Adobe Substance 3D Stager Let Attacker Execute Arbitrary Code

andreasc
-
0
Adobe Substance 3D Stager Let Attacker Execute Arbitrary Code
[ad_1]

Adobe has released a security update that fixes “Important-severity” vulnerabilities in its Substance 3D Stager product. The successful exploitation of these issues could result in a memory leak and arbitrary code execution in the current user’s context.

Adobe Substance 3D Stager is a cutting-edge staging tool for creating 3D scenes using real-time 3D visualization and high-quality renderings.

At the time of release, none of the flaws that Adobe patched this month were known to the public or targeted by active attacks. These upgrades have a deployment priority rating of 3, according to Adobe. 

Document
Free Webinar

Compounding the problem are zero-day vulnerabilities like the MOVEit SQLi, Zimbra XSS, and 300+ such vulnerabilities that get discovered each month. Delays in fixing these vulnerabilities lead to compliance issues, these delay can be minimized with a unique feature on AppTrana that helps you to get “Zero vulnerability report” within 72 hours.

Vulnerabilities Addressed

Six security vulnerabilities in Adobe’s Substance 3D Stager product have been patched, such as:

The Out-of-bounds Read categories CVE-2024-20710, CVE-2024-20711, CVE-2024-20712, CVE-2024-20714, and CVE-2024-20715 have a severity rating of “Important” with a CVSS base score of 5.5.

These vulnerabilities enable a remote attacker to obtain access to potentially sensitive information.

The vulnerability exists because of a boundary condition. A remote attacker can generate a specially crafted file, mislead the victim into opening it, cause an out-of-bounds read error, and read memory from the system.

The CVE-2024-20713 with Improper Input Validation category has a CVSS base score of 5.5, allowing a remote attacker to access the compromised machine.

The insufficient validation of user-supplied input is the cause of the vulnerability. A remote attacker can take control of the system and run arbitrary code by tricking the user into opening a maliciously created file.

Vulnerability CategoryVulnerability ImpactSeverityCVSS base score CVE Numbers 
Out-of-bounds Read (CWE-125)Memory leakImportant5.5CVE-2024-20710
Out-of-bounds Read (CWE-125)Memory leakImportant5.5CVE-2024-20711
Out-of-bounds Read (CWE-125)Memory leakImportant5.5CVE-2024-20712
Improper Input Validation (CWE-20)Arbitrary code executionImportant5.5CVE-2024-20713
Out-of-bounds Read (CWE-125)Memory leakImportant5.5CVE-2024-20714
Out-of-bounds Read (CWE-125)Memory leakImportant5.5CVE-2024-20715

Affected Versions

Adobe Substance 3D Stager 2.1.3 and earlier versions

Platforms: Windows and macOS

Update Now

Upgrade to the Substance 3D Stager version 2.1.4

“Adobe categorizes these updates with the following priority ratings and recommends users update their installation to the newest version via the Creative Cloud desktop app’s update mechanism,” the company said.

Try Kelltron’s cost-effective penetration testing services for free to assess and evaluate the security posture of digital systems


[ad_2]
Source link

Samsung reseller confirms Galaxy Xcover 7 specs and price

andreasc
-
0
Samsung reseller confirms Galaxy Xcover 7 specs and price
[ad_1]

Last week, we took a closer look at the Galaxy Xcover 7’s design courtesy of official renders leaked exclusively by us. While Samsung has yet to announce the new rugged phone, one of its retail partners has acted prematurely. A Samsung-branded reseller in the Czech Republic listed the device on its website with key specs, images, and price. The phone is available for purchase, though.

Galaxy Xcover 7 specs and price revealed by a Samsung partner

The premature listing on Samsung‘s partner site has multiple images of the Galaxy Xcover 7, showing it from all angles. As we revealed in our exclusive leak, the device sports a sturdy and rugged design with a user-removable back cover. Bezels are expectedly chunky, while edges appear slightly raised for added protection. The default wallpaper is inspired by the Galaxy S23.

The phone has one camera each on the front and back with a dual-LED flash on the back. The power and volume buttons are on the right side while a customizable Action Key sits on the left. The bottom has a speaker grille, a microphone hole, a USB Type-C port, and Pogo pin connectors for charging. We can see a secondary microphone and a 3.5mm headphone jack at the top.

Coming to the specs, the Samsung reseller confirmed that the Galaxy Xcover 7 will feature a 6.6-inch display with an FHD+ (1080 x 2408 pixels) resolution. Further details are not available but it could be an LCD panel with a 120Hz refresh rate. The front camera is a 5MP unit while the rear camera has a 50MP resolution. It might be the same 50MP camera found on the Galaxy Xcover 6 Pro, a premium rugged phone from 2022.

