ATENTION‼ New - CVE-2019-17561
📖 Read
via "National Vulnerability Database".
The "Apache NetBeans" autoupdate system does not fully validate code signatures. An attacker could modify the downloaded nbm and include additional code. "Apache NetBeans" versions up to and including 11.2 are affected by this vulnerability.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2019-17560
📖 Read
via "National Vulnerability Database".
The "Apache NetBeans" autoupdate system does not validate SSL certificates and hostnames for https based downloads. This allows an attacker to intercept downloads of autoupdates and modify the download, potentially injecting malicious code. “Apache NetBeans" versions up to and including 11.2 are affected by this vulnerability.📖 Read
via "National Vulnerability Database".
❌ Nation-State Attacks Drop in Latest Google Analysis ❌
📖 Read
via "Threatpost".
Phishing and zero-days continue to be a core part of the APT arsenal.📖 Read
via "Threatpost".
Threat Post
Nation-State Attacks Drop in Latest Google Analysis
Phishing and zero-days continue to be a core part of the APT arsenal.
⚠ No, Houseparty hasn’t hacked your phone and stolen your bank details ⚠
📖 Read
via "Naked Security".
There's one thing missing in all the claims that deleting the Houseparty app will "unhack" you - evidence"📖 Read
via "Naked Security".
Naked Security
Has Houseparty really hacked your phone and stolen your bank details?
There’s one thing missing in all the claims that deleting the Houseparty app will “unhack” you – evidence
🔐 COVID-19: Security risks are increasing as more people work from home 🔐
📖 Read
via "Security on TechRepublic".
A security expert offers tips on how to keep employees safe in this work-from-home environment during the coronavirus pandemic.📖 Read
via "Security on TechRepublic".
TechRepublic
COVID-19: Security risks are increasing as more people work from home
A security expert offers tips on how to keep employees safe in this work-from-home environment during the coronavirus pandemic.
🔐 COVID-19: Security risks are increasing as more people work from home 🔐
📖 Read
via "Security on TechRepublic".
A security expert offers tips on how to keep employees safe in this work-from-home environment during the coronavirus pandemic.📖 Read
via "Security on TechRepublic".
TechRepublic
COVID-19: Security risks are increasing as more people work from home
A security expert offers tips on how to keep employees safe in this work-from-home environment during the coronavirus pandemic.
🕴 Microsoft Edge Will Tell You If Credentials Are Compromised 🕴
📖 Read
via "Dark Reading: ".
Password Monitor, InPrivate mode, and ad-tracking prevention are three new additions to Microsoft Edge.📖 Read
via "Dark Reading: ".
Darkreading
Microsoft Edge Will Tell You If Credentials Are Compromised
Password Monitor, InPrivate mode, and ad-tracking prevention are three new additions to Microsoft Edge.
🕴 Researchers Spot Sharp Increase in Zoom-Themed Domain Registrations 🕴
📖 Read
via "Dark Reading: ".
Attackers are attempting to take advantage of the surge in teleworking prompted by COVID-19, Check Point says.📖 Read
via "Dark Reading: ".
Darkreading
Researchers Spot Sharp Increase in Zoom-Themed Domain Registrations
Attackers are attempting to take advantage of the surge in teleworking prompted by COVID-19, Check Point says.
🕴 Untangling Third-Party Risk (and Fourth, and Fifth...) 🕴
📖 Read
via "Dark Reading: ".
Third parties bring critical products and services to your organization. They also bring risk that must be understood and managed.📖 Read
via "Dark Reading: ".
Darkreading
Untangling Third-Party Risk (and Fourth, and Fifth...)
Third parties bring critical products and services to your organization. They also bring risk that must be understood and managed.
ATENTION‼ New - CVE-2019-20634
📖 Read
via "National Vulnerability Database".
An issue was discovered in Proofpoint Email Protection through 2019-09-08. By collecting scores from Proofpoint email headers, it is possible to build a copy-cat Machine Learning Classification model and extract insights from this model. The insights gathered allow an attacker to craft emails that receive preferable scores, with a goal of delivering malicious emails.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2016-11024 (odata4j)
📖 Read
via "National Vulnerability Database".
odata4j 0.7.0 allows ExecuteJPQLQueryCommand.java SQL injection. NOTE: this product is apparently discontinued.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2016-11023 (odata4j)
📖 Read
via "National Vulnerability Database".
odata4j 0.7.0 allows ExecuteCountQueryCommand.java SQL injection. NOTE: this product is apparently discontinued.📖 Read
via "National Vulnerability Database".
🔐 Cyberattacks rank as the biggest data protection concern facing SMBs 🔐
📖 Read
via "Security on TechRepublic".
World Backup Day is March 31, and while cyberattacks are a potential threat to their data, many SMBs say they don't have a data backup or disaster recovery process, according to data protection company Infrascale.📖 Read
via "Security on TechRepublic".
TechRepublic
Cyberattacks rank as the biggest data protection concern facing SMBs
World Backup Day is March 31, and while cyberattacks are a potential threat to their data, many SMBs say they don't have a data backup or disaster recovery process, according to data protection company Infrascale.
🔐 Coronavirus-themed spam surged 14,000% in two weeks says IBM 🔐
📖 Read
via "Security on TechRepublic".
Since February, spam exploiting the novel coronavirus has jumped by 4,300% and 14,000% in the past 14 days, according to IBM X-Force, IBM's threat intelligence group.📖 Read
via "Security on TechRepublic".
⚠ 5 tips for keeping your data safe this World Backup Day ⚠
📖 Read
via "Naked Security".
The only backup you will ever regret... is the one you didn't make📖 Read
via "Naked Security".
Naked Security
5 tips for keeping your data safe this World Backup Day
The only backup you will ever regret… is the one you didn’t make
ATENTION‼ New - CVE-2019-9508
📖 Read
via "National Vulnerability Database".
The web interface of the Vertiv Avocent UMG-4000 version 4.2.1.19 is vulnerable to stored XSS. A remote attacker authenticated with an administrator account could store a maliciously named file within the web application that would execute each time a user browsed to the page.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2019-9507
📖 Read
via "National Vulnerability Database".
The web interface of the Vertiv Avocent UMG-4000 version 4.2.1.19 is vulnerable to command injection because the application incorrectly neutralizes code syntax before executing. Since all commands within the web application are executed as root, this could allow a remote attacker authenticated with an administrator account to execute arbitrary commands as root.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2019-19913
📖 Read
via "National Vulnerability Database".
In Intland codeBeamer ALM 9.5 and earlier, there is stored XSS via the Trackers Title parameter.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2019-19912
📖 Read
via "National Vulnerability Database".
In Intland codeBeamer ALM 9.5 and earlier, a cross-site scripting (XSS) vulnerability in the Upload Flash File feature allows authenticated remote attackers to inject arbitrary scripts via an active script embedded in an SWF file.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2019-19606
📖 Read
via "National Vulnerability Database".
X-Plane 11.41 and earlier has multiple improper path validations that could allow reading and writing files from/to arbitrary paths (or a leak of OS credentials to a remote system) via crafted network packets. This could be used to execute arbitrary commands on the system.📖 Read
via "National Vulnerability Database".