Forwarded from NoGoolag
What is Cable Haunt?
Cable Haunt is a critical vulnerability found in cable modems from various manufacturers across the world. The vulnerability enables remote attackers to gain complete control of a cable modem, through an endpoint on the modem. Your cable modem is in charge of the internet traffic for all devices on the network. Cable Haunt might therefore be exploited to intercept private messages, redirect traffic, or participation in botnets.
https://cablehaunt.com
📡@cRyPtHoN_INFOSEC_EN
📡@cRyPtHoN_INFOSEC_DE
📡@NoGoolag
#cablehaunt #modem #router #vulnerability #isp
Cable Haunt is a critical vulnerability found in cable modems from various manufacturers across the world. The vulnerability enables remote attackers to gain complete control of a cable modem, through an endpoint on the modem. Your cable modem is in charge of the internet traffic for all devices on the network. Cable Haunt might therefore be exploited to intercept private messages, redirect traffic, or participation in botnets.
https://cablehaunt.com
📡@cRyPtHoN_INFOSEC_EN
📡@cRyPtHoN_INFOSEC_DE
📡@NoGoolag
#cablehaunt #modem #router #vulnerability #isp
Forwarded from IT Security Alerts
⚠️ iPhones/iPads Mail app vulnerable
"The flaws could eventually let remote hackers secretly take complete control over Apple devices just by sending an email to any targeted individual with his email account logged-in to the vulnerable app."
Severity: 🔶 High
More Information: https://yt.gl/tjqz8
#alert #severityhigh #vulnerability #apple #mailapp
📬 Spread the news, forward the message to your mobile management admins.
❓ Questions? Feedback? Want to discuss? Join us at @itsectalk
"The flaws could eventually let remote hackers secretly take complete control over Apple devices just by sending an email to any targeted individual with his email account logged-in to the vulnerable app."
Severity: 🔶 High
More Information: https://yt.gl/tjqz8
#alert #severityhigh #vulnerability #apple #mailapp
📬 Spread the news, forward the message to your mobile management admins.
❓ Questions? Feedback? Want to discuss? Join us at @itsectalk
Forwarded from LikeBot
⚠️Buffer overflow in sudo (linux utility) - ❗️ affects most distributions/versions - CVE-2021-3156
While a local user is required to exploit this vulnerability, even the account 'nobody' can exploit this vulnerability. An unprivileged user can gain root privileges on affected hosts!
Check if you are affected!
To check if you are affected, run
The following "sudo" versions are vulnerable
* All legacy versions from 1.8.2 to 1.8.31p2
* All stable versions from 1.9.0 to 1.9.5p1
Severity: 🔸High
Additional information
https://yt.gl/sudobufferoverflow
#alert #severityHigh #vulnerability #linux #sudo
🌟 Feel free to discuss this issue in @itsectalk 👍 Please vote if this information was helpful to you.
While a local user is required to exploit this vulnerability, even the account 'nobody' can exploit this vulnerability. An unprivileged user can gain root privileges on affected hosts!
Check if you are affected!
To check if you are affected, run
sudoedit -s / as non-root user. If the response is sudoedit: your system is vulnerable.The following "sudo" versions are vulnerable
* All legacy versions from 1.8.2 to 1.8.31p2
* All stable versions from 1.9.0 to 1.9.5p1
Severity: 🔸High
Additional information
https://yt.gl/sudobufferoverflow
#alert #severityHigh #vulnerability #linux #sudo
🌟 Feel free to discuss this issue in @itsectalk 👍 Please vote if this information was helpful to you.
Qualys
Sudo Vulnerability CVE-2021-3156: Root Access Risk | Qualys
CVE-2021-3156 in Sudo (Baron Samedit) lets unprivileged users escalate privileges. Understand the technical details and recommended solutions for mitigation.
Forwarded from IT Security Alerts
⚠️ Microsoft Exchange Server - GENERAL ADVISORY - UPDATE IMMEDIATELY!
Several new flaws (CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, and CVE-2021-27065) have been reported and Microsoft issued an emergency fix. It is reported that the vulnerabilities are actively being exploited.
Affected: Exchange Server 2013, Exchange Server 2016, and Exchange Server 2019.
More Information (Advisory/Updates): https://yt.gl/exchangeexp
(severity: 🔶 very high)
#alert #vulnerability #severityhigh #exchange #CVE-2021-26855 #CVE-2021-26857 #CVE-2021-26858 #CVE-2021-27065.
➡️ Feel free to discuss this issue in @itsectalk and do your colleagues a favor and forward them this critical vulnerability.
Several new flaws (CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, and CVE-2021-27065) have been reported and Microsoft issued an emergency fix. It is reported that the vulnerabilities are actively being exploited.
Affected: Exchange Server 2013, Exchange Server 2016, and Exchange Server 2019.
More Information (Advisory/Updates): https://yt.gl/exchangeexp
(severity: 🔶 very high)
#alert #vulnerability #severityhigh #exchange #CVE-2021-26855 #CVE-2021-26857 #CVE-2021-26858 #CVE-2021-27065.
➡️ Feel free to discuss this issue in @itsectalk and do your colleagues a favor and forward them this critical vulnerability.
Microsoft On the Issues
New nation-state cyberattacks
Today, we’re sharing information about a state-sponsored threat actor identified by the Microsoft Threat Intelligence Center (MSTIC) that we are calling Hafnium. Hafnium operates from China, and this is the first time we’re discussing its activity. It is…