Home » vulnerability

Patched GIF Processing Vulnerability CVE-2019-11932 Still Afflicts Multiple Mobile Apps

Posted on:November 25, 2019 at 5:00 am
Posted in:Mobile, Vulnerabilities
Author:
Trend Micro

CVE-2019-11932, which is a vulnerability in WhatsApp for Android, was first disclosed to the public on October 2, 2019 after a researcher named Awakened discovered that attackers could use maliciously crafted GIF files to allow remote code execution. The vulnerability was patched with version 2.19.244 of WhatsApp, but the underlying problem lies in the library called libpl_droidsonroids_gif.so, which is part of the android-gif-drawable package. While this flaw has also been patched, many applications still use the older version and remain at risk.

Posted on:July 16, 2019 at 5:01 am
Posted in:Malware, Vulnerabilities
Author:
Trend Micro

We discovered a new version of SLUB delivered via another unique watering hole website. This malicious site used CVE-2019-0752, an Internet Explorer vulnerability discovered by Trend Micro’s Zero Day Initiative (ZDI) that was just patched this April. This is the first time we found this exploit used in the wild. This new version of the SLUB malware has stopped using GitHub as a way to communicate, heavily using Slack instead via two free workspaces.

Posted on:June 10, 2019 at 12:15 am
Posted in:Malware, Vulnerabilities
Author:
Trend Micro

We found cryptocurrency-mining activity that involves the exploitation of the Oracle WebLogic server vulnerability CVE-2019-2725 with the interesting behavior of using certificate files as an obfuscation tactic.

Posted on:January 25, 2019 at 5:00 am
Posted in:Botnets, Exploits, Open source, Vulnerabilities
Author:
Trend Micro

We found a new Mirai variant we’ve called Yowai and Gafgyt variant Hakai abusing a ThinkPHP flaw for propagation and DDoS attacks.

Posted on:August 15, 2018 at 5:01 am
Posted in:Vulnerabilities
Author:
Trend Micro

We discovered a high-risk Internet Explorer (IE) vulnerability in the wild on July 11, just a day after Microsoft’s July Patch Tuesday. We immediately sent Microsoft the details to help fix this flaw. While this vulnerability, now designated as CVE-2018-8373, affects the VBScript engine in the latest versions of Windows, Internet Explorer 11 is not vulnerable since VBScript in Windows 10 Redstone 3 (RS3) has been effectively disabled by default.

Page 1 of 2312 › »

Patched GIF Processing Vulnerability CVE-2019-11932 Still Afflicts Multiple Mobile Apps

SLUB Gets Rid of GitHub, Intensifies Slack Use

CVE-2019-2725 Exploited and Certificate Files Used for Obfuscation to Deliver Monero Miner

ThinkPHP Vulnerability Abused by Botnets Hakai and Yowai

Use-after-free (UAF) Vulnerability CVE-2018-8373 in VBScript Engine Affects Internet Explorer to Run Shellcode

Security Predictions for 2020

Business Process Compromise

Stay Updated

Patched GIF Processing Vulnerability CVE-2019-11932 Still Afflicts Multiple Mobile Apps

SLUB Gets Rid of GitHub, Intensifies Slack Use

CVE-2019-2725 Exploited and Certificate Files Used for Obfuscation to Deliver Monero Miner

ThinkPHP Vulnerability Abused by Botnets Hakai and Yowai

Use-after-free (UAF) Vulnerability CVE-2018-8373 in VBScript Engine Affects Internet Explorer to Run Shellcode

Security Predictions for 2020

Business Process Compromise

Popular Posts

Stay Updated