YourAnonRiots ๐Ÿˆ๏ธ๐Ÿด๐Ÿ‡ต๐Ÿ‡ธ๐Ÿ‡ฒ๐Ÿ‡ฒ โ€” ๐Ÿšจ Alert - Popular #Android a...

Read on BlueSky


๐Ÿšจ Alert - Popular #Android apps like #Xiaomi File Manager and WPS Office are vulnerable to a path traversal flaw that could let hackers overwrite files and execute malicious code, leaving over 1.5 billion users exposed.

thehackernews.com/2024/05/popu...
#infosecurity

Popular Android Apps Like Xiaomi, WPS Office Vulnerable to File Overwrite Flaw

Popular apps like Xiaomi File Manager and WPS Office are vulnerable to a path traversal flaw that could let hackers overwrite files and execute malici

thehackernews.com

Similar Posts

InfoSec
InfoSec @infosec.skyfleet.blue

Popular Android Apps Like Xiaomi, WPS Office Vulnerable to File Overwrite Flaw

Popular Android Apps Like Xiaomi, WPS Office Vulnerable to File Overwrite Flaw

Popular apps like Xiaomi File Manager and WPS Office are vulnerable to a path traversal flaw that could let hackers overwrite files and execute malici

thehackernews.com
CyberTaters
CyberTaters @potato.software

Popular Android Apps Like Xiaomi, WPS Office Vulnerable to File Overwrite Flaw #potatosecurity #infosec #privacy #news themashernews.com/20...

InfoSec
InfoSec @infosec.skyfleet.blue

Path Traversal Vulnerability In Popular Android Apps Let Attackers Overwrite Files

Path Traversal Vulnerability In Popular Android Apps Let Attackers Overwrite Files

The reason why hackers aim at well-known Android applications is that many people use them, and this means that when they attack it can impact

cybersecuritynews.com
YourAnonRiots ๐Ÿˆ๏ธ๐Ÿด๐Ÿ‡ต๐Ÿ‡ธ๐Ÿ‡ฒ๐Ÿ‡ฒ
YourAnonRiots ๐Ÿˆ๏ธ๐Ÿด๐Ÿ‡ต๐Ÿ‡ธ๐Ÿ‡ฒ๐Ÿ‡ฒ @youranonriots.bsky.social


๐Ÿ”’ Malicious #Android apps are using the icons of well-known appsโ€”like Google, #WhatsApp, and #Instagramโ€”to deceive users into installing them and steal their credentials.

thehackernews.com/2024/05/mali...
#cybersecurity

Malicious Android Apps Pose as Google, Instagram, WhatsApp to Steal Credentials

Fake Android apps mimicking popular platforms like Google & WhatsApp are stealing user data.

thehackernews.com
070809
070809 @an0n.bsky.social

Alert: #Android users in India, beware! Hackers are distributing fake banking and government apps to steal sensitive data like bank info and personal details.
Read More: thehackernews.com/2023/11/mali...

Malicious Apps Disguised as Banks and Government Agencies Targeting Indian Android Users

๐Ÿ“ฑ Alert: Android users in India, beware! Hackers are distributing fake banking and government apps to steal sensitive data like bank info and persona

thehackernews.com
ricardo
ricardo @governa.lol

#Xiaomi #Android Devices Hit by Multiple Flaws Across Apps and System Components โš ๏ธ
thehackernews.com/2024/05/xiao...

Xiaomi Android Devices Hit by Multiple Flaws Across Apps and System Components

Xiaomi devices running Android have been found to contain multiple security vulnerabilities in various apps and system components.

thehackernews.com
Vincent Zimmerman
Vincent Zimmerman @zimmermanv66.bsky.social

Malicious Android Apps Pose as Google, Instagram, WhatsApp to Steal Credentials thehackernews.com/2024/05/mali...

Malicious Android Apps Pose as Google, Instagram, WhatsApp to Steal Credentials

Fake Android apps mimicking popular platforms like Google & WhatsApp are stealing user data.

thehackernews.com
#TYDEN / #WEEKLY
#TYDEN / #WEEKLY @tyden.bsky.social

CISA urges software developers to remove Path Traversal vulnerabilities. Attackers can exploit path traversal vulnerabilities (also known as directory traversal) to create or overwrite critical files used to execute code or to bypass security mechanisms such as authentication. (Bleeping Computer)

CISA urges software devs to weed out path traversal vulnerabilities

โ€‹CISA and the FBI urged software companies today to review their products and eliminate path traversal security vulnerabilities before shipping.

