PoC Code Surfaces to Exploit Apache Struts 2 Vulnerability
Researchers find proof-of-concept code that can take advantage of the recently identified Apache Struts framework (CVE-2018-11776) vulnerability.
Hacks
T-Mobile Alerts 2.3 Million Customers of Data Breach Tied to Leaky API
T-Mobile alerts millions of its customers to a breach of its website that resulted in subscriber names, zip codes, phone numbers, email addresses and account numbers being stolen.
Cheddar’s Restaurants Bitten By Credit-Card Breach
Restaurants in 23 states were compromised for two months.
DNC officials and Lookout believed a spoofed site was built to harvest authentication details for the Democratic voter database.
The DNC thwarts a phishing effort aimed at its voter database, days after Microsoft’s Fancy Bear disruption and Facebook’s efforts against Iranian propaganda.
An unpatched buffer overflow flaw allows remote attackers to completely take over the device and enter the home network.
Researchers launched a Proof-of-Concept attack on two Android mobile phones and an embedded system board.
The recently-patched flaw could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user.
A new email campaign includes a Microsoft Office Publisher file with malicious URLs leading to the FlawedAmmyy RAT.
The issue impacts several content management systems, including Typo3 and WordPress, as well as widely-used PDF generation library TCPDF.
