A security vulnerability in the mobile campaign app lets hackers view security safeguards known as Twitter application keys, Google apps, and maps keys and Branch.io keys in the .apk file. Website Planet researchers, Noam Rotem and Ran Locar, concluded that the flaw did not expose any user data, but it did give the intruder a way inside. They notified Trump’s campaign team, and within a few days, the flaws were fixed. The researchers did not attempt to access any user accounts as they felt this initial vulnerability was sufficient to notify Trump’s campaign. They stated that two additional keys would be required to access the Twitter accounts of users, but these keys were not exposed. They also stated that with these keys, hackers could impersonate the app, and with the Branch.io keys, hackers could potentially access app user and usage data.

Adobe has released out-of-band security updates to fix 18 critical flaws in Adobe After Effects, Illustrator, Premiere Pro, Premiere Rush, and Audition on Windows and macOS devices. The flaws allowed attackers to execute arbitrary code on systems running the vulnerable versions of the software. Adobe typically sends security updates every Tuesday but releases an out-of-band security update to patch critical security flaws or flaws that are known to be publicly exploited. All 18 of the flaws were rated critical and were caused by out of bounds read and write, heap overflow, and memory corruption bugs. Adobe Campaign Classic also had a bug that could result in information disclosure. Adobe has advised all its users to update the apps immediately.

Honda paused production and shut down some of its production facilities and closed its customer and financial operations following a ransomware attack. The Snake Ransomware is believed to have targeted Honda’s operations specifically. Honda said in a statement to The Verge, “There is no current loss of personally identifiable information.” An employee at one of the company’s most prominent North American Customers and Financial Service office says that temporary workers are not being paid while the office is shut. Even with the data being backed up, many of the employees don’t have the ability to work remotely, raising concerns about the company’s measures to help stop the spread do COVID-19.

Ten vulnerabilities in HP Support Assistant, a utility pre-installed on all HP computers sold after October 2012, were found by a security researcher. Computers running Windows 7, Windows 8, and Windows 10, were affected, which included five local privilege escalation flaws, two arbitrary file deletion bugs, and three remote code execution bugs.  

Vulnerabilities

Recent News

More of MIST

About MIST