Critical “Access:7” Supply Chain Vulnerabilities Impact ATMs, Medical and IoT Devices

Blog WriterThe Hacker News - Original news source is thehackernews.com

As many as seven security vulnerabilities have been disclosed in PTC’s Axeda software that could be weaponized to gain unauthorized access to medical and IoT devices. Collectively called “Access:7,” the …

Researchers Warn of Linux Kernel ‘Dirty Pipe’ Arbitrary File Overwrite Vulnerability

Blog WriterThe Hacker News - Original news source is thehackernews.com

Linux distributions are in the process of issuing patches to address a newly disclosed security vulnerability in the kernel that could allow an attacker to overwrite arbitrary data into any …

Microsoft Azure ‘AutoWarp’ Bug Could Have Let Attackers Access Customers’ Accounts

Blog WriterThe Hacker News - Original news source is thehackernews.com

Details have been disclosed about a now-addressed critical vulnerability in Microsoft’s Azure Automation service that could have permitted unauthorized access to other Azure customer accounts and take over control. “This attack could …

SharkBot Banking Malware Spreading via Fake Android Antivirus App on Google Play Store

Blog WriterThe Hacker News - Original news source is thehackernews.com

The threat actor behind a nascent Android banking trojan named SharkBot has managed to evade Google Play Store security barriers by masquerading as an antivirus app. SharkBot, like its malware counterparts TeaBot, FluBot, and Oscorp (UBEL), …

Ukrainian CERT Warns Citizens of Phishing Attacks Using Compromised Accounts

Blog WriterThe Hacker News - Original news source is thehackernews.com

Ukraine’s Computer Emergency Response Team (CERT-UA) warned of new phishing attacks aimed at its citizens by leveraging compromised email accounts belonging to three different Indian entities with the goal of …

Critical Bugs in TerraMaster TOS Could Open NAS Devices to Remote Hacking

Blog WriterThe Hacker News - Original news source is thehackernews.com

Researchers have disclosed details of critical security vulnerabilities in TerraMaster network-attached storage (TNAS) devices that could be chained to attain unauthenticated remote code execution with the highest privileges. The issues …

2 New Mozilla Firefox 0-Day Bugs Under Active Attack — Patch Your Browser ASAP!

Blog WriterThe Hacker News - Original news source is thehackernews.com

Mozilla has pushed out-of-band software updates to its Firefox web browser to contain two high-impact security vulnerabilities, both of which it says are being actively exploited in the wild. Tracked as CVE-2022-26485 …

New Linux Kernel cgroups Vulnerability Could Let Attackers Escape Container

Blog WriterThe Hacker News - Original news source is thehackernews.com

Details have emerged about a now-patched high-severity vulnerability in the Linux kernel that could potentially be abused to escape a container in order to execute arbitrary commands on the container …