Day: June 4, 2024

U.S. announces a new $400 million package of weapons for Ukraine  PBS NewsHour

Give us 5 minutes, and we’ll give you the world. Around the clock, Voice of America keeps you in touch with the latest news. We bring you reports from our correspondents and interviews with newsmakers from across the world.

Researcher discovered several authorization bypass vulnerabilities in Cox modems that potentially impacted millions of devices.

The security researcher Sam Curry discovered multiple issues in Cox modems that could have been exploited to modify the settings of the vulnerable modem and run malicious commands on them.

Cox is the largest private broadband provider in the United States, the third-largest cable television provider, and the seventh-largest telephone carrier in the country. The company has millions of customers.

“This series of vulnerabilities demonstrated a way in which a fully external attacker with no prerequisites could’ve executed commands and modified the settings of millions of modems, accessed any business customer’s PII, and gained essentially the same permissions of an ISP support team.” wrote Curry.

Curry described a potential attack scenario where a threat actor could exploit exposed APIs to target Cox business customers.

The attack involves searching for a specific target using their identifiable information, such as name, phone number, email address, or account number. Upon finding a match, the attacker uses the returned UUID to query the API for the target’s full PII, including device MAC addresses, email, phone number, and physical address. With the hardware MAC address, the attacker can retrieve the WiFi password and a list of connected devices, allowing them to execute arbitrary commands, update device properties, and ultimately take over the victim’s account. This compromises the security of the target’s network and endangers their personal and business data.

The researchers reported the flaws on March 4, 2024, via the company’s responsible disclosure program. Cox addressed the vulnerabilities within 24 hours.

The company also investigated if the vulnerabilities had ever been exploited in attacks in the wild, however, they found no evidence of previous abuses.

“They had also informed me that they had no affiliation with the DigitalOcean IP address, meaning that the device had definitely been hacked, just not using the method disclosed in this blog post.” added Curry.

Pierluigi Paganini

Follow me on Twitter: @securityaffairs and Facebook and Mastodon

(SecurityAffairs – hacking, Cox modems)

Текущее Изменение Открытие Закрытие Дневной Дневной Годовой Годовой

значение к максимум минимум максимум минимум

закрытию,

%

Индекс доллара к 6 валютам :

104,12 0,077 104,03 104,04 104,14 103,99 106,51 101,29

Евро

1,0896 -0,06 1,0903 1,0902 1,0915 1,0897 1,1044 1,0602

Японская иена

155,95 -0,1 156,1 156,1 156,48 155,81 160,03 140,82

Британский фунт

1,2795 -0,07 1,2805 1,2804 1,2817 1,2795 1,2893 1,23

Канадский доллар

1,3649 0,16 1,3625 1,3627 1,3654 1,3621 1,3846 1,323

Шведская крона

10,4111 0 10,4028 10,4114 10,4216 10,4037 11,0487 10,0558

Швейцарский франк

0,896 0,06 0,8952 0,8955 0,8972 0,8939 0,9224 0,84

Валюты G20:

Аргентинский песо

896 0,06 0 896 0 0 896,5 810,65

Австралийский доллар

0,6663 -0,37 0,6687 0,6688 0,6698 0,6662 0,6839 0,6363

Бразильский реал

5,2507 0,08 5,2472 5,2467 5,2507 5,2456 5,2911 4,8314

Индийская рупия

83,4983 0,5 83,091 83,083 83,51 83,09 83,739 82,65

Индонезийская рупия

16 220 -0,03 16 190 16 225 16 230 16 195 16 285 15 450

Китайский юань

7,2456 0,05 7,242 7,242 7,2462 7,2423 7,2496 7,1097

Мексиканский песо

17,6276 -0,25 17,657 17,671 17,715 17,5491 17,865 16,2645

Российский рубль

88,97 -0,39 89,205 89,3205 89,33 88,88 95,4705 87,7795

Саудовский риал

3,7504 0 3,7506 3,7503 3,7507 3,7506 3,7515 3,7483

Турецкая лира

32,218 0,16 32,1128 32,1678 32,2304 32,08 33,0255 29,567

Южнокорейская вона

1 377,27 0,5 1 370,36 1 370,36 1 377,93 1 369,42 1 400,15 1 291,17

Южноафриканский ранд

18,5862 0,5 18,4956 18,4931 18,5974 18,4882 19,3912 18,03

Европа:

Польский злотый

3,9212 0,09 3,9175 3,9175 3,925 3,915 4,1235 3,9013

Чешская крона

22,663 0,28 22,621 22,6 22,665 22,603 23,883 22,308

Венгерский форинт

358,07 0,14 357,56 357,57 358,32 357,47 373,02 343,35

Норвежская крона

10,4748 0,35 10,4366 10,4386 10,4785 10,4377 11,1375 10,1432

Датская крона

6,8448 0,08 6,8393 6,8396 6,845 6,8327 7,038 6,7494

Исландская крона

137,04 0,08 136,97 136,93 137,06 137,1 142 135,38

(Московское бюро)

МОСКВА, 4 июн (Рейтер) – Российский разработчик

экосистемы корпоративных коммуникаций IVA Technologies

определил цену акции для IPO по верхней границе индикативного

диапазона – 300 рублей, что соответствует капитализации компании

в 30 миллиардов рублей, сообщила компания.

МОСКВА, 4 июн (Рейтер) – Заявка на прокачку российского

газа в Европу через Украину составляет 42,4 миллиона кубометров

в сутки, сообщил Газпром.

A Legacy in Law Enforcement: A Mother’s and Son’s Journeys to the FBI — FBI  Federal Bureau of Investigation

The post Mash: главарь банды «Боевые шмели» из Белгорода лишился гражданства России first appeared on The News And Times.

The post Ефимов: свыше 50 школ и детсадов инвесторы возведут в ТиНАО к 2027 году first appeared on The News And Times.