March 22, 2024

Rewterz Threat Alert – An Emerging Ducktail Infostealer – Active IOCs

Severity High Analysis Summary Ducktail Malware is a malicious program designed by hackers to infiltrate computers and networks globally. Ducktail malware is typically delivered through a […]

March 22, 2024

Rewterz Threat Alert – Russian Threat Actors Target European NGO Systems with TinyTurla-NG Backdoor – Active IOCs

Severity High Analysis Summary Turla, a Russian espionage threat actor, infected and compromised many systems of an unknown non-governmental organization (NGO) in Europe by deploying a […]

March 22, 2024

Rewterz Threat Advisory – CVE-2024-26246 – Microsoft Edge Vulnerability

Severity Low Analysis Summary CVE-2024-26246 Microsoft Edge (Chromium-based) could allow a physical authenticated attacker to bypass security restrictions. An attacker could exploit this vulnerability to bypass […]

March 22, 2024

Rewterz Threat Alert – An Emerging Ducktail Infostealer – Active IOCs

Severity High Analysis Summary Ducktail Malware is a malicious program designed by hackers to infiltrate computers and networks globally. Ducktail malware is typically delivered through a […]

March 22, 2024

Rewterz Threat Alert – Russian Threat Actors Target European NGO Systems with TinyTurla-NG Backdoor – Active IOCs

Severity High Analysis Summary Turla, a Russian espionage threat actor, infected and compromised many systems of an unknown non-governmental organization (NGO) in Europe by deploying a […]

March 22, 2024

Rewterz Threat Advisory – CVE-2024-26246 – Microsoft Edge Vulnerability

Rewterz Threat Alert – Latest Emotet – IoCs

October 15, 2020

Rewterz Threat Advisory – CVE-2020-3991 – VMware Horizon Client for Windows

October 16, 2020

Rewterz Threat Advisory – ‘BleedingTooth’ Bluetooth flaw in Linux kernel

October 15, 2020

Severity

High

Analysis Summary

Updates are available to mitigate a serious flaw Google found in the Linux Bluetooth stack. A high-severity flaw was found in the Bluetooth stack in the Linux kernel versions below Linux 5.9 that support BlueZ. Improper input validation in BlueZ may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access. BlueZ is found on Linux-based IoT devices and is the official Linux Bluetooth stack. Potential security vulnerabilities in BlueZ may allow escalation of privilege or information disclosure.BlueZ is releasing Linux kernel fixes to address these potential vulnerabilities.

CVE-2020-12351 – Improper input validation in BlueZ may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.

CVE-2020-12352 – Improper access control in BlueZ may allow an unauthenticated user to potentially enable information disclosure via adjacent access.

CVE-2020-24490 – Improper buffer restrictions in BlueZ may allow an unauthenticated user to potentially enable denial of service via adjacent access.

Impact

Escalation of Privilege
Information Disclosure
Denial of Service

Affected Vendors

Linux

Affected Products

All Linux kernel versions before 5.10 that support BlueZ.

Remediation

Intel recommends updating the Linux kernel to version 5.10 or later.

If a kernel upgrade is not possible, Intel recommends the following kernel fixes to address these issues:

Platform

Managed Security Services

Managed Penetration Testing

Assess

Transform

Train

Respond

Resources

Rewterz Threat Alert – An Emerging Ducktail Infostealer – Active IOCs

Rewterz Threat Alert – Russian Threat Actors Target European NGO Systems with TinyTurla-NG Backdoor – Active IOCs

Rewterz Threat Advisory – CVE-2024-26246 – Microsoft Edge Vulnerability

Threat Insights

About Us

Our Leadership

CSR

Connect with Us

Platform

Managed Security Services

Managed Penetration Testing

Assess

Transform

Train

Respond

Resources

Rewterz Threat Alert – An Emerging Ducktail Infostealer – Active IOCs

Rewterz Threat Alert – Russian Threat Actors Target European NGO Systems with TinyTurla-NG Backdoor – Active IOCs

Rewterz Threat Advisory – CVE-2024-26246 – Microsoft Edge Vulnerability

Threat Insights

About Us

Our Leadership

CSR

Connect with Us

Rewterz Threat Alert – Latest Emotet – IoCs

Rewterz Threat Advisory – CVE-2020-3991 – VMware Horizon Client for Windows