The upcoming model has the same IP68 dust and water resistance and military standard MIL-STD-810H durability. The device is powered by MediaTek’s Dimensity 6100+ chipset, a 5G-enabled SoC aimed at mid-range Android smartphones. It has a peak CPU speed of 2.2GHz. Samsung will pair the chipset with 6GB of RAM and 128GB of storage. The Galaxy Xcover 7 will run Android 14 out of the box.

The new rugged phone is relatively affordable

The Galaxy Xcover 7 is listed with a price tag of 8,999 Czech Koruna (CZK), which is equivalent to $400 or €465. The pricing is in line with previous leaks. Samsung sold the Galaxy Xcover 6 Pro at €599, so the new model is substantially more affordable. The company might be planning to launch it in the next few weeks. The device may arrive alongside the Galaxy Tab Active 5, a new rugged Android tablet.

Samsung Galaxy Xcover 7 official renders retailer leak 7


[ad_2]
Source link

Wi-Fi 7 is here with major speed and efficiency upgrades

andreasc
-
0
Wi-Fi 7 is here with major speed and efficiency upgrades
[ad_1]

The long-awaited official launch of Wi-Fi 7 has finally happened, marking a significant leap forward in wireless connectivity. The Wi-Fi Alliance has announced that it is now ready to certify products with the final Wi-Fi 7 standard. Existing devices that support Wi-Fi 7 currently use a draft version of the standard and will likely receive a firmware update in the coming months.

The new wireless tech is official with faster speeds and lower latency

Wi-Fi 7, identified by the IEEE standard 802.11be, is a major upgrade over Wi-Fi 6 and Wi-Fi 6E. The latter two are essentially the same, with the only difference being the addition of a third 6GHz frequency band on 6E. It makes for less network congestion, improving the speed of short-range connections. The overall peak speeds and other specs are the same between the two 6th-gen Wi-Fi standards.

The new standard, meanwhile, brings a generational leap in almost every aspect of wireless internet technology. For starters, Wi-Fi 7 promises a theoretical peak speed of 46Gbps, five times higher than Wi-Fi 6’s 9.6Gbps. While practical speeds are much lower than that, you get the gist. Wi-Fi 7 enables significantly higher throughput, data transmission rates, and efficiency, among other things.

The addition of a 320Hz channel bandwidth brings two times higher throughput over Wi-Fi 6’s 160Hz maximum bandwidth. MLO or multi-link operation support allows devices to send and receive data simultaneously over multiple frequency bands and channels. This reduces connection interference and latency while improving the throughput and reliability of the network.

Wi-Fi 7 also quadruples QAM (quadrature amplitude modulation) from 1024 QAM to 4096 QAM. According to the Wi-Fi Alliance, this allows for 20% higher transmission rates. Other highlights include improved network efficiency and transmission overhead, enhanced spectral efficiency, optimized triggered uplink access, and a seamless National Security & Emergency Preparedness (NSEP) service experience.

Wi Fi 7 official specs and features

Wi-Fi 7 adoption to grow over nine times in the next four years

With the final standard now available, Wi-Fi 7 adoption is projected to grow exponentially over the next few years. There are already many routers and devices in the market with Wi-Fi 7 support. The iQOO 12, which we reviewed recently, boasts the next-gen wireless technology. Samsung’s upcoming Galaxy S24 Ultra is also expected to feature Wi-Fi 7.

The Wi-Fi Alliance estimated the number of Wi-Fi 7-enabled devices to cross 233 million by the end of this year. It expects the volume to grow over nine times in the next four years, reaching 2.1 billion devices by 2028. As the new wireless technology arrives on more devices around us, the faster our connected device ecosystem will get. As the Alliance puts it, Wi-Fi 7 will “fast-track the future of connectivity across home, enterprise, and industrial environments.”


[ad_2]
Source link

Samsung may not bring all Galaxy S24 AI features to older models

andreasc
-
0
Samsung may not bring all Galaxy S24 AI features to older models
[ad_1]

Samsung will introduce some groundbreaking new AI features with the Galaxy S24 series next week. The upcoming flagships can translate audio calls in real time, expand photos, move or remove objects from photos and videos, and do much more. These features are part of Galaxy AI in One UI 6.1, the company’s updated custom software. While older Galaxy models will receive the One UI 6.1 update, they may not get all new AI features.

