❌ Google Services Weaponized to Bypass Security in Phishing, BEC Campaigns ❌
📖 Read
via "Threat Post".
Attackers exploiting an array of Google Services, including Forms, Firebase, Docs and more to boost phishing and BEC campaigns.📖 Read
via "Threat Post".
Threat Post
Google Services Weaponized to Bypass Security in Phishing, BEC Campaigns
Attackers exploiting an array of Google Services, including Forms, Firebase, Docs and more to boost phishing and BEC campaigns.
‼ CVE-2020-4004 ‼
📖 Read
via "National Vulnerability Database".
VMware ESXi (7.0 before ESXi70U1b-17168206, 6.7 before ESXi670-202011101-SG, 6.5 before ESXi650-202011301-SG), Workstation (15.x before 15.5.7), Fusion (11.x before 11.5.7) contain a use-after-free vulnerability in the XHCI USB controller. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-28845 ‼
📖 Read
via "National Vulnerability Database".
A CSV injection vulnerability in the Admin portal for Netskope 75.0 allows an unauthenticated user to inject malicious payload in admin's portal thus leads to compromise admin's system.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-20739 ‼
📖 Read
via "National Vulnerability Database".
im_vips2dz in /libvips/libvips/deprecated/im_vips2dz.c in libvips before 8.8.2 has an uninitialized variable which may cause the leakage of remote server path or stack address.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-4005 ‼
📖 Read
via "National Vulnerability Database".
VMware ESXi (7.0 before ESXi70U1b-17168206, 6.7 before ESXi670-202011101-SG, 6.5 before ESXi650-202011301-SG) contains a privilege-escalation vulnerability that exists in the way certain system calls are being managed. A malicious actor with privileges within the VMX process only, may escalate their privileges on the affected system. Successful exploitation of this issue is only possible when chained with another vulnerability (e.g. CVE-2020-4004)📖 Read
via "National Vulnerability Database".
‼ CVE-2020-20740 ‼
📖 Read
via "National Vulnerability Database".
PDFResurrect before 0.20 lack of header validation checks causes heap-buffer-overflow in pdf_get_version().📖 Read
via "National Vulnerability Database".
‼ CVE-2020-5797 ‼
📖 Read
via "National Vulnerability Database".
UNIX Symbolic Link (Symlink) Following in TP-Link Archer C9(US)_V1_180125 firmware allows an unauthenticated actor, with physical access and network access, to read sensitive files and write to a limited set of files after plugging a crafted USB drive into the router.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-25185 ‼
📖 Read
via "National Vulnerability Database".
The affected product is vulnerable to five post-authentication buffer overflows, which may allow a logged in user to remotely execute arbitrary code on the IP150 (firmware versions 5.02.09).📖 Read
via "National Vulnerability Database".
‼ CVE-2020-25725 ‼
📖 Read
via "National Vulnerability Database".
In Xpdf 4.02, SplashOutputDev::endType3Char(GfxState *state) SplashOutputDev.cc:3079 is trying to use the freed `t3GlyphStack->cache`, which causes an `heap-use-after-free` problem. The codes of a previous fix for nested Type 3 characters wasn't correctly handling the case where a Type 3 char referred to another char in the same Type 3 font.📖 Read
via "National Vulnerability Database".
🕴 10 Undergraduate Security Degree Programs to Explore 🕴
📖 Read
via "Dark Reading".
Colleges and universities are ramping up cybersecurity education with a wider range of degree programs and more resources for students to build their infosec careers.📖 Read
via "Dark Reading".
Dark Reading
10 Undergraduate Security Degree Programs to Explore
Colleges and universities are ramping up cybersecurity education with a wider range of degree programs and more resources for students to build their infosec careers.
🕴 How Retailers Can Fight Fraud and Abuse This Holiday Season 🕴
📖 Read
via "Dark Reading".
Online shopping will be more popular than ever with consumers... and with malicious actors too.📖 Read
via "Dark Reading".