www.bleepingcomputer.com
Betty C. Jung
Betty C. Jung @bettycjung.bsky.social

New Bluetooth Flaw Let Hackers Take Over Android, Linux, macOS, and iOS Devices thehackernews.com/2023/12/new-... via @TheHackersNews

New Bluetooth Flaw Let Hackers Take Over Android, Linux, macOS, and iOS Devices

A major Bluetooth security flaw, CVE-2023-45866 could allow threat actors to take control of Android, Linux, macOS, and iOS devices.

thehackernews.com
Betty C. Jung
Betty C. Jung @bettycjung.bsky.social

Malicious Android Apps Pose as Google, Instagram, WhatsApp to Steal Credentials thehackernews.com/2024/05/mali... via @TheHackersNews

Malicious Android Apps Pose as Google, Instagram, WhatsApp to Steal Credentials

Fake Android apps mimicking popular platforms like Google & WhatsApp are stealing user data.

thehackernews.com
ricardo
ricardo @governa.lol

Malicious Apps Disguised as Banks and Government Agencies Targeting Indian #Android Users
thehackernews.com/2023/11/mali...

Malicious Apps Disguised as Banks and Government Agencies Targeting Indian Android Users

๐Ÿ“ฑ Alert: Android users in India, beware! Hackers are distributing fake banking and government apps to steal sensitive data like bank info and persona

thehackernews.com
InfoSec
InfoSec @infosec.skyfleet.blue

Apple iTunes For Windows Flaw Let Attackers Execute Malicious Code

Apple iTunes For Windows Flaw Let Attackers Execute Malicious Code

A new arbitrary code execution vulnerability has been discovered in iTunes that could allow a threat actor to perform malicious activities

cybersecuritynews.com
r/cybersecurity
r/cybersecurity @cybersecurity.page

A new security flaw in Android allows hackers to take control of apps. Users are advised to uninstall potentially affected apps immediately.

r/cybersecurity

View discussion on Reddit.

reddit.com
YourAnonRiots ๐Ÿˆ๏ธ๐Ÿด๐Ÿ‡ต๐Ÿ‡ธ๐Ÿ‡ฒ๐Ÿ‡ฒ
YourAnonRiots ๐Ÿˆ๏ธ๐Ÿด๐Ÿ‡ต๐Ÿ‡ธ๐Ÿ‡ฒ๐Ÿ‡ฒ @youranonriots.bsky.social


A multi-faceted campaign is targeting #Android, macOS, and Windows users with various stealer #malware and banking trojans.
Find out how they're using fake profiles and repositories to trick users into downloading malicious files.

thehackernews.com/2024/05/cybe...
#cybersecurity

Cyber Criminals Exploit GitHub and FileZilla to Deliver Malware Cocktail

A multi-faceted campaign is targeting Android, macOS, and Windows users with various stealer malware and banking trojans.

thehackernews.com
เฆ…เฆฐเงเฆ˜เงเฆฏ ๐Ÿ ๐Ÿ“š ๐Ÿ’ป
เฆ…เฆฐเงเฆ˜เงเฆฏ ๐Ÿ ๐Ÿ“š ๐Ÿ’ป @stringsvsatoms.bsky.social

A multi-faceted campaign is targeting Android, macOS, and Windows users with various stealer malware and banking trojans.

Find out how they're using fake profiles and repositories to trick users into downloading malicious files.

Read: thehackernews.com/2024/05/cybe...

Cyber Criminals Exploit GitHub and FileZilla to Deliver Cocktail Malware

A multi-faceted campaign is targeting Android, macOS, and Windows users with various stealer malware and banking trojans.

thehackernews.com
YourAnonRiots ๐Ÿˆ๏ธ๐Ÿด๐Ÿ‡ต๐Ÿ‡ธ๐Ÿ‡ฒ๐Ÿ‡ฒ
YourAnonRiots ๐Ÿˆ๏ธ๐Ÿด๐Ÿ‡ต๐Ÿ‡ธ๐Ÿ‡ฒ๐Ÿ‡ฒ @youranonriots.bsky.social

Java & Android libraries vulnerable to new supply chain attack โ€” MavenGate!
Hackers can hijack popular abandoned libraries & inject #malware into your apps.
thehackernews.com/2024/01/hack...
#cybersecurity #hacking #technews

MavenGate Attack Could Let Hackers Hijack Java and Android via Abandoned Libraries

Java & Android Libraries Vulnerable: New "MavenGate" Attack Hijacks Apps! Hackers exploit abandoned libraries to inject malicious code

thehackernews.com
YourAnonRiots ๐Ÿˆ๏ธ๐Ÿด๐Ÿ‡ต๐Ÿ‡ธ๐Ÿ‡ฒ๐Ÿ‡ฒ
YourAnonRiots ๐Ÿˆ๏ธ๐Ÿด๐Ÿ‡ต๐Ÿ‡ธ๐Ÿ‡ฒ๐Ÿ‡ฒ @youranonriots.bsky.social

