP) as part of the July 2019 security patch.
- Sergiu Gatlan
- July 01, 2019
- 02:41 PM
- 0