Tag: rust
-
Fickle Malware Leads to UAC Bypass and Data Exfiltration
A new Rust-based malware called Fickle Stealer has emerged, targeting sensitive information through multiple attack vectors. Fortinet FortiGuard Labs … First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/07/fickle-malware-leads-to-uac-bypass-and-data-exfiltration/
-
New Rust-based Fickle Malware Uses PowerShell for UAC Bypass and Data Exfiltration
A new Rust-based information stealer malware called Fickle Stealer has been observed being delivered via multiple attack chains with the goal of harve… First seen on thehackernews.com Jump to article: thehackernews.com/2024/06/new-rust-based-fickle-malware-uses.html
-
New Rust infostealer Fickle Stealer spreads through various attack methods
New Rust-based Fickle Malware Uses PowerShell for UAC Bypass and Data Exfiltration A new Rust malware called Fickle Stealer spreads through various at… First seen on securityaffairs.com Jump to article: securityaffairs.com/164726/malware/fickle-stealer-attack-methods.html
-
Rust für sicherheitskritische Systeme: Konsortium kümmert sich um den Einsatz
Tags: rustDas Safety-Critical Rust Consortium kümmert sich künftig um den verantwortungsvollen Einsatz von Rust in Bereichen wie Verkehr, Biotech und Energiewir… First seen on heise.de Jump to article: www.heise.de/news/Rust-fuer-sicherheitskritische-Systeme-Konsortium-kuemmert-sich-um-den-Einsatz-9761117.html
-
New consortium seeks to bolster Rust use in safety-critical systems
Tags: rustFirst seen on scmagazine.com Jump to article: www.scmagazine.com/brief/new-consortium-seeks-to-bolster-rust-use-in-safety-critical-systems
-
Speichersicherheit: Fast 20 Prozent aller Rust-Pakete sind potenziell unsicher
Tags: rustNach Angaben der Rust Foundation verwendet etwa jedes fünfte Rust-Paket das Unsafe-Keyword. Meistens werden dadurch Code oder Bibliotheken von Drittan… First seen on golem.de Jump to article: www.golem.de/news/speichersicherheit-fast-20-prozent-aller-rust-pakete-sind-potenziell-unsicher-2405-185452.html
-
Chance verpasst: Webauthn-rs-Entwickler hält Passkeys für geplatzten Traum
Passkeys sollen Anmeldevorgänge sicherer und benutzerfreundlicher machen. Der Entwickler einer Webauthn-Bibliothek für Rust sieht das Vorhaben inzwisc… First seen on golem.de Jump to article: www.golem.de/news/chance-verpasst-webauthn-rs-entwickler-haelt-passkeys-fuer-geplatzten-traum-2404-184648.html
-
Rust rustles up fix for 10/10 critical command injection bug on Windows in std lib
First seen on theregister.com Jump to article: www.theregister.com/2024/04/10/rust_critical_vulnerability_windows/
-
Fileless .NET Based Code Injection Attack Delivers AgentTesla Malware
A recent malware campaign used a VBA macro in a Word document to download and execute a 64-bit Rust binary. This binary employs fileless injection tec… First seen on gbhackers.com Jump to article: gbhackers.com/clr-hosting-used-by-agenttesla/
-
Announcing two new LMS libraries
By Will Song The Trail of Bits cryptography team is pleased to announce the open-sourcing of our pure Rust and Go implementations of Leighton-Micali H… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/04/announcing-two-new-lms-libraries/
-
Popular Rust Crate liblzma-sys Compromised with XZ Utils Backdoor Files
Test files associated with the XZ Utils backdoor have made their way to a Rust crate known as liblzma-sys, new findings from Phylum reveal.liblzma-sys… First seen on thehackernews.com Jump to article: thehackernews.com/2024/04/popular-rust-crate-liblzma-sys.html
-
Rust developers at Google are twice as productive as C++ teams
First seen on theregister.com Jump to article: www.theregister.com/2024/03/31/rust_google_c/
-
Critical ‘BatBadBut’ Rust Vulnerability Exposes Windows Systems to Attacks
A critical security flaw in the Rust standard library could be exploited to target Windows users and stage command injection attacks.The vulnerability… First seen on thehackernews.com Jump to article: thehackernews.com/2024/04/critical-batbadbut-rust-vulnerability.html
-
Critical Rust Flaw Poses Exploit Threat in Specific Windows Use Cases