๐Ÿ›‘ Urgent: Patch it now - Hackers are exploiting it!
Fortinet has unveiled a critical security flaw in its SSL VPN, CVE-2024-21762, allowing hackers to execute arbitrary code.
thehackernews.com/2024/02/fort...
#cybersecurity #hacking #informationsecurity

Fortinet Warns of Critical FortiOS SSL VPN Flaw Likely Under Active Exploitation

Fortinet has unveiled a critical security flaw in its SSL VPN, CVE-2024-21762, allowing hackers to execute arbitrary code.

thehackernews.com
YourAnonRiots ๐Ÿˆ๏ธ๐Ÿด๐Ÿ‡ต๐Ÿ‡ธ๐Ÿ‡ฒ๐Ÿ‡ฒ
YourAnonRiots ๐Ÿˆ๏ธ๐Ÿด๐Ÿ‡ต๐Ÿ‡ธ๐Ÿ‡ฒ๐Ÿ‡ฒ @youranonriots.bsky.social

โš ๏ธ New PoC exploit for CVE-2023-46604 flaw in Apache ActiveMQ could let attackers stealthily execute malicious code.
CVSS score: 10.0! Are your servers secure?
thehackernews.com/2023/11/new-...
#cybersecurity #hacking

New PoC Exploit for Apache ActiveMQ Flaw Could Let Attackers Fly Under the Radar

New PoC exploit for CVE-2023-46604 flaw in Apache ActiveMQ could let attackers stealthily execute malicious code.

thehackernews.com
ricardo
ricardo @governa.lol

Popular Rust Crate liblzma-sys Compromised with #XZ Utils Backdoor Files
thehackernews.com/2024/04/popu...

Popular Rust Crate liblzma-sys Compromised with XZ Utils Backdoor Files

Malicious "test files" linked to the XZ Utils backdoor found in popular Rust crate liblzma-sys, downloaded over 21,000 times.

thehackernews.com
InfoSec
InfoSec @infosec.skyfleet.blue

Ivanti Endpoint Manager SQL Injection Flaw Let Attackers Execute Arbitrary Code

Ivanti Endpoint Manager SQL Injection Flaw Let Attackers Execute Arbitrary Code

Multiple SQL injection flaws have been discovered in Ivanti Endpoint Manager that could allow threat actors to perform multiple actions such

cybersecuritynews.com
InfoSec
InfoSec @infosec.skyfleet.blue

New Bluetooth Flaw Let Hackers Take Over Android, Linux, macOS, and iOS Devices

New Bluetooth Flaw Let Hackers Take Over Android, Linux, macOS, and iOS Devices

A major Bluetooth security flaw, CVE-2023-45866 could allow threat actors to take control of Android, Linux, macOS, and iOS devices.

thehackernews.com
ricardo
ricardo @governa.lol

Hackers Target #macOS Users with Malicious Ads Spreading Stealer Malware
thehackernews.com/2024/03/hack...

Hackers Target macOS Users with Malicious Ads Spreading Stealer Malware

Malicious ads and fake websites are spreading dangerous malware that can steal your passwords, cryptocurrency, and other sensitive data.

thehackernews.com
dervishe the grey
dervishe the grey @dervishe.bsky.social

"A successful exploit could allow the attacker to store malicious files on the system, execute arbitrary commands on the operating system, and elevate privileges to root."
thehackernews.com/2024/01/cisc...

Cisco Fixes High-Risk Vulnerability Impacting Unity Connection Software

Cisco patches a serious flaw in Unity Connection (CVE-2024-20272, CVSS 7.3). Don't let attackers compromise your system

thehackernews.com
InfoSec
InfoSec @infosec.skyfleet.blue

CVE-2024-23673: Apache Sling Servlets Resolver: Malicious code execution via path traversal

oss-sec: CVE-2024-23673: Apache Sling Servlets Resolver: Malicious code execution via path traversal

Posted by Carsten Ziegeler on Feb 06 Affected versions:

- Apache Sling Servlets Resolver before 2.11.0

Description:

Malicious code execution via path traversal in Apache Software Foundation Apache Sling Servlets Resolver.This issue
affects all version of Apache Sling Servlets Resolver before 2.11.0. However, whether a system is vulnerable to this
attack depends on the exact configuration of the system.
If the system is vulnerable, a user with write access to the repository...

seclists.org