Older Galaxy flagships to miss out on most new Galaxy AI features

New Galaxy flagships usually debut an updated version of Samsung’s One UI. Last year, the Galaxy S23 series introduced One UI 5.1, while the Galaxy Z Fold 5 and Galaxy Z Flip 5 brought One UI 5.1.1. The Galaxy S24 lineup will ship with One UI 6.1. The Korean firm pushes the new versions to older models a few weeks after release. It will be no different this time around, as there is already evidence of Samsung testing One UI 6.1 for several devices.

However, unlike in the past, most of the new features of One UI 6.1 may not make it into the likes of the Galaxy S23 and others. Particularly the new AI features that Samsung has developed for the Galaxy S24. Sources have told SamMobile that the company will only port a select few AI features to older models. The publications can’t confirm the features that are coming, but it appears most will remain exclusive to the new flagships.

This is likely due to the limitations of the chips powering the Galaxy S23, Galaxy Z Fold 5, Galaxy Z Flip 5, and other Samsung phones that will receive One UI 6.1. The Exynos 2400 and Snapdragon 8 Gen 3 processors for the Galaxy S24 have superior AI processing capabilities thanks to improved NPU and other changes. They are built with the next generation of mobile AI applications in mind. Older chips may not be capable of handling some new AI features.

Galaxy AI doesn’t completely work offline

While Samsung has built Galaxy AI into the Galaxy S24’s system, some features don’t work offline. For example, the new AI-powered photo and video editing tools work via the cloud and require an active internet connection. Leaks have also suggested that users will get the option to select their generative AI model for some tasks. The options include ChatGPT and Samsung’s in-house solution powered by Samsung Gauss. The Galaxy S24 series arrives on January 17, so it won’t be long before we have all the official details.


[ad_2]
Source link

Samsung wows CES 2024 attendees with transparent MicroLED display

andreasc
-
0
Samsung wows CES 2024 attendees with transparent MicroLED display
[ad_1]

Samsung brought something truly unique to CES 2024 in Las Vegas. Samsung showed off its transparent MicroLED display. This is also a world’s first, it seems.

Samsung grabbed plenty of attention with its transparent MicroLED display

Samsung actually placed this display next to its transparent OLED and Transparent LCD models, just to highlight the difference here, and how much better the MicroLED tech is. The MicroLED is significantly brighter, but it also has a fully frameless design and a transparent glass panel. It looks truly unique.

As long as you’re not looking at this display from the side, the content on it looks like a hologram. That’s at least what my colleague told me after seeing this technology with his own eyes. You can actually see it for yourself below the article, as Samsung’s video has been embedded.

When it comes to thickness, it measures only around 1cm

To make things even better, the TV itself is only about a centimeter thick. In other words, it’s really thin. All that helps make the content look like it’s just floating in the air. You can achieve the effect of a hologram with this.

If you’ve been looking forward to getting this display, perhaps, don’t. Why? Well, Samsung’s current-gen MicroLED TVs are unbelievably pricey. A model from 2022 with a 110-inch display costs $150,000. Just to be clear, that’s a regular MicroLED TV, not a transparent one.

It is not available yet, but if it does, it’ll be extremely expensive

So, if these transparent MicroLED TVs ever become available, they’ll be extremely expensive. With time, chances are they’ll become cheaper and cheaper, but don’t hold your breath. It will take quite some time for that to happen.

That’s all the info that we could muster thus far. So, to sum up. This is a transparent, frameless TV that is considerably brighter than its OLED and LCD brethren. Considering that it’s brighter, it will be less impacted by ambient light. That’s also something Samsung emphasized. It will be interesting to see a truly premium price tag for this TV, that’s for sure.


[ad_2]
Source link

Soon, you’ll be able to paint your WhatsApp any color you like, so long it’s green, blue, white, pink or purple

andreasc
-
0
Soon, you’ll be able to paint your WhatsApp any color you like, so long it’s green, blue, white, pink or purple
[ad_1]
The latest WhatsApp beta for iOS 24.1.10.70 hints there’ll be a fussless way for users to change the WhatsApp theme and choose between five distinct colors:
  1. Green
  2. Blue
  3. White (not snow-white, so your eyeballs wouldn’t burst)
  4. Pink
  5. Purple

This is the latest report from the super-informative WABetaInfo platform and while they’re positive the theme-picking feature will be available in the future, it’s not specified when it’s going to be rolled out to the masses.Back when the WhatsApp beta for iOS 23.21.1.70 update was a thing, WABetaInfo shared that it was about to bring a new interface for the app with new colors and icons. The update introduced a new green tint color, but not everybody was on board with it and they preferred the familiar old blue color. That’s why now the engineers are working on multiple colors, not just the green-or-blue option.

