‼ CVE-2020-27346 ‼
📖 Read
via "National Vulnerability Database".
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none.📖 Read
via "National Vulnerability Database".
❌ Police to Livestream Ring Camera Footage of Mississippi Residents ❌
📖 Read
via "Threat Post".
Pilot program again sparks privacy fears from ACLU as Amazon takes its partnership with law enforcement to the next level.📖 Read
via "Threat Post".
Threat Post
Police to Livestream Ring Camera Footage of Mississippi Residents
A Mississippi pilot program that allows police to livestream private camera footage sparks privacy fears from the ACLU.
⚠ Another Chrome zero-day, this time on Android – check your version! ⚠
📖 Read
via "Naked Security".
Another week, another Chrome zero-day, this time on your phone.📖 Read
via "Naked Security".
Sophos News
Naked Security – Sophos News
❌ Code42 Incydr Series: Why Most Companies Can’t Stop Departing Employee Data Theft ❌
📖 Read
via "Threat Post".
According to Code42’s Data Exposure Report, 63% of employees say they brought data with them from their previous employer to their current employer.📖 Read
via "Threat Post".
Threat Post
Code42 Incydr Series: Why Most Companies Can’t Stop Departing Employee Data Theft
According to Code42’s Data Exposure Report, 63% of employees say they brought data with them from their previous employer to their current employer.
🕴 CSA Moves to Redefine Cloud-Based Intelligence 🕴
📖 Read
via "Dark Reading".
The new paradigm seeks to understand, integrate, and automate data workflows, and better yet, doesn't require significant investment or more personnel.📖 Read
via "Dark Reading".
Dark Reading
CSA Moves to Redefine Cloud-Based Intelligence
The new paradigm seeks to understand, integrate, and automate data workflows, and better yet, doesn't require significant investment or more personnel.
🛠 Sifter 10.6m 🛠
📖 Read
via "Packet Storm Security".
Sifter is a osint, recon, and vulnerability scanner. It combines a plethora of tools within different module sets in order to quickly perform recon tasks, check network firewalling, enumerate remote and local hosts, and scan for the blue vulnerabilities within Microsoft systems and if unpatched, exploits them.📖 Read
via "Packet Storm Security".
Packetstormsecurity
Sifter 10.6m ≈ Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers
❌ VMware Issues Updated Fix For Critical ESXi Flaw ❌
📖 Read
via "Threat Post".
A previous fix for the critical remote code execution bug was "incomplete," according to VMware.📖 Read
via "Threat Post".
Threat Post
VMware Issues Updated Fix For Critical ESXi Flaw
A previous fix for the critical remote code execution bug was "incomplete," according to VMware.
❌ Toymaker Mattel Hit by Ransomware Attack ❌
📖 Read
via "Threat Post".
Financial disclosure filings describe a ransomware attack that delivered a weak punch.📖 Read
via "Threat Post".
Threat Post
Toymaker Mattel Hit by Ransomware Attack
Financial disclosure filings describe a ransomware attack that delivered weak punch.
🕴 Containers for Data Analysis Are Rife With Vulnerabilities 🕴
📖 Read
via "Dark Reading".
Old software components and the inclusion of unnecessary code created a massive attack surface area in containers for scientific analysis, researchers say.📖 Read
via "Dark Reading".
Dark Reading
Containers for Data Analysis Are Rife With Vulnerabilities
Old software components and the inclusion of unnecessary code created a massive attack surface area in containers for scientific analysis, researchers say.
‼ CVE-2020-2314 ‼
📖 Read
via "National Vulnerability Database".
Jenkins AppSpider Plugin 1.0.12 and earlier stores a password unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system.📖 Read
via "National Vulnerability Database".
🕴 Prepare for the Unexpected: Costs to Consider in Security Budgets 🕴
📖 Read
via "Dark Reading".
Organizations that update business models to include cybersecurity as part of a strategic planning process may be able to better withstand unexpected disruptions.📖 Read
via "Dark Reading".
Dark Reading
Prepare for the Unexpected: Costs to Consider in Security Budgets
Organizations that update business models to include cybersecurity as part of a strategic planning process may be able to better withstand unexpected disruptions.
🔏 Logistics Firm Claims Former Exec Took Secrets to Start New Firm 🔏
📖 Read
via "Digital Guardian".
This US logistics company claims a former board member stole company secrets to set up his own competitor.📖 Read
via "Digital Guardian".
Digital Guardian
Logistics Firm Claims Former Exec Took Secrets to Start New Firm
This US logistics company claims a former board member stole company secrets to set up his own competitor.
‼ CVE-2020-22274 ‼
📖 Read
via "National Vulnerability Database".
JomSocial (Joomla Social Network Extention) 4.7.6 allows CSV injection via a customer's profile.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-22273 ‼
📖 Read
via "National Vulnerability Database".
Neoflex Video Subscription System Version 2.0 is affected by CSRF which allows the Website's Settings to be changed (such as Payment Settings)📖 Read
via "National Vulnerability Database".
‼ CVE-2020-22276 ‼
📖 Read
via "National Vulnerability Database".
WeForms Wordpress Plugin 1.4.7 allows CSV injection via a form's entry.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-22278 ‼
📖 Read
via "National Vulnerability Database".
phpMyAdmin through 5.0.2 allows CSV injection via Export Section📖 Read
via "National Vulnerability Database".
‼ CVE-2020-22275 ‼
📖 Read
via "National Vulnerability Database".
Easy Registration Forms (ER Forms) Wordpress Plugin 2.0.6 allows an attacker to submit an entry with malicious CSV commands. After that, when the system administrator generates CSV output from the forms information, there is no check on this inputs and the codes are executable.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-8036 ‼
📖 Read
via "National Vulnerability Database".
The tok2strbuf() function in tcpdump 4.10.0-PRE-GIT was used by the SOME/IP dissector in an unsafe way.📖 Read
via "National Vulnerability Database".
🕴 Hexagon Announces Deal to Acquire PAS Global 🕴
📖 Read
via "Dark Reading".
The Houston-based PAS Global will operate as part of Hexagon's PPM (formerly Intergraph Process, Power & Marine) division.📖 Read
via "Dark Reading".
Dark Reading
Hexagon Announces Deal to Acquire PAS Global
The Houston-based PAS Global will operate as part of Hexagon's PPM (formerly Intergraph Process, Power & Marine) division.
🦿 What's happening today: The election and online spending 🦿
📖 Read
via "Tech Republic".
As Americans anxiously await clarity regarding final voting counts and results of yesterday's election, a new report found 26% of US consumers correlate who will win with how much they'll spend.📖 Read
via "Tech Republic".
TechRepublic
What's happening today: The election and online spending
As Americans anxiously await clarity regarding final voting counts and results of yesterday's election, a new report found 26% of US consumers correlate who will win with how much they'll spend.
‼ CVE-2020-7128 ‼
📖 Read
via "National Vulnerability Database".
A remote unauthenticated arbitrary code execution vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2.📖 Read
via "National Vulnerability Database".