🕴 Microsoft Tracks Attack Campaign Against Customer Support Agents 🕴
📖 Read
via "Dark Reading".
The company attributes the attack to Nobelium, the same group it linked to the SolarWinds campaign earlier this year.📖 Read
via "Dark Reading".
‼ CVE-2020-22607 ‼
📖 Read
via "National Vulnerability Database".
Cross Site Scripting vulnerabilty in LimeSurvey 4.1.11+200316 via the (1) name and (2) description parameters in application/controllers/admin/PermissiontemplatesController.php.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-22609 ‼
📖 Read
via "National Vulnerability Database".
Cross Site Scripting (XSS) vulnerability in Enhancesoft osTicket before v1.12.6 via the queue-name parameter in include/class.queue.php.📖 Read
via "National Vulnerability Database".
🕴 New House Bill Aims to Drive Americans' Security Awareness 🕴
📖 Read
via "Dark Reading".
The legislation requires the National Telecommunications and Information Administration to establish a cybersecurity literacy campaign.📖 Read
via "Dark Reading".
❌ NVIDIA Patches High-Severity GeForce Spoof-Attack Bug ❌
📖 Read
via "Threat Post".
A vulnerability in NVIDIA’s GeForce Experience software opens the door to remote data access, manipulation and deletion.📖 Read
via "Threat Post".
Threat Post
NVIDIA Patches High-Severity GeForce Spoof-Attack Bug
Vulnerability in NVIDIA’s GeForce Experience software opens door to remote data access, manipulation and deletion.
🔏 Data Protection Act of 2021 Would Create US Data Protection Agency 🔏
📖 Read
via "".
The proposed legislation would create an agency to enforce data protection rules and oversee high-risk data practices.📖 Read
via "".
Digital Guardian
Data Protection Act of 2021 Would Create US Data Protection Agency
The proposed legislation would create an agency to enforce data protection rules and oversee high-risk data practices.
❌ 5G Security Vulnerabilities Fluster Mobile Operators ❌
📖 Read
via "Threat Post".
A survey from GSMA and Trend Micro shows a concerning lack of security capabilities for private 5G networks (think factories, smart cities, industrial IoT, utilities and more).📖 Read
via "Threat Post".
Threat Post
5G Security Vulnerabilities Fluster Mobile Operators
A survey from GSMA and Trend Micro shows a concerning lack of security capabilities for private 5G networks (think factories, smart cities, industrial IoT, utilities and more).
🕴 Attacks Erase Western Digital Network-Attached Storage Drives 🕴
📖 Read
via "Dark Reading".
The company suspects a remote code execution vulnerability affecting My Book Live and My Book Live Duo devices and recommends that business and individual users turn off the drives to protect their data.📖 Read
via "Dark Reading".
Dark Reading
Attacks Erase Western Digital Network-Attached Storage Drives
The company suspects a remote code execution vulnerability affecting My Book Live and My Book Live Duo devices and recommends that business and individual users turn off the drives to protect their data.
‼ CVE-2020-21142 ‼
📖 Read
via "National Vulnerability Database".
Cross Site Scripting (XSS) vulnerabilty in IPFire 2.23 via the IPfire web UI in the mail.cgi.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-35298 ‼
📖 Read
via "National Vulnerability Database".
Cross Site Scripting (XSS) in Zammad 1.0.x up to 4.0.0 allows remote attackers to execute arbitrary web script or HTML via multiple models that contain a 'note' field to store additional information.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-35302 ‼
📖 Read
via "National Vulnerability Database".
Incorrect Access Control for linked Tickets in Zammad 1.0.x up to 4.0.0 allows remote attackers to obtain sensitive information.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-32722 ‼
📖 Read
via "National Vulnerability Database".
GlobalNewFiles is a mediawiki extension. All existing versions of GlobalNewFiles are affected by an uncontrolled resource consumption vulnerability. A large amount of page moves within a short space of time could overwhelm Database servers due to improper handling of load balancing and a lack of an appropriate index. No patches are currently available. As a workaround, one may avoid use of the extension unless additional rate limit at the MediaWiki level or via PoolCounter / MySQL is enabled.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-35303 ‼
📖 Read
via "National Vulnerability Database".
Cross Site Scripting (XSS) in Zammad 1.0.x up to 4.0.0 allows remote attackers to execute arbitrary web script or HTML via the User Avatar attribute.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-32723 ‼
📖 Read
via "National Vulnerability Database".
Prism is a syntax highlighting library. Some languages before 1.24.0 are vulnerable to Regular Expression Denial of Service (ReDoS). When Prism is used to highlight untrusted (user-given) text, an attacker can craft a string that will take a very very long time to highlight. This problem has been fixed in Prism v1.24. As a workaround, do not use ASCIIDoc or ERB to highlight untrusted text. Other languages are not affected and can be used to highlight untrusted text.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-35301 ‼
📖 Read
via "National Vulnerability Database".
Incorrect Access Control in Zammad 1.0.x up to 4.0.0 allows remote attackers to obtain sensitive information via the Ticket Article detail view.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-35299 ‼
📖 Read
via "National Vulnerability Database".
Incorrect Access Control in Zammad 1.0.x up to 4.0.0 allows attackers to obtain sensitive information via email connection configuration probing.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-35300 ‼
📖 Read
via "National Vulnerability Database".
Text injection/Content Spoofing in 404 page in Zammad 1.0.x up to 4.0.0 could allow remote attackers to manipulate users into visiting the attackers' page.📖 Read
via "National Vulnerability Database".
🕴 Microsoft Refining Third-Party Driver Vetting Processes After Signing Malicious Rootkit 🕴
📖 Read
via "Dark Reading".
Rogue driver was distributed within gaming community in China, company says.📖 Read
via "Dark Reading".
Dark Reading
Microsoft Refining Third-Party Driver Vetting Processes After Signing Malicious Rootkit
Rogue driver was distributed within gaming community in China, company says.
❌ Data for 700M LinkedIn Users Posted for Sale in Cyber-Underground ❌
📖 Read
via "Threat Post".
After 500 million LinkedIn enthusiasts were affected in a data-scraping incident in April, it's happened again - with big security ramifications.📖 Read
via "Threat Post".
Threat Post
Data for 700M LinkedIn Users Posted for Sale in Cyber-Underground
After 500 million LinkedIn enthusiasts were affected in a data-scraping incident in April, it's happened again - with big security ramifications.
‼ CVE-2021-1134 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability in the Cisco Identity Services Engine (ISE) integration feature of the Cisco DNA Center Software could allow an unauthenticated, remote attacker to gain unauthorized access to sensitive data. The vulnerability is due to an incomplete validation of the X.509 certificate used when establishing a connection between DNA Center and an ISE server. An attacker could exploit this vulnerability by supplying a crafted certificate and could then intercept communications between the ISE and DNA Center. A successful exploit could allow the attacker to view and alter sensitive information that the ISE maintains about clients that are connected to the network.📖 Read
via "National Vulnerability Database".
❌ Cobalt Strike Usage Explodes Among Cybercrooks ❌
📖 Read
via "Threat Post".
The legit security tool has shown up 161 percent more, year-over-year, in cyberattacks, having “gone fully mainstream in the crimeware world.”📖 Read
via "Threat Post".
Threat Post
Cobalt Strike Usage Explodes Among Cybercrooks
The legit security tool has shown up 161 percent more, year-over-year, in cyberattacks, having “gone fully mainstream in the crimeware world.”