InfoSec

Search This Blog

Symantec Claims Further Lazarus Links but Critics Disagree

May 24, 2017

Get link
Facebook
X
Pinterest
Email
Other Apps

Feedly https://www.infosecurity-magazine.com/news/symantec-claims-further-lazarus/ IFTTT

Get link
Facebook
X
Pinterest
Email
Other Apps

Comments

New Study Quantifies Airbnb's Widespread Exclusion of Disabled Guests

RoughTed: The anti ad-blocker malvertiser

RoughTed is a large malvertising operation that peaked in March 2017 but has been going on for at least well over a year. It is unique for its considerable scope ranging from scams to exploit kits, targeting a wide array of users via their operating system, browser, and geolocation to deliver the appropriate payload. We estimate that the traffic via RoughTed related domains accumulated to over half a billion hits and was responsible for many successful compromises due to effective techniques that triage visitors and bypass ad-blockers. The threat actors behind RoughTed have been leveraging the Amazon cloud infrastructure, in particular, its Content Delivery Network (CDN), while also blending in the noise with multiple ad redirections from several ad exchanges, making it more difficult to identify the source of their malvertising activity. Highlights Traffic comes from thousands of publishers, some ranked in Alexa’s top 500 websites. RoughTed domains accumulated over half...

Vulnerabilities Patched in Aruba Access Policy Platform

HPE-owned network access solutions provider Aruba informed customers last week that the company’s ClearPass Policy Manager access policy platform is affected by several vulnerabilities. The most serious of the flaws , based on its CVSS score, is a high severity unauthenticated remote code execution vulnerability tracked as CVE-2017-5824. Another high severity issue is an information disclosure bug ( CVE-2017-5647 ) affecting Apache Tomcat. The other security holes, classified as medium and low severity, include authenticated remote code execution (CVE-2017-5826), reflected XSS (CVE-2017-5827), privilege escalation (CVE-2017-5825), arbitrary command execution via XXE (CVE-2017-5828), and access restriction bypass issues (CVE-2017-5829). The vulnerabilities affect all ClearPass Policy Manager versions prior to 6.6.5. Users have been advised to update the product to version 6.6.5 and apply an additional hotfix made available on May 24. A majority of these vulnerabilities were report...

Powered by Blogger

Symantec Claims Further Lazarus Links but Critics Disagree

Comments

Post a Comment