Innehållsförteckning för June 2024 från Hackercool Magazine

All rights reserved. No part of this publication may be reproduced, distributed, or transmitted in any form or by any means, including photocopying, recording, or other electronic or mechanical methods, without the prior written permission of the publisher, except in the case of brief quotations embodied in critical reviews and certain other noncommercial uses permitted by copyright law. For permission requests, write to the publisher, addressed “Attention: Permissions Coordinator,” at the address below. Any references to historical events, real people, or real places are used fictitiously. Names, characters, and places are products of the author’s imagination. Hackercool Cybersecurity (OPC) Pvt Ltd. Banjara Hills, Hyderabad 500034 Telangana, India. Website: www.hackercoolmagazine.com Email Address: admin@hackercoolmagazine.com…

In this month’s vulnerability for beginners, keeping in line with the latest trends of vulnerabilities being detected in processors and components of processors, researchers of supply chain security firm Eclypsium disclosed a vulnerability with a reported CVSS rating of 7.5 in the UEFI firmware designed by Phoenix Technologies. Where is this firmware used? This firmware runs on multiple families of Intel Core Desktop and mobile processors. Now, you can pay with Direct Bank transfer and cards along with PayPal while renewing or subscribing to Hackercool Magazine What is the actual vulnerability? The vulnerability is a buffer overflow vulnerability due to use of an unsafe variable in the Trusted platform Module (TPM) configuration. A trusted platform module is a physical or embedded security technology that is used to store critical information…

Recently two security vulnerabilities have been disclosed in open source mail server called MailCow mail server. Mail Cow is a Docker based email server. Where it is used? MailCow, like any other mail server is used inside the network of organizations who prefer their own mail server. This is used to send and receive emails. What are the vulnerabilities? Two vulnerabilities were disclosed in all versions of MailCow mail server prior to version 2024-04. This version was released on April 4, 2024. But the vulnerabilities are rated moderate. Let’s learn about each of them. 1)CVE-2024-30270 (CVSS score: 6.7) This is a directory traversal vulnerability that could result in the execution of arbitrary commands on the mail server by the attackers. 2) CVE-2024-31 204 (CVSS score: 6.8) This is a Cross…

Alan Woodward Professor, Department of Computer Science, University of Surrey A major IT outage has hit businesses across the world, grounding planes as well as affecting banks and the healthcare sector. George Kurtz, CEO of IT security firm Crowdstrike, said it had traced the issue to a “defect found in a single content update” for the security software it provides for the Microsoft Windows operating system on computers. Microsoft said the issue was caused by an “update from a third-party software platform” and that the “underlying cause” had now been fixed. The Conversation’s Paul Rincon spoke to Professor Alan Woodward, an expert in cybersecurity at the University of Surrey, about what went wrong and how the problem could be resolved. Can you explain what’s happened here? I think there are…

Kevin Saric Computer Scientist & Mechatronic Engineer, CSIRO Our latest research has found that clickable links on websites can often be redirected to malicious destinations. We call these “hijackable hyperlinks” and have found them by the millions across the whole of the web, including on trusted websites. Our paper, published at the 2024 Wb Conference, shows that cybersecurity threats on the web can be exploited at a drastically greater scale than previously thought. Concerningly, we found these hijackable hyperlinks on the websites of large companies, religious organisations, financial firms and even governments. The hyperlinks on these websites can be hijacked without triggering any alarms. Only vigilant – some might say paranoid – users would avoid falling into these traps. If we were able to find these vulnerabilities across the web,…