‼ CVE-2020-7751 ‼
📖 Read
via "National Vulnerability Database".
This affects all versions of package pathval.📖 Read
via "National Vulnerability Database".
🕴 Microsoft's Kubernetes Threat Matrix: Here's What's Missing 🕴
📖 Read
via "Dark Reading".
With a fuller picture of the Kubernetes threat matrix, security teams can begin to implement mitigation strategies to protect their cluster from threats.📖 Read
via "Dark Reading".
Dark Reading
Vulnerabilities & Threats recent news | Dark Reading
Explore the latest news and expert commentary on Vulnerabilities & Threats, brought to you by the editors of Dark Reading
❌ Nando’s Hackers Feast on Customer Accounts ❌
📖 Read
via "Threat Post".
Multiple chicken diners said their usernames and passwords were stolen and the accounts used to place high-volume orders.📖 Read
via "Threat Post".
Threat Post
Nando’s Hackers Feast on Customer Accounts
Multiple chicken diners said their usernames and passwords were stolen and the accounts used to place high-volume orders.
❌ Vastaamo Breach: Hackers Blackmailing Psychotherapy Patients ❌
📖 Read
via "Threat Post".
Cybercriminals have already reportedly posted the details of 300 Vastaamo patients - and are threatening to release the data of others unless a ransom is paid.📖 Read
via "Threat Post".
Threat Post
Vastaamo Breach: Hackers Blackmailing Psychotherapy Patients
Cybercriminals have already reportedly posted the details of 300 Vastaamo patients - and are threatening to release the data of others unless a ransom is paid.
‼ CVE-2020-25470 ‼
📖 Read
via "National Vulnerability Database".
AntSword 2.1.8.1 contains a cross-site scripting (XSS) vulnerability in the View Site funtion. When viewing an added site, an XSS payload can be injected in cookies view which can lead to remote code execution.📖 Read
via "National Vulnerability Database".
🛠 Sifter 10.5f 🛠
📖 Read
via "Packet Storm Security".
Sifter is a osint, recon, and vulnerability scanner. It combines a plethora of tools within different module sets in order to quickly perform recon tasks, check network firewalling, enumerate remote and local hosts, and scan for the blue vulnerabilities within Microsoft systems and if unpatched, exploits them.📖 Read
via "Packet Storm Security".
Packetstormsecurity
Sifter 10.5f ≈ Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers
🕴 Teach Your Employees Well: How to Spot Smishing & Vishing Scams 🕴
📖 Read
via "Dark Reading".
One of the best ways to keep employees from falling victim to these social-engineering attacks is to teach them the signs.📖 Read
via "Dark Reading".
Dark Reading
Teach Your Employees Well: How to Spot Smishing & Vishing Scams
One of the best ways to keep employees from falling victim to these social-engineering attacks is to teach them the signs.
❌ Containerd Bug Exposes Cloud Account Credentials ❌
📖 Read
via "Threat Post".
The flaw (CVE-2020-15157) is located in the container image-pulling process.📖 Read
via "Threat Post".
Threat Post
Containerd Bug Exposes Cloud Account Credentials
The flaw (CVE-2020-15157) is located in the container image-pulling process.
🕴 New Report Links Cybersecurity and Sustainability 🕴
📖 Read
via "Dark Reading".
Some have also created the role of chief sustainability officer, according to Kaspersky.📖 Read
via "Dark Reading".
Dark Reading
New Report Links Cybersecurity and Sustainability
Some have also created the role of chief sustainability officer, according to Kaspersky.
‼ CVE-2020-7126 ‼
📖 Read
via "National Vulnerability Database".
A remote server-side request forgery (ssrf) vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-7196 ‼
📖 Read
via "National Vulnerability Database".
The HPE BlueData EPIC Software Platform version 4.0 and HPE Ezmeral Container Platform 5.0 use an insecure method of handling sensitive Kerberos passwords that is susceptible to unauthorized interception and/or retrieval. Specifically, they display the kdc_admin_password in the source file of the url "/bdswebui/assignusers/".📖 Read
via "National Vulnerability Database".
