• About
  • Advertise
  • Careers
  • Contact
Saturday, March 25, 2023
No Result
View All Result
NEWSLETTER
Cyber360 News
  • Home
  • Security
  • Data Breach
  • Cyber Attacks
  • Cyber Security
  • Cyber Crime
  • Contact Us
  • Home
  • Security
  • Data Breach
  • Cyber Attacks
  • Cyber Security
  • Cyber Crime
  • Contact Us
No Result
View All Result
Cyber360 News
No Result
View All Result
Home Security

17-Yr-Old Finds Dell Laptops And PCs Are Vulnerable To Remote Attack

by Cyber360 News
November 11, 2019
in Security
0
17-Yr-Old Finds Dell Laptops And PCs Are Vulnerable To Remote Attack
0
SHARES
0
VIEWS
Share on FacebookShare on Twitter

Dell laptop and computer owners beware! Your machine is vulnerable to an attack that can be executed remotely to hijack your system — just by making you visit a malicious website.

As reported by ZDNet, a 17-year-old security researcher, Bill Demirkapi, discovered a vulnerability in the Dell SupportAssist utility that allows attackers to execute malicious codes remotely.

jamf now

The vulnerability (CVE-2019-3719) allows hackers to execute code with admin privileges on devices that use an older version of Dell SupportAssist tool, and take over the victim’s system.

The attackers just have to trick a user into visiting a specific website containing JavaScript code that can fool the SupportAssist app into downloading and running malicious files (with full admin rights).

And here’s the worst part: this hack doesn’t even require additional user interaction on the website. As soon as the user visits the website, the malicious JavaScript that could be hidden inside an ad on a legitimate website starts running automatically.

For the uninitiated, Dell’s SupportAssist tool pro-actively checks the state of your hardware and software and automatically updates the system as and when required. The software comes pre-installed on almost all new Dell devices. So there’s a huge number of users out there who are potentially vulnerable to this attack.

But the good news is that Dell has released a patched version of SupportAssist (v3.2.0.90) to close the security hole. If you own a Dell laptop or PC which has SupportAssist installed on it, you should download and install the new version right away to protect your system.

jamf now

The proof of concept for this attack is available on GitHub, and those who want to see it in action can check out this demo video by Demirkapi:

Cyber360 News

Cyber360 News

Next Post
This Hacker Is Selling Dangerous Windows 0-Day Hacks For Past 3 Years

This Hacker Is Selling Dangerous Windows 0-Day Hacks For Past 3 Years

Recent Posts

Twitch’s Entire Critical Data Leaked, Includes Streamer Earnings, Source Code

Twitch’s Entire Critical Data Leaked, Includes Streamer Earnings, Source Code

October 6, 2021
Former U.S. Security Firm Helped The UAE Carry Out “Karma” iMessage Hack: MIT Tech Review

Former U.S. Security Firm Helped The UAE Carry Out “Karma” iMessage Hack: MIT Tech Review

October 1, 2021
Facing “This App Has Been Blocked For Your Protection” Issue? Here’s How You Can Fix It

Facing “This App Has Been Blocked For Your Protection” Issue? Here’s How You Can Fix It

October 1, 2021

Whats New in Kali Linux?

September 14, 2021

Kali Linux 2019.3 Release (CloudFlare, Kali-status, metapackages, Helper-Scripts & LXD)

September 14, 2021

Kali Linux 2021.3 Release (OpenSSL, Kali-Tools, Kali Live VM Support, Kali NetHunter Smartwatch)

September 14, 2021

Kali Linux 2018.4 Release

September 14, 2021

Kali Linux 1.0.5 and Software Defined Radio

September 14, 2021

Kali Tools Website Launched, 1.0.9 Release

September 14, 2021

Kali Linux Dojo at Black Hat Vegas 2016

September 14, 2021

Category

Site Links

  • Log in
  • Entries feed
  • Comments feed
  • WordPress.org

About Us

We bring you the best Premium WordPress Themes that perfect for news, magazine, personal blog, etc. Check our landing page for details.

© 2019 Cyber360 News - Powered by WebSensePro

No Result
View All Result
  • Home
  • Security
  • Data Breach
  • Cyber Attacks
  • Cyber Security
  • Cyber Crime
  • Contact Us

© 2019 Cyber360 News - Powered by WebSensePro

Login to your account below

Forgotten Password?

Fill the forms bellow to register

All fields are required. Log In

Retrieve your password

Please enter your username or email address to reset your password.

Log In