Per the screenshot, WhatsApp will eventually introduce a new section where choosing between green, blue, white (kind of), pink, and purple as a main branding color will be possible.

With a set of five available options, users can select a main branding color that “resonates with their personality or simply makes the app more visually appealing to them”, states the report and adds that “another key advantage is the potential for improved accessibility”. For example, for certain users with visual impairments or specific color preferences based on personal comfort, the ability to change the main branding color can make the app definitely more user-friendly.

What’s more, WABetaInfo even has some information about the distant future: “WhatsApp might have plans to expand this customization feature by introducing the ability to change the bubble color in the distant future. In our opinion, this move will take personalization to a whole new level, allowing users to infuse their digital conversations with a touch of their unique style”.


[ad_2]
Source link

Water Curupira Hackers Launch Pikabot Malware Attack Windows

andreasc
-
0
Water Curupira Hackers Launch Pikabot Malware Attack Windows
[ad_1]

Pikabot is a loader malware that is active in spam campaigns and has been used by the threat group Water Curupira, which has been paused from June to September 2023 after Qakbot’s takedown. 

However, the surge in Pikabot phishing campaigns was noted recently in Q4 2023, post-Qakbot’s takedown, suggesting it is a potential replacement.

Recently, the cybersecurity researchers at Trend Micro discovered that Water Curupira hackers have been actively launching Pikabot Malware attacks on Windows machines.

Document
Free Webinar

Compounding the problem are zero-day vulnerabilities like the MOVEit SQLi, Zimbra XSS, and 300+ such vulnerabilities that get discovered each month. Delays in fixing these vulnerabilities lead to compliance issues, these delay can be minimized with a unique feature on AppTrana that helps you to get “Zero vulnerability report” within 72 hours.

Water Curupira Hackers Pikabot Malware

The phishing operations of Pikabot deploy the following two key things for unauthorized remote access:-

Water Curupira, which is known for Cobalt Strike backdoors, has shifted exclusively to Pikabot post-DarkGate and IcedID campaigns in Q3 2023. 

The Pikabot malware gains initial access via spam emails, mirroring Qakbot’s behavior.

Infection chain
Infection chain (Source – Trend Micro)

Threat actors use thread-hijacking in emails to mimic legitimate threads for deception. They craft messages with original content in which they urge recipients to open the following types of attachments, with varying file names and passwords:-

  • Password-protected ZIP
  • Password-protected PDF 

All the emails appear authentic, increasing the likelihood of victims interacting with malicious links or attachments.

The attached archive holds an obfuscated JS file that is more than 100 KB in size, when executed it attempts conditional commands via cmd.exe. 

If it is unsuccessful, the script echoes, pings, and downloads the Pikabot payload using Curl.exe. Another chain deploys password-protected archives with an IMG file that executes the LNK file, which triggers the rundll32.exe to run Pikabot DLL. 

The PDF-based attack in Q4 2023 tricks victims with OneDrive disguise, delivering malicious JS files. The latter variant employs array manipulation and obfuscation for Pikabot payload retrieval using the following things:-

  • Multiple URLs
  • Dynamic directory creation
Malicious PDF file disguised to look like a OneDrive attachment
Malicious PDF file disguised to look like a OneDrive attachment (Source – Trend Micro)

Security analysis of the DLL file reveals a 32-bit sample with 1515 exports. The ‘Limit’ export decrypts and executes shellcode, which checks for debugging with Windows API calls. 

The shellcode decrypts another DLL for anti-analysis routines and loads encrypted PNG images containing the core module. The Pikabot injects the core module into a suspended process using indirect system calls and resolves necessary APIs through hash values after decryption. 

While the runtime decryption of strings and language checks are performed before execution stops for specific system languages like:-

  • Russian (Russia)
  • Ukrainian (Ukraine)

Here below, we have mentioned all the processes created by the malware to gather additional information:-

  • whoami.exe /all
  • ipconfig.exe /all
  • netstat.exe -aon

Water Curupira shifts to Pikabot by dropping backdoors like Cobalt Strike, which is linked to Black Basta ransomware. 

The clusters of Cobalt Strike beacons and more than 70 C&C domains that are observed in campaigns by this threat actor show the association with dangerous ransomware, Black Basta.

Recommendations

Here below we have mentioned all the recommendations:-

  • Make sure to hover over links to check their destination.
  • Always verify the sender’s identity.
  • Confirm the legitimacy of emails from known companies before opening attachments.
  • Always keep the OS and software updated with the latest updates or patches.
  • Back up crucial data regularly to an external and secure location.