‼ CVE-2020-7752 ‼
📖 Read
via "National Vulnerability Database".
This affects the package systeminformation before 4.27.11. This package is vulnerable to Command Injection. The attacker can concatenate curl's parameters to overwrite Javascript files and then execute any OS commands.📖 Read
via "National Vulnerability Database".
❌ ‘Among Us’ Mobile Game Under Siege by Attackers ❌
📖 Read
via "Threat Post".
Ongoing attacks on the wildly popular game Among Us are testing developers’ ability to keep up.📖 Read
via "Threat Post".
Threat Post
‘Among Us’ Mobile Game Under Siege by Attackers
Ongoing attacks on the wildly popular game Among Us are testing developers’ ability to keep up.
🦿 Enterprises confident Chief Sustainability Officer (CSO) will improve cybersecurity 🦿
📖 Read
via "Tech Republic".
98% of enterprises want CSOs, but 56% of industrial businesses don't have plans to introduce one to their company, according to a new Kaspersky report.📖 Read
via "Tech Republic".
TechRepublic
Enterprises confident Chief Sustainability Officer (CSO) will improve cybersecurity
98% of enterprises want CSOs, but 56% of industrial businesses don't have plans to introduce one to their company, according to a new Kaspersky report.
‼ CVE-2017-18925 ‼
📖 Read
via "National Vulnerability Database".
opentmpfiles through 0.3.1 allows local users to take ownership of arbitrary files because d entries are mishandled and allow a symlink attack.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-26566 ‼
📖 Read
via "National Vulnerability Database".
A Denial of Service condition in Motion-Project Motion 3.2 through 4.3.1 allows remote unauthenticated users to cause a webu.c segmentation fault and kill the main process via a crafted HTTP request.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-26161 ‼
📖 Read
via "National Vulnerability Database".
In Octopus Deploy through 2020.4.2, an attacker could redirect users to an external site via a modified HTTP Host header.📖 Read
via "National Vulnerability Database".
🔏 Former Healthcare Exec Sentenced for Sabotaging COVID-19 Supply Deliveries 🔏
📖 Read
via "Digital Guardian".
The ex-VP conducted an intrusion into his former employer’s package shipping system and delayed PPE essential to healthcare workers.📖 Read
via "Digital Guardian".
Digital Guardian
Former Healthcare Exec Sentenced for Sabotaging COVID-19 Supply Deliveries
The ex-VP conducted an intrusion into his former employer’s package shipping system and delayed PPE essential to healthcare workers.
🕴 Cybercriminals Extort Psychotherapy Patients Following Vastaamo Breach 🕴
📖 Read
via "Dark Reading".
An attacker is running a Tor site to leak the session notes of 300 patients at Vastaamo, a Finnish psychotherapy facility.📖 Read
via "Dark Reading".
Dark Reading
Cybercriminals Extort Psychotherapy Patients Following Vastaamo Breach
An attacker is running a Tor site to leak the session notes of 300 patients at Vastaamo, a Finnish psychotherapy facility.
‼ CVE-2020-1915 ‼
📖 Read
via "National Vulnerability Database".
An out-of-bounds read in the JavaScript Interpreter in Facebook Hermes prior to commit 8cb935cd3b2321c46aa6b7ed8454d95c75a7fca0 allows attackers to cause a denial of service attack or possible further memory corruption via crafted JavaScript. Note that this is only exploitable if the application using Hermes permits evaluation of untrusted JavaScript. Hence, most React Native applications are not affected.📖 Read
via "National Vulnerability Database".
❌ Microsoft IE Browser Death March Hastens ❌
📖 Read
via "Threat Post".
Internet Explorer redirects more traffic to Edge Chromium browser as Microsoft warns of the upcoming demise of the once dominant browser.📖 Read
via "Threat Post".
Threat Post
Microsoft IE Browser Death March Hastens
Internet Explorer redirects more traffic to Edge Chromium browser as Microsoft warns of the upcoming demise of the once dominant browser.