Microsoft is adding native support for RAR, 7-Zip, and GZ archives to an upcoming version of Windows 11 expected this week. […]
All posts by admin
Microsoft: Windows 10 22H2 is the final version of Windows 10
Microsoft says Windows 10, version 22H2 will be the last feature update to be released for the Windows 10 operating system. […]
ViperSoftX info-stealing malware now targets password managers
A new version of the ViperSoftX information-stealing malware has been discovered with a broader range of targets, including targeting the KeePass and 1Password password managers. […]
Lastpass: Hackers stole customer vault data in cloud storage breach
LastPass revealed today that attackers stole customer vault data after breaching its cloud storage earlier this year using information stolen during an August 2022 incident.
VU#730793: Heimdal Kerbos vulnerable to remotely triggered NULL pointer dereference
Overview
The Heimdal Software Kerberos 5 implementation is vulnerable to a null pointer dereferance. An attacker with network access to an application that depends on the vulnerable code path can cause the application to crash.
Description
A flawed logical condition allows a malicious actor to remotely trigger a NULL pointer dereference using a crafted negTokenInit token.
Impact
An attacker can use a specially crafted network packet to cause a vulnerable application to crash.
Solution
The latest version of code in the Heimdal master branch fixes the issue. However, the current stable release 7.7.0 does not include the fix.
Acknowledgements
Thanks to the International Continence Society for reporting this issue.
This document was written by Kevin Stephens.
Beware of Caller ID Spoofing
You may not be able to tell right away if an incoming call is spoofed. Be extremely careful about responding to any request for personal identifying information.
5 Types of Remote Access Hacking Exploited During COVID-19
With the rise of a remote working population, “remote hackers” have been re-emerging as well. These remote hackers take advantage […]
Wormhole cryptotrading company turns over $340,000,000 to criminals
This week, cryptocurrency company Wormhole lived up to its name by exposing an exploitable vulnerability that apparently allowed cybercriminals to run off with an eye-watering 120,000 Ether tokens.
Elementor WordPress plugin has a gaping security hole – update now
If you run a WordPress site and you use the Elementor website creation toolkit, you could be at risk of a security hole that combines data leakage and remote code execution.
5 TIPS FOR SPOTTING PHISHING EMAIL
5 TIPS FOR SPOTTING PHISHING EMAIL Every day countless phishing emails are sent to unsuspecting victims. While some of these [...]
Read more
Recent Posts
-
Windows 11 getting native support for 7-Zip, RAR, and GZ archives -
Microsoft: Windows 10 22H2 is the final version of Windows 10 -
ViperSoftX info-stealing malware now targets password managers -
I had ChatGPT write a blog on the dangers of using ChatGPT, and the results were pretty amazing. -
A friendly, year end, anti-phishing refresher