🕴 Cloud Security Startup Armo Emerges from Stealth with $4.5M 🕴
📖 Read
via "Dark Reading".
Armo's platform was developed to protect cloud-native workloads and provide DevOps teams with greater visibility and control.📖 Read
via "Dark Reading".
Dark Reading
Cloud Security Startup Armo Emerges from Stealth with $4.5M
Armo's platform was developed to protect cloud-native workloads and provide DevOps teams with greater visibility and control.
❌ WordPress Pop-Up Builder Plugin Flaw Plagues 200K Sites ❌
📖 Read
via "Threat Post".
The flaw could have let attackers send out custom newsletters and delete newsletter subscribers from 200,000 affected websites.📖 Read
via "Threat Post".
Threat Post
WordPress Pop-Up Builder Plugin Flaw Plagues 200K Sites
The flaw could have let attackers send out custom newsletters and delete newsletter subscribers from 200,000 affected websites.
❌ Microsoft 365 Becomes Haven for BEC Innovation ❌
📖 Read
via "Threat Post".
Two new phishing tactics use the platform's automated responses to evade email filters.📖 Read
via "Threat Post".
Threat Post
Microsoft 365 Becomes Haven for BEC Innovation
Two new phishing tactics use the platform's automated responses to evade email filters.
‼ CVE-2021-21254 ‼
📖 Read
via "National Vulnerability Database".
CKEditor 5 is an open source rich text editor framework with a modular architecture. The CKEditor 5 Markdown plugin (@ckeditor/ckeditor5-markdown-gfm) before version 25.0.0 has a regex denial of service (ReDoS) vulnerability. The vulnerability allowed to abuse link recognition regular expression, which could cause a significant performance drop resulting in browser tab freeze. It affects all users using CKEditor 5 Markdown plugin at version <= 24.0.0. The problem has been recognized and patched. The fix will be available in version 25.0.0.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-17380 ‼
📖 Read
via "National Vulnerability Database".
A heap-based buffer overflow was found in QEMU through 5.0.0 in the SDHCI device emulation support. It could occur while doing a multi block SDMA transfer via the sdhci_sdma_transfer_multi_blocks() routine in hw/sd/sdhci.c. A guest user or process could use this flaw to crash the QEMU process on the host, resulting in a denial of service condition, or potentially execute arbitrary code with privileges of the QEMU process on the host.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-14418 ‼
📖 Read
via "National Vulnerability Database".
A TOCTOU vulnerability exists in madCodeHook before 2020-07-16 that allows local attackers to elevate their privileges to SYSTEM. This occurs because path redirection can occur via vectors involving directory junctions.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-15690 ‼
📖 Read
via "National Vulnerability Database".
In Nim before 1.2.6, the standard library asyncftpclient lacks a check for whether a message contains a newline character.📖 Read
via "National Vulnerability Database".
⚠ GnuPG crypto library can be pwned during decryption – patch now! ⚠
📖 Read
via "Naked Security".
Many, if not most, Linux distros will be affected. Users of other operating systems should check for software that uses libgcrypt.📖 Read
via "Naked Security".
Sophos News
Naked Security – Sophos News
‼ CVE-2021-23329 ‼
📖 Read
via "National Vulnerability Database".
The package nested-object-assign before 1.0.4 are vulnerable to Prototype Pollution via the default function, as demonstrated by running the PoC below.📖 Read
via "National Vulnerability Database".
⚠ Emotet takedown – Europol attacks “world’s most dangerous malware” ⚠
📖 Read
via "Naked Security".
Great news from Europol - if you've heard of Emotet, you'll have a good idea how badly things often end for its victims.📖 Read
via "Naked Security".
Naked Security
Emotet takedown – Europol attacks “world’s most dangerous malware”
Great news from Europol – if you’ve heard of Emotet, you’ll have a good idea how badly things often end for its victims.
🦿 Security chaos engineering helps you find weak links in your cyber defenses before attackers do 🦿
📖 Read
via "Tech Republic".
Security experts explain why this approach is all about data and resilience, not deliberately sabotaging your own network.📖 Read
via "Tech Republic".
TechRepublic
Security chaos engineering helps you find weak links in your cyber defenses before attackers do
Security experts explain why this approach is all about data and resilience, not deliberately sabotaging your own network.
🕴 Strengthening Zero-Trust Architecture 🕴
📖 Read
via "Dark Reading".
