Someone in supply chain law clearly believed that mislabeling a military assault rifle gave them a loophole to drive trucks through. China North Industries Group Corporation Limited, one of the country’s largest state-owned defense contractors, sent th…
The development team behind the vm2 JavaScript sandbox library addressed a critical Remote Code Execution vulnerability. The developers behind the vm2 JavaScript sandbox module have addressed a critical vulnerability, tracked as CVE-2023-29017 (CVSS score 9.8), that could be exploited to execute arbitrary shellcode. vm2 is a sandbox that can run untrusted code in an isolated context […]
The post Researchers disclose critical sandbox escape bug in vm2 sandbox library appeared first on Security Affairs.
An Iranian military official announced that the Islamic Revolution Guards Corps (IRGC) Ground Force has successfully tested a new suicide drone that can hit targets within a range of 450 kilometers.
Andrey Shevlyakov, an Estonian national, was charged in the US with conspiracy and other charges related to acquiring U.S.-made electronics on behalf of the Russian government and military. The Estonian man is accused of having helped the Russian government and military to purchase US-made electronics and hacking tools. The defendant was arrested in Estonia on […]
The post Estonian National charged with helping Russia acquire U.S. hacking tools and electronics appeared first on Security Affairs.
Iran’s security chief praises growing economic cooperation with Russia in the face of Western sanctions, saying international efforts to diminish the role of the US dollar in financial transactions have gathered pace.
By Waqas
In addition to phishing activities, researchers have observed a rise in Telegram channels being used to sell online banking credentials.
This is a post from HackRead.com Read the original post: Phishers Now Actively Automating Scams with Teleg…
US CISA has added Veritas Backup Exec flaws, which were exploited in ransomware attacks, to its Known Exploited Vulnerabilities catalog. U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added the following five new issues to its Known Exploited Vulnerabilities Catalog: This week Mandiant researchers reported that an affiliate of the ALPHV/BlackCat ransomware gang, tracked as UNC4466, was observed […]
The post CISA adds Veritas Backup Exec flaws to its Known Exploited Vulnerabilities catalog appeared first on Security Affairs.
Plus: 119 arrested during a sting on the Genesis dark-web market, the IRS aims to buy an online mass surveillance tool, and more.
By Waqas
The Money Message ransomware group has reportedly demanded a ransom of $4 million from MSI.
This is a post from HackRead.com Read the original post: New Money Message Ransomware Gang Hits MSI, Threatens of Data Leak
“Thieves has discovered new ways to steal cars by pulling off smart devices (like smart headlights) to get at and attack via the Controller Area Network (CAN) bus,” writes longtime Slashdot reader KindMind. The Register reports: A Controller Area Netwo…