A now-patched security flaw in the vm2 JavaScript sandbox module could be abused by a remote adversary to break out of security barriers and perform arbitrary operations on the underlying machine.
“A threat actor can bypass the sandbox protections to gain remote code execution rights on the host running the sandbox,” GitHub said in an advisory published on September 28, 2022.
The
Related Post
- November 14, 2024
Smashing Security podcast #393: Who needs a laptop
Arion Kurtaj, a teenager from the UK, amassed a fortune through audacious cybercrimes. From stealing Grand Theft Auto 6 secrets
- November 13, 2024
Dream Job or Cyber Trap? The Rise of
Dream Job or Cyber Trap? The Rise of Fake Recruiter Scams on LinkedIn How Cybercriminals Are Exploiting Job Seekers and
- November 13, 2024
Hamas-Affiliated WIRTE Employs SameCoin Wiper in Disruptive Attacks
A threat actor affiliated with Hamas has expanded its malicious cyber operations beyond espionage to carry out disruptive attacks that
- November 13, 2024
Free Decryptor Released for BitLocker-Based ShrinkLocker Ransomware Victims
Romanian cybersecurity company Bitdefender has released a free decryptor to help victims recover data encrypted using the ShrinkLocker ransomware. The