‼ CVE-2020-27986 ‼
📖 Read
via "National Vulnerability Database".
** DISPUTED ** SonarQube 8.4.2.36762 allows remote attackers to discover cleartext SMTP, SVN, and GitLab credentials via the api/settings/values URI. NOTE: reportedly, the vendor's position is "it is the administrator's responsibility to configure it."📖 Read
via "National Vulnerability Database".
‼ CVE-2020-11487 ‼
📖 Read
via "National Vulnerability Database".
NVIDIA DGX servers, DGX-1 with BMC firmware versions prior to 3.38.30. DGX-2 with BMC firmware versions prior to 1.06.06 and all DGX A100 Servers with all BMC firmware versions, contains a vulnerability in the AMI BMC firmware in which the use of a hard-coded RSA 1024 key with weak ciphers may lead to information disclosure.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-11488 ‼
📖 Read
via "National Vulnerability Database".
NVIDIA DGX servers, all DGX-1 with BMC firmware versions prior to 3.38.30 and all DGX-2 with BMC firmware versions prior to 1.06.06, contains a vulnerability in the AMI BMC firmware in which software does not validate the RSA 1024 public key used to verify the firmware signature, which may lead to information disclosure or code execution.📖 Read
via "National Vulnerability Database".
❌ Xfinity, McAfee Brands Abused by Parked Domains in Active Campaigns ❌
📖 Read
via "Threat Post".
Malicious redirection websites are using typosquatting and impersonation to attack unwary visitors.📖 Read
via "Threat Post".
Threat Post
Xfinity, McAfee Brands Abused by Parked Domains in Active Campaigns
Malicious redirection websites are using typosquatting and impersonation to attack unwary visitors.
‼ CVE-2020-27655 ‼
📖 Read
via "National Vulnerability Database".
Improper access control vulnerability in Synology Router Manager (SRM) before 1.2.4-8081 allows remote attackers to access restricted resources via inbound QuickConnect traffic.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-7746 ‼
📖 Read
via "National Vulnerability Database".
This affects the package chart.js before 2.9.4. The options parameter is not properly sanitized when it is processed. When the options are processed, the existing options (or the defaults options) are deeply merged with provided options. However, during this operation, the keys of the object being set are not checked, leading to a prototype pollution.📖 Read
via "National Vulnerability Database".
❌ Bug-Bounty Awards Spike 26% in 2020 ❌
📖 Read
via "Threat Post".
The most-rewarded flaw is XSS, which is among those that are relatively cheap for organizations to identify.📖 Read
via "Threat Post".
Threat Post
Bug-Bounty Awards Spike 26% in 2020
The most-rewarded flaw is XSS, which is among those that are relatively cheap for organizations to identify.
🦿 How phishing attacks are targeting schools and colleges 🦿
📖 Read
via "Tech Republic".
Attackers are exploiting the need for schools to receive critical updates from teachers, principals, and department heads, says Barracuda.📖 Read
via "Tech Republic".
TechRepublic
How phishing attacks are targeting schools and colleges
Attackers are exploiting the need for schools to receive critical updates from teachers, principals, and department heads, says Barracuda.
🔏 Digital Guardian Debuts Exclusive Offer for Forcepoint DLP Customers 🔏
📖 Read
via "Digital Guardian".
With news the company will be acquired, Forcepoint DLP customers may be looking for a change.📖 Read
via "Digital Guardian".
Digital Guardian
Digital Guardian Debuts Exclusive Offer for Forcepoint DLP Customers
With news the company will be acquired, Forcepoint DLP customers may be looking for a change.
🕴 Is Your Encryption Ready for Quantum Threats? 🕴
📖 Read
via "Dark Reading".
Answers to these five questions will help security teams defend against attackers in the post-quantum computing era.📖 Read
via "Dark Reading".
Dark Reading
Is Your Encryption Ready for Quantum Threats?
Answers to these five questions will help security teams defend against attackers in the post-quantum computing era.
❌ Oracle WebLogic Server RCE Flaw Under Active Attack ❌
📖 Read
via "Threat Post".
The flaw in the console component of the WebLogic Server, CVE-2020-14882, is under active attack, researchers warn.📖 Read
via "Threat Post".
Threat Post
Oracle WebLogic Server RCE Flaw Under Active Attack
The flaw in the console component of the WebLogic Server, CVE-2020-14882, is under active attack, researchers warn.
🦿 FBI: Hospitals and healthcare providers face imminent ransomware threat 🦿
📖 Read
via "Tech Republic".