IoCs

IoCs (Source - Trend Micro)
IoCs (Source – Trend Micro)
IoCs-1 (Source - Trend Micro)
IoCs-1 (Source – Trend Micro)
IoCs-2
IoCs-2 (Source – Trend Micro)
IoCs-3 (Source - Trend Micro)
IoCs-3 (Source – Trend Micro)

Try Kelltron’s cost-effective penetration testing services for free to assess and evaluate the security posture of digital systems


[ad_2]
Source link

Huawei P70 series could include all-new Kirin 9010 SoC

andreasc
-
0
Huawei P70 series could include all-new Kirin 9010 SoC
[ad_1]

Huawei’s upcoming flagships could include an all-new processor. I’m talking about the Huawei P70 series smartphones, of course, and the chip in question is the Kirin 9010.

This information comes from a Chinese tipster that goes by the name ‘Smart PIkachu’. He shared the information via Weibo. The tipster believes Huawei won’t use the Kirin 9000s inside its new flagships.

The upcoming Huawei P70 smartphones could utilize an all-new Kirin 9010 processor

The thing is, the Kirin 9010 could be just a modified version of the Kirin 9000s. The naming schemes are way too similar for it to be on a completely new level. At this point, we can only guess, though.

The Kirin 9000s is a 7nm processor, and it fuels the Huawei Mate 60 flagship series. It also comes inside the Huawei Mate X5 book-style foldable that Huawei announced in its home market.

We still didn’t see the Kirin 9000s outside of China. So all eyes will be focused on the Huawei P70 series once it arrives. The launch of the Kirin 9000s managed to surprise pretty much everyone, and the US will be paying special attention to the Huawei P70 launch.

The company is expected to announce three smartphones as part of its flagship series

That being said, if the company ends up following last year’s lineup, we’ll get three phones. The Huawei P70, P70 Pro, and P70 Art are expected to launch.

As a reminder, the Huawei P60 series became official towards the end of March last year. Their global launch followed in May last year. So, Huawei will either stick to a similar release cycle or use MWC 2024 at the end of February to showcase its new flagships. That’s always a possibility.

We have great expectations for the Huawei P70 series camera. That especially goes for the Huawei P70 Pro and Huawei P70 Art. Huawei will allegedly use a much better ultrawide camera this time around, and the camera hardware is expected to become better in general.

Huawei’s smartphones are still at the top of the food chain. Huawei’s last flagships are actually using a 10-stop variable aperture setup. Something similar is expected with the Huawei P70 too, actually.


[ad_2]
Source link

Microsoft Rolls Out January Patch Tuesday With 49 Bug Fixes

andreasc
-
0
Microsoft Rolls Out January Patch Tuesday With 49 Bug Fixes
[ad_1]

This week marked the arrival of first monthly scheduled updates from Microsoft for the year 2024. With January Patch Tuesday update bundle, Microsoft addressed 49 different vulnerabilities, including two critical severity issues.

First Patch Tuesday Arrives From Microsoft For January 2024

The first update bundle for the year 2024 is a rather modest one, addressing 49 vulnerabilities only. Yet, it includes some significant security patches for users’ systems globally.

The most noteworthy mentions with January Patch Tuesday include two critical bug fixes. These include,

  • CVE-2024-20674 (CVSS 9.0): A security feature bypass affecting Windows Kerberos that allowed impersonation to an unauthenticated MiTM attacker. Exploiting the flaw merely required local network spoofing or MiTM attack and sending a maliciously crafted Kerberos message to the target machine.
  • CVE-2024-20700 (CVSS 7.8): A remote code execution vulnerability affecting Windows Hyper-V. Despite being an RCE, the vulnerability received a lesser severity score, presumably due to the requirements necessary to exploit the flaw. Microsoft stated in its advisory that exploiting this vulnerability required the attacker to gain access to the restricted network and win a race condition.

Another important mention that marginally escaped the critical severity category is CVE-2024-21318 (CVSS 8.8). The Redmond giant described it as an important severity remote code execution vulnerability affecting the Microsoft SharePoint Server. An authenticated attacker with Site Owner privileges could exploit the flaw to inject and execute arbitrary codes in the context of SharePoint Server.

Alongside these three and the other 46 important-severity vulnerabilities, this month’s update bundle also included four Chromium bug fixes. As described, all of these were remote code execution flaws that attained a high-severity rating. While not belonging to Microsoft, the tech giant still included these patches in its Patch Tuesday updates to ensure prompt patching for user devices.

Although the updates would reach all eligible systems automatically, users should still manually check their devices for the updates to receive the fixes in time.

Let us know your thoughts in the comments.


[ad_2]
Source link
1...541542543...1,482Page 542 of 1,482