Organizations that want to stay ahead of cybercriminals will find that going beyond user trust and device trust is critical for outwitting their adversaries.📖 Read
via "Dark Reading".
Dark Reading
Strengthening Zero-Trust Architecture
Organizations that want to stay ahead of cybercriminals will find that going beyond user trust and device trust is critical for outwitting their adversaries.
‼ CVE-2020-36109 ‼
📖 Read
via "National Vulnerability Database".
ASUS RT-AX86U router firmware below version under 9.0.0.4_386 has a buffer overflow in the blocking_request.cgi function of the httpd module that can cause code execution when an attacker constructs malicious data.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-28194 ‼
📖 Read
via "National Vulnerability Database".
Variable underflow exists in accel-ppp radius/packet.c when receiving a RADIUS vendor-specific attribute with length field is less than 2. It has an impact only when the attacker controls the RADIUS server, which can lead to arbitrary code execution.📖 Read
via "National Vulnerability Database".
🛠 AIDE 0.17.1 🛠
📖 Read
via "Packet Storm Security".
AIDE (Advanced Intrusion Detection Environment) is a free replacement for Tripwire(tm). It generates a database that can be used to check the integrity of files on server. It uses regular expressions for determining which files get added to the database. You can use several message digest algorithms to ensure that the files have not been tampered with.📖 Read
via "Packet Storm Security".
Packetstormsecurity
AIDE 0.17.1 ≈ Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers
🛠 Wireshark Analyzer 3.4.3 🛠
📖 Read
via "Packet Storm Security".
Wireshark is a GTK+-based network protocol analyzer that lets you capture and interactively browse the contents of network frames. The goal of the project is to create a commercial-quality analyzer for Unix and Win32 and to give Wireshark features that are missing from closed-source sniffers. This is the source code release.📖 Read
via "Packet Storm Security".
Packetstormsecurity
Wireshark Analyzer 3.4.3 ≈ Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers
🕴 Rapid7 Acquires Alcide, Strengthens Focus on Cloud 🕴
📖 Read
via "Dark Reading".
Its $50 million purchase of Alcide, a Kubernetes security provider, follows its 2020 acquisition of cloud security vendor DivvyCloud.📖 Read
via "Dark Reading".
Dark Reading
Rapid7 Acquires Alcide, Strengthens Focus on Cloud
Its $50 million purchase of Alcide, a Kubernetes security provider, follows its 2020 acquisition of cloud security vendor DivvyCloud.
❌ Alleged Gaming Software Supply-Chain Attack Installs Spyware ❌
📖 Read
via "Threat Post".
Researchers allege that software used for downloading Android apps onto PCs and Macs has been compromised to install malware onto victim devices.📖 Read
via "Threat Post".
Threat Post
Alleged Gaming Software Supply-Chain Attack Installs Spyware
Researchers allege that software used for downloading Android apps onto PCs and Macs has been compromised to install malware onto victim devices.
❌ Critical Libgcrypt Crypto Bug Opens Machines to Arbitrary Code ❌
📖 Read
via "Threat Post".
The flaw in the free-source library could have been ported to multiple applications.📖 Read
via "Threat Post".
Threat Post
Critical Libgcrypt Crypto Bug Opens Machines to Arbitrary Code
The flaw in the free-source library could have been ported to multiple applications.
‼ CVE-2020-28426 ‼
📖 Read
via "National Vulnerability Database".
All versions of package kill-process-on-port are vulnerable to Command Injection via a.getProcessPortId.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-21277 ‼
📖 Read
via "National Vulnerability Database".
angular-expressions is "angular's nicest part extracted as a standalone module for the browser and node". In angular-expressions before version 1.1.2 there is a vulnerability which allows Remote Code Execution if you call "expressions.compile(userControlledInput)" where "userControlledInput" is text that comes from user input. The security of the package could be bypassed by using a more complex payload, using a ".constructor.constructor" technique. In terms of impact: If running angular-expressions in the browser, an attacker could run any browser script when the application code calls expressions.compile(userControlledInput). If running angular-expressions on the server, an attacker could run any Javascript expression, thus gaining Remote Code Execution. This is fixed in version 1.1.2 of angular-expressions A temporary workaround might be either to disable user-controlled input that will be fed into angular-expressions in your application or allow only following characters in the userControlledInput.📖 Read
via "National Vulnerability Database".