The FBI warns of a threat against the healthcare sector from Ryuk ransomware, and one that's already affected some hospitals.📖 Read
via "Tech Republic".
TechRepublic
FBI: Hospitals and healthcare providers face imminent ransomware threat
The FBI warns of a threat against the healthcare sector from Ryuk ransomware, and one that's already affected some hospitals.
❌ Home Depot Confirms Data Breach in Order Confirmation SNAFU ❌
📖 Read
via "Threat Post".
Hundreds of emailed order confirmations for random strangers were sent to Canadian customers, each containing personal information.📖 Read
via "Threat Post".
Threat Post
Home Depot Confirms Data Breach in Order Confirmation SNAFU
Hundreds of emailed order confirmations for random strangers were sent to Canadian customers, each containing personal information.
🕴 How to Increase Voter Turnout & Reduce Fraud 🕴
📖 Read
via "Dark Reading".
Digital identity verification has advanced, both technologically and legislatively. Is it the answer to simpler, safer voting?📖 Read
via "Dark Reading".
Dark Reading
How to Increase Voter Turnout & Reduce Fraud
Digital identity verification has advanced, both technologically and legislatively. Is it the answer to simpler, safer voting?
⚠ Buer Loader “malware-as-a-service” joins Emotet for ransomware delivery ⚠
📖 Read
via "Naked Security".
A relative newcomer in the "malware-as-a-service" scene is starting to attract the big-money ransomware criminals.📖 Read
via "Naked Security".
Naked Security
Buer Loader “malware-as-a-service” joins Emotet for ransomware delivery
A relative newcomer in the “malware-as-a-service” scene is starting to attract the big-money ransomware criminals.
🕴 Cybercriminals Aim BEC Attacks at Education Industry 🕴
📖 Read
via "Dark Reading".
Heightened vulnerability comes at a time when the sector has been focusing on setting up a remote workforce and online learning amid the pandemic.📖 Read
via "Dark Reading".
Dark Reading
Cybercriminals Aim BEC Attacks at Education Industry
Heightened vulnerability comes at a time when the sector has been focusing on setting up a remote workforce and online learning amid the pandemic.
🕴 Why Defense, Not Offense, Will Determine Global Cyber Powers 🕴
📖 Read
via "Dark Reading".
Darktrace director of strategic threat Marcus Fowlers explains what to expect from nation-state attackers in the months to come -- and why kindergarten classes are a good model for solid cybersecurity.📖 Read
via "Dark Reading".
Dark Reading
Why Defense, Not Offense, Will Determine Global Cyber Powers
Darktrace director of strategic threat Marcus Fowlers explains what to expect from nation-state attackers in the months to come -- and why kindergarten classes are a good model for solid cybersecurity.
🕴 How Healthcare Organizations Can Combat Ransomware 🕴
📖 Read
via "Dark Reading".
The days of healthcare organizations relying solely on endpoint security software to stop attacks are over. Here are six ways that healthcare providers can fight the ever-present threat.📖 Read
via "Dark Reading".
Dark Reading
How Healthcare Organizations Can Combat Ransomware
The days of healthcare organizations relying solely on endpoint security software to stop attacks are over. Here are six ways that healthcare providers can fight the ever-present threat.
🦿 Business Email Compromise attacks are on the rise 🦿
📖 Read
via "Tech Republic".
BEC campaigns continue to shift their targets from C-suite executives and finance employees to group mailboxes, says Abnormal Security.📖 Read
via "Tech Republic".
TechRepublic
Business Email Compromise attacks are on the rise
BEC campaigns continue to shift their targets from C-suite executives and finance employees to group mailboxes, says Abnormal Security.
🕴 Ransomware Wave Targets US Hospitals: What We Know So Far 🕴
📖 Read
via "Dark Reading".
A joint advisory from the CSIA, FBI, and HHS warns of an "increased and imminent" threat to US hospitals and healthcare providers.📖 Read
via "Dark Reading".
Dark Reading
Ransomware Wave Targets US Hospitals: What We Know So Far
A joint advisory from the CSIA, FBI, and HHS warns of an increased and imminent threat to US hospitals and healthcare providers.
🕴 Hackers Make Off With Millions From Wisconsin Republicans 🕴
📖 Read
via "Dark Reading".
According to the Wisconsin Republican Party, thieves used altered invoices to make off with $2.3 million in election funds.📖 Read
via "Dark Reading".
Dark Reading
Hackers Make Off With Millions From Wisconsin Republicans
According to the Wisconsin Republican Party, thieves used altered invoices to make off with $2.3 million in election funds.