Dark Reading
How Retailers Can Fight Fraud and Abuse This Holiday Season
Online shopping will be more popular than ever with consumers... and with malicious actors too.
⚠ Facebook patches Messenger audio snooping bug – update now! ⚠
📖 Read
via "Naked Security".
Do you ever make, ahem, "pointed remarks" just before answering calls from people you would rather avoid?📖 Read
via "Naked Security".
Naked Security
Facebook patches Messenger audio snooping bug – update now!
Do you ever make, ahem, “pointed remarks” just before answering calls from people you would rather avoid?
⚠ Naked Security Live – Beat the Threat! ⚠
📖 Read
via "Naked Security".
Here's the latest Naked Security Live video - how to beat the crooks! Watch now...📖 Read
via "Naked Security".
Naked Security
Naked Security Live – Beat the Threat!
Here’s the latest Naked Security Live video – how to beat the crooks! Watch now…
🕴 3 Steps CISOs Can Take to Convey Strategy for Budget Presentations 🕴
📖 Read
via "Dark Reading".
Answering these questions will help CISOs define a plan and take the organization in a positive direction.📖 Read
via "Dark Reading".
Dark Reading
3 Steps CISOs Can Take to Convey Strategy for Budget Presentations
Answering these questions will help CISOs define a plan and take the organization in a positive direction.
‼ CVE-2020-28053 ‼
📖 Read
via "National Vulnerability Database".
HashiCorp Consul and Consul Enterprise 1.2.0 up to 1.8.5 allowed operators with operator:read ACL permissions to read the Connect CA private key configuration. Fixed in 1.6.10, 1.7.10, and 1.8.6.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-27985 ‼
📖 Read
via "National Vulnerability Database".
Security Onion v2 prior to 2.3.10 has an incorrect sudo configuration, which allows local users to obtain root access by editing and executing /home/<user>/SecurityOnion/setup/so-setup.📖 Read
via "National Vulnerability Database".
🛠 TestSSL 3.0.4 🛠
📖 Read
via "Packet Storm Security".
testssl.sh is a free command line tool which checks a server's service on any port for the support of TLS/SSL ciphers, protocols as well as recent cryptographic flaws, and much more. It is written in (pure) bash, makes only use of standard Unix utilities, openssl and last but not least bash sockets.📖 Read
via "Packet Storm Security".
Packetstormsecurity
TestSSL 3.0.4 ≈ Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers
🛠 AIEngine 2.0.1 🛠
📖 Read
via "Packet Storm Security".
AIEngine is a packet inspection engine with capabilities of learning without any human intervention. It helps network/security professionals to identify traffic and develop signatures for use them on NIDS, Firewalls, Traffic classifiers and so on.📖 Read
via "Packet Storm Security".
Packetstormsecurity
AIEngine 2.0.1 ≈ Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers
❌ Manchester United: IT Systems Disrupted in Cyberattack ❌
📖 Read
via "Threat Post".
The popular U.K. soccer club confirmed an attack but said personal fan data remains secure.📖 Read
via "Threat Post".
Threat Post
Manchester United: IT Systems Disrupted in Cyberattack
The popular U.K. soccer club confirmed an attack but said personal fan data remains secure.
‼ CVE-2020-7777 ‼
📖 Read
via "National Vulnerability Database".
This affects all versions of package jsen. If an attacker can control the schema file, it could run arbitrary JavaScript code on the victim machine. In the module description and README file there is no mention about the risks of untrusted schema files, so I assume that this is applicable. In particular the required field of the schema is not properly sanitized. The resulting string that is build based on the schema definition is then passed to a Function.apply();, leading to an Arbitrary Code Execution.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-28421 ‼
📖 Read
via "National Vulnerability Database".
CA Unified Infrastructure Management 20.1 and earlier contains a vulnerability in the robot (controller) component that allows local attackers to elevate privileges.📖 Read
via "National Vulnerability Database".