Project behind the Rust programming language asserted that any calls to a specific API would be made safe, even with unsafe inputs, but researchers fo… First seen on darkreading.com Jump to article: www.darkreading.com/application-security/critical-rust-flaw-poses-exploit-threat-in-specific-windows-use-cases
-
New ‘BatBadBut’ Rust Vulnerability Given Highest Severity Score
First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/windows-batbadbut-rust/
-
Command injection attacks likely with critical Rust vulnerability
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/command-injection-attacks-likely-with-critical-rust-vulnerability
-
Rust rustles up fix for 10/10 critical command injection bug on Windows
First seen on theregister.com Jump to article: www.theregister.com/2024/04/10/rust_critical_vulnerability_windows/
-
OSS leaders detail commitments to bolster software security
CISA has announced a number of actions to help secure the global open source ecosystem, as leading package repositories including the Python and Rust … First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366572795/OSS-leaders-detail-commitments-to-bolster-software-security
-
Critical Rust Vulnerability Let Hackers Inject Commands on Windows Systems
A new critical vulnerability has been discovered in two of the Rust standard libraries, which could allow a threat actor to execute shell commands on … First seen on gbhackers.com Jump to article: gbhackers.com/rust-flaw-let-attackers-inject-commands/
-
BatBadBut: Kritische Befehlsschmuggel-Lücke in Windows etwa in Rust
First seen on heise.de Jump to article: www.heise.de/news/BatBadBut-Kritische-Befehlsschmuggel-Luecke-in-Windows-etwa-in-Rust-9680576.html
-
New Critical Rust Vulnerability Allows Attackers to Inject Commands on Windows Systems
A new critical vulnerability has been discovered in two of the Rust standard libraries, which could allow a threat actor to execute shell commands on … First seen on gbhackers.com Jump to article: gbhackers.com/rust-flaw-let-attackers-inject-commands/
-
KrustyLoader Backdoor Attack Both Windows Linux Systems
Recent developments within the cybersecurity landscape have included the emergence of KrustyLoader, a sophisticated Rust-based backdoor that has caugh… First seen on gbhackers.com Jump to article: gbhackers.com/krustyloader-backdoor/
-
Google verabschiedet sich von C++
Google will Speichersicherheit stärker fokussieren und künftig Sprachen wie Java, Rust oder Carbon einsetzen. Für Altlasten gibt es eine spezielle Str… First seen on heise.de Jump to article: www.heise.de/news/Neue-Sicherheitsstrategie-bei-Google-Rust-statt-C-9646686.html
-
White House: Use memory-safe programming languages to protect the nation
The White House is asking the technical community to switch to using memory-safe programming languages such as Rust, Python, Swift, C#, Java, and Go … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/02/27/memory-safe-programming-languages/
-
White House urges devs to switch to memory-safe programming languages
The White House Office of the National Cyber Director (ONCD) urged tech companies today to switch to memory-safe programming languages, such as Rust, … First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/white-house-urges-devs-to-switch-to-memory-safe-programming-languages/
-
New RustDoor macOS malware impersonates Visual Studio update
A new Rust-based macOS malware spreading as a Visual Studio update to provide backdoor access to compromised systems uses infrastructure linked to the… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/new-rustdoor-macos-malware-impersonates-visual-studio-update/
-
Android und mehr: Google will Interoperabilität von C++ und Rust verbessern
First seen on golem.de Jump to article: www.golem.de/news/android-und-mehr-google-will-interoperabilitaet-von-c-und-rust-verbessern-2402-181917.html
-
Verschlüsselung: Linux Foundation will Post-Quanten-Krypto in Rust
First seen on golem.de Jump to article: www.golem.de/news/verschluesselung-linux-foundation-will-post-quanten-krypto-in-rust-2402-181997.html
-
JFrog warnt vor DoS-Angriffspotential durch Hyper-Pakete von Rust
First seen on infopoint-security.de Jump to article: www.infopoint-security.de/jfrog-warnt-vor-dos-angriffspotential-durch-hyper-pakete-von-rust/a33123/