🕴 What Will Cybersecurity's 'New Normal' Look Like? 🕴
📖 Read
via "Dark Reading: ".
The coronavirus pandemic has forced changes for much of the business world, cybersecurity included. What can we expect going forward?📖 Read
via "Dark Reading: ".
Dark Reading
What Will Cybersecurity's 'New Normal' Look Like?
The coronavirus pandemic has forced changes for much of the business world, cybersecurity included. What can we expect going forward?
ATENTION‼ New - CVE-2019-20847
📖 Read
via "National Vulnerability Database".
An issue was discovered in Mattermost Server before 5.18.0. An attacker can send a user_typing WebSocket event to any channel.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2019-20846
📖 Read
via "National Vulnerability Database".
An issue was discovered in Mattermost Server before 5.18.0. It has weak permissions for server-local file storage.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2019-20845
📖 Read
via "National Vulnerability Database".
An issue was discovered in Mattermost Server before 5.18.0. It allows attackers to cause a denial of service (memory consumption) via a large Slack import.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2019-20844
📖 Read
via "National Vulnerability Database".
An issue was discovered in Mattermost Server before 5.18.0, 5.17.2, 5.16.4, 5.15.4, and 5.9.7. An attacker can spoof a direct-message channel by changing the type of a channel.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2019-20843
📖 Read
via "National Vulnerability Database".
An issue was discovered in Mattermost Server before 5.18.0, 5.17.2, 5.16.4, 5.15.4, and 5.9.7. There are weak permissions for configuration files.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2019-20842
📖 Read
via "National Vulnerability Database".
An issue was discovered in Mattermost Server before 5.18.0, 5.17.2, 5.16.4, 5.15.4, and 5.9.7. There is SQL injection by admins via SearchAllChannels.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2019-20841
📖 Read
via "National Vulnerability Database".
An issue was discovered in Mattermost Server before 5.18.0, 5.17.2, 5.16.4, 5.15.4, and 5.9.7. CSRF can sometimes occur via a crafted web site for account takeover attacks.📖 Read
via "National Vulnerability Database".
❌ News Wrap: Malicious Chrome Extensions Removed, CIA ‘Woefully Lax’ Security Policies Bashed ❌
📖 Read
via "Threatpost".
Insider threats, the CIA's bad security policies, and malicious Chrome extensions were the topics of discussion during this week's news wrap podcast.📖 Read
via "Threatpost".
Threat Post
News Wrap: Malicious Chrome Extensions Removed, CIA ‘Woefully Lax’ Security Policies Bashed
Insider threats, the CIA's bad security policies, and malicious Chrome extensions were the topics of discussion during this week's news wrap podcast.
🔐 Many people using email to share files despite lack of security 🔐
📖 Read
via "Security on TechRepublic".
Those polled by Nordlocker also use cloud services, messaging apps, and external drives to share files.📖 Read
via "Security on TechRepublic".
TechRepublic
Many people using email to share files despite lack of security
Those polled by Nordlocker also use cloud services, messaging apps, and external drives to share files.
🔐 CCPA: How to prepare for California's new privacy law before enforcement starts July 1 🔐
📖 Read
via "Security on TechRepublic".
Companies need to look for PII across all corporate data silos and consider building an automated system to respond to requests from consumers, experts say.📖 Read
via "Security on TechRepublic".
TechRepublic
CCPA: How to prepare for California's new privacy law before enforcement starts July 1
Companies need to look for PII across all corporate data silos and consider building an automated system to respond to requests from consumers, experts say.
ATENTION‼ New - CVE-2018-21262
📖 Read
via "National Vulnerability Database".
An issue was discovered in Mattermost Server before 4.7.3. It allows attackers to cause a denial of service (application crash) via invalid LaTeX text.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2018-21261
📖 Read
via "National Vulnerability Database".
An issue was discovered in Mattermost Server before 4.8.1, 4.7.4, and 4.6.3. An e-mail invite accidentally included the team invite_id, which leads to unintended excessive invitation privileges.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2018-21260
📖 Read
via "National Vulnerability Database".
An issue was discovered in Mattermost Server before 4.8.1, 4.7.4, and 4.6.3. WebSocket events were accidentally sent during certain user-management operations, violating user privacy.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2018-21259
📖 Read
via "National Vulnerability Database".
An issue was discovered in Mattermost Server before 4.10.1, 4.9.4, and 4.8.2. It allows attackers to cause a denial of service (application hang) via a malformed link in a channel.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2018-21258
📖 Read
via "National Vulnerability Database".
An issue was discovered in Mattermost Server before 5.1. It allows attackers to cause a denial of service via the invite_people slash command.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2018-21257
📖 Read
via "National Vulnerability Database".
An issue was discovered in Mattermost Server before 5.1. It allows attackers to bypass intended access restrictions (for setting a channel header) via the Channel header slash command API.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2018-21255
📖 Read
via "National Vulnerability Database".
An issue was discovered in Mattermost Server before 5.1. Non-members of a channel could use the Channel PATCH API to modify that channel.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2018-21254
📖 Read
via "National Vulnerability Database".
An issue was discovered in Mattermost Server before 5.1. An attacker can bypass intended access control (for direct-message channel creation) via the Message slash command.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2018-21253
📖 Read
via "National Vulnerability Database".
An issue was discovered in Mattermost Server before 5.1, 5.0.2, and 4.10.2. An attacker could use the invite_people slash command to invite a non-permitted user.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2018-21251
📖 Read
via "National Vulnerability Database".
An issue was discovered in Mattermost Server before 5.2 and 5.1.1. Authorization could be bypassed if the channel name were not the same in the params and the body.📖 Read
via "National Vulnerability Database".