Nikita Skovoroda discovered that pbkdf2 did not properly validate certain algorithm names. An attacker could possibly use this issue to generate predictable cryptographic keys, resulting in signature spoofing.

#Phishing

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

USN-8452-1: pbkdf2 vulnerability

VERWANDTEARTIKEL

‘Popa’ Botnet Linked to Publicly-Traded Israeli Firm

ThreatsDay Bulletin: Claude Chat Abuse, NastyC2 npm Packages, Device-Code Phishing + 25 More Stories

Hackers Abuse Claude.ai Shared Chat Feature to Host the ClickFix Social Engineering Instructions

Crypto-Clipper-Kampagne nutzt Fake-Reviews, KI-Narration und legitime Plattformen für Verbreitung

Hackers Abuse PowerShell Commands to Deliver SmartRAT Through Brazilian Bank Phishing Page

Evilginx AiTM Attack Captures Microsoft Credentials, MFA Tokens, and Authenticated Sessions