IT News | Extol Corporation Sdn Bhd

IT News

MACOS LPE EXPLOIT GIVES ATTACKERS ROOT ACCESS

January 9, 2018 By aatech

A researcher that goes by the handle “Siguza” released details of a local privilege escalation attack against macOS that dates back to 2002. A successful attack could give adversaries complete root access to targeted systems. Siguza released details of the attack on Dec. 31 via Twitter, wishing followers a “Happy New Year” and linked to […]

IT News

GOOGLE PLAY REMOVES 22 MALICIOUS ‘LIGHTSOUT’ APPS FROM MARKETPLACE

January 8, 2018 By aatech

Nearly two dozen Android flashlight and related utility apps were removed from the Google Play marketplace after researchers found a malicious advertising component dubbed “LightsOut” inside them. In total, the apps were downloaded between 1.5 and 7.5 million times. Security researchers at Check Point researcher discovered the family of malicious apps that “generated illegal ad […]

IT News

VMWARE ISSUES 3 CRITICAL PATCHES FOR VSPHERE DATA PROTECTION

January 7, 2018 By aatech

VMware, a Dell Technologies subsidiary, released several patches Tuesday fixing critical vulnerabilities affecting its vSphere cloud computing virtualization platform. The bugs address three vulnerabilities in VMware’s vSphere Data Protection (VDP), a backup and recovery solution used with its vSphere platform. According to the company, a remote attacker could exploit the vulnerabilities and take control of […]

IT News

APPLE RELEASES SPECTRE PATCHES FOR SAFARI, MACOS AND IOS

January 6, 2018 By aatech

Apple released iOS 11.2.2 software Monday for iPhones, iPads and iPod touch models that patch for the Spectre vulnerabilities. A macOS High Sierra 10.13.2 supplemental update was also released to bolster Spectre defenses in Apple’s Safari browser and WebKit, the web browser engine used by Safari, Mail, and App Store. This is the second update […]

Latest Cybersecurity News from the World

IT News

DEVELOPERS TARGETED IN ‘PARSEDROID’ POC ATTACK

January 5, 2018 By aatech

Researchers have developed a proof of concept attack that could impact the millions of users of integrated development environments such as Intellij, Eclipse and Android Studio. Attacks can also be carried out against servers hosting development environments in the cloud. The attack vector was identified by the Check Point Research Team, which on Tuesday released […]

IT News

How to patch Spectre Vulnerability CVE-2017-5753/CVE-2017-5715 on Linux

January 5, 2018 By aatech

A very serious security problem has been found in the Intel/AMD/ARM CPUs. Spectre CPU Vulnerability CVE-2017-5753/CVE-2017-5715 breaks the isolation between different applications. It allows an attacker to trick error-free programs, which follow best practices, into leaking their secrets. In fact, the safety checks of said best practices actually increase the attack surface and may make […]

IT News

How to patch Meltdown CPU Vulnerability CVE-2017-5754 on Linux

January 5, 2018 By aatech

A very serious security problem has been found in the Intel CPUs. Meltdown CPU Vulnerability CVE-2017-5754 breaks the most fundamental isolation between user applications and the operating system. This attack allows a program to access the memory, and thus also the secrets, of other programs and the operating system. How do I protect my Linux […]

IT News

Researchers Found Two Major Security Flaws In Processors That Affect Most Of The World’s Computers

January 5, 2018 By aatech

The two flaws, nicknamed Meltdown and Spectre, could give hackers access to the entire memory of nearly all the world’s computers. Cybersecurity researchers have discovered two flaws in microprocessors that could grant hackers access to the entire memory stored on practically any computer in the world. On a website created to explain the flaws, researchers […]

IT News

RAT DISTRIBUTED VIA GOOGLE DRIVE TARGETS EAST ASIA

January 4, 2018 By aatech

Researchers said that they are tracking a new remote access Trojan dubbed UBoatRAT that is targeting individuals or organizations linked to South Korea or the video game industry. While targets aren’t 100 percent clear, researchers at Palo Alto Networks Unit 42 said UBoatRAT threats are evolving and new variants are increasingly growing more sophisticated. They […]

IT News

TEAMVIEWER RUSHES FIX FOR PERMISSIONS BUG

January 3, 2018 By aatech

Remote support software company TeamViewer said Tuesday it issued a hotfix for a bug that allows users sharing a desktop session to gain control of the other’s computer without permission. The bug was first publicized by a Reddit user “xpl0yt” on Monday who linked to a proof-of-concept example of a vulnerability created by the bug […]