Second report in series provides mitigation options for 18 possible risks surrounding integration of application containers into trustworthy, secure systemsSEATTLE – July 26, 2019 – The Cloud Security Alliance (CSA), the world’s leading organization dedicated to defining standards, certifications and best practices to help ensure a secure cloud computing environment, today released Best Practices for Implementing a Secure Application Container Architecture. Produced by the CSA’s Application C...
from Cloud Security Alliance Blog https://ift.tt/2yhBim8
Friday, July 26, 2019
Vuln: Qualcomm Components CVE-2019-2307 Integer Underflow Vulnerability
Qualcomm Components are prone to an integer-underflow vulnerability because they fail to sufficiently validate an integer value.
Attackers can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploits may result in denial-of-service conditions.
This issue is being tracked by Android Bug ID A-129850941.
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: vuldb@securityfocus.com.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
| Bugtraq ID: | 109383 |
| Class: | Boundary Condition Error |
| CVE: | CVE-2019-2307 |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 26 2019 12:00AM |
| Updated: | Jul 26 2019 12:00AM |
| Credit: | The vendor reported this issue. |
| Vulnerable: | Google Pixel XL 0 Google Pixel C 0 Google Pixel 0 Google Nexus Player 0 Google Nexus 9 Google Nexus 6P Google Nexus 6 Google Nexus 5X Google Android 0 |
| Not Vulnerable: | |
References:
- Qualcomm Homepage (Qualcomm)
- Android Security Bulletinâ??July 2019 (Google)
- July 2019 Code Aurora Security Bulletin (Code Aurora)
from SecurityFocus Vulnerabilities https://ift.tt/333ETCO
Ransomware Attack Caused Power Outages in the Biggest South African City
Yesterday, some residents of Johannesburg, the largest city in South Africa, were left without electricity after the city's power company got attacked by a ransomware virus.
City Power, the company responsible for powering South Africa's financial capital Johannesburg,
confirmedThursday on Twitter that it had been hit by a Ransomware virus that had encrypted all of its databases, applications, and network.
The attack prevented prepaid customers from buying electricity units, upload invoices when making payments, or access the City Power's official website, eventually leaving them without power.
"Please note that the virus hit us early Thursday morning, compromising our database and other software, impacting most of our applications and networks," the city government said in a
tweet.
However, the company has also ensured its customers that none of their details were compromised in the cyber attack.
At the time of writing, the company confirmed they have restored electricity supply in many areas and also most of the critical applications, including the prepaid vending system responsible for enabling its customers to buy electricity.
However, customers seeking to access the City Power website to log faults are still not able to do so. They are requested to log calls by their mobile phones using citypower.mobi.
Depending on the type and severity of the cyberattack, it is believed that the complete clean up of the affected services and networks could take weeks.
Also, it could cost millions of dollars—just like the
City of Baltimorerecently
spent $5,310,546in hiring security consultant firms and upgrading its infrastructure following a ransomware attack that shut down the majority of its servers.
The city government did not provide any details on the type of ransomware virus that hit the power company, or if the company has a backup for critical files encrypted by the malware.
"Customers should not panic as none of their details were compromised," the city government
saidThursday afternoon. "We apologize for the inconvenience caused to the people of the City of Joburg. Please be patient with us, and we expect to have everything back in order by the end of Thursday."
Johannesburg is not the only one that was recently hit by a ransomware attack. A growing number of cities has targeted in the last few months with ransomware as cybercriminals aim municipalities around the world.
Last month,
ransomware viruses hit two cities in Floridathat made large ransom payments to gain back access to city files that were encrypted in the attacks—these cities include Riviera Beach City ($600,000) and Lake City ($500,000) in Florida.
However, federal authorities and cybersecurity experts have always advised victims not to pay ransoms since it encourages criminals, and also there's no guarantee of files or computer systems being completely restored.
Instead of paying the ransom, organizations and companies should consider having robust backups of their important and required files and data in place as well as educating their employees to avoid being a victim of such cyber attacks.
from The Hacker News https://ift.tt/32RHK1t
Subscribe to:
Posts (Atom)