‼ CVE-2021-21807 ‼
📖 Read
via "National Vulnerability Database".
An integer overflow vulnerability exists in the DICOM parse_dicom_meta_info functionality of Accusoft ImageGear 19.9. A specially crafted malformed file can lead to a stack-based buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-34430 ‼
📖 Read
via "National Vulnerability Database".
Eclipse TinyDTLS through 0.9-rc1 relies on the rand function in the C library, which makes it easier for remote attackers to compute the master key and then decrypt DTLS traffic.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-28809 ‼
📖 Read
via "National Vulnerability Database".
An improper access control vulnerability has been reported to affect certain legacy versions of HBS 3. If exploited, this vulnerability allows attackers to compromise the security of the operating system.QNAP have already fixed this vulnerability in the following versions of HBS 3: QTS 4.3.6: HBS 3 v3.0.210507 and later QTS 4.3.4: HBS 3 v3.0.210506 and later QTS 4.3.3: HBS 3 v3.0.210506 and later📖 Read
via "National Vulnerability Database".
‼ CVE-2021-31817 ‼
📖 Read
via "National Vulnerability Database".
When configuring Octopus Server if it is configured with an external SQL database, on initial configuration the database password is written to the OctopusServer.txt log file in plaintext.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-31816 ‼
📖 Read
via "National Vulnerability Database".
When configuring Octopus Server if it is configured with an external SQL database, on initial configuration the database password is written to the OctopusServer.txt log file in plaintext.📖 Read
via "National Vulnerability Database".
🦿 Ransomware: Top 5 more things to know 🦿
📖 Read
via "Tech Republic".
Ransomware attacks are getting bigger and harder to defend against. Tom Merritt lists five more things about ransomware you need to know.📖 Read
via "Tech Republic".
🕴 What Colonial Pipeline Means for Commercial Building Cybersecurity 🕴
📖 Read
via "Dark Reading".
Banks and hospitals may be common targets, but now commercial real estate must learn to protect itself against stealthy hackers.📖 Read
via "Dark Reading".
Dark Reading
What Colonial Pipeline Means for Commercial Building Cybersecurity
Banks and hospitals may be common targets, but now commercial real estate must learn to protect itself against stealthy hackers.
‼ CVE-2021-21779 ‼
📖 Read
via "National Vulnerability Database".
A use-after-free vulnerability exists in the way Webkit’s GraphicsContext handles certain events in WebKitGTK 2.30.4. A specially crafted web page can lead to a potential information leak and further memory corruption. A victim must be tricked into visiting a malicious web page to trigger this vulnerability.📖 Read
via "National Vulnerability Database".
🕴 The NSA's 'New' Mission: Get More Public With the Private Sector 🕴
📖 Read
via "Dark Reading".
The National Security Agency's gradual emergence from the shadows was "inevitable" in cybersecurity, says Vinnie Liu, co-founder and CEO of offensive security firm Bishop Fox and a former NSA analyst. Now the agency has to figure out how to best work with the private sector, especially organizations outside the well-resourced and seasoned Fortune 100.📖 Read
via "Dark Reading".
Dark Reading
The NSA's 'New' Mission: Get More Public With the Private Sector
The National Security Agency's gradual emergence from the shadows was "inevitable" in cybersecurity, says Vinnie Liu, co-founder and CEO of offensive security firm Bishop Fox and a former NSA analyst. Now the agency has to figure out how to best work with…
🕴 Kaseya Hacked via Authentication Bypass 🕴
📖 Read
via "Dark Reading".
The Kaseya ransomware attack is believed to have been down to an authentication bypass. Yes, ransomware needs to be on your radar -- but good authentication practices are also imperative.📖 Read
via "Dark Reading".
Dark Reading
Kaseya Hacked via Authentication Bypass
The Kaseya ransomware attack is believed to have been down to an authentication bypass. Yes, ransomware needs to be on your radar -- but good authentication practices are also imperative.
🦿 Android app users targeted with cryptomining scams 🦿
📖 Read
via "Tech Republic".
Found on Google Play and third-party app stores, the apps discovered by Lookout stole an estimated $350,000 from more than 93,000 people.📖 Read
via "Tech Republic".
TechRepublic
Android app users targeted with cryptomining scams
Found on Google Play and third-party app stores, the apps discovered by Lookout stole an estimated $350,000 from more than 93,000 people.
🦿 77% of executives plan to hire in the months ahead, according to a new poll 🦿
📖 Read
via "Tech Republic".
West Monroe's executive poll details third-quarter hiring expectations, cybersecurity preparedness, investments to digitize business operations and more.📖 Read
via "Tech Republic".
TechRepublic
77% of executives plan to hire in the months ahead, according to a new poll
West Monroe's executive poll details third-quarter hiring expectations, cybersecurity preparedness, investments to digitize business operations and more.
🦿 "Black Widow" digital premier a cover for malware and scams, says Kaspersky 🦿
📖 Read
via "Tech Republic".
Phishing, malicious files and other forms of fraud have followed the highly awaited movie since it was first delayed due to COVID-19. On the eve of its actual release, the scams have begun anew.📖 Read
via "Tech Republic".
TechRepublic
"Black Widow" digital premier a cover for malware and scams, says Kaspersky
Phishing, malicious files and other forms of fraud have followed the highly awaited movie since it was first delayed due to COVID-19. On the eve of its actual release, the scams have begun anew.
❌ How Fake Accounts and Sneaker-Bots Took Over the Internet ❌
📖 Read
via "Threat Post".
Jason Kent, hacker-in-residence at Cequence Security, discusses fake online accounts, and the fraud they carry out on a daily basis.📖 Read
via "Threat Post".
Threat Post
How Fake Accounts and Sneaker-Bots Took Over the Internet
Jason Kent, hacker-in-residence at Cequence Security, discusses fake online accounts, and the fraud they carry out on a daily basis.
‼ CVE-2021-29150 ‼
📖 Read
via "National Vulnerability Database".
A remote insecure deserialization vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.10.0, 6.9.6 and 6.8.9. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-25440 ‼
📖 Read
via "National Vulnerability Database".
Improper access control vulnerability in FactoryCameraFB prior to version 3.4.74 allows untrusted applications to access arbitrary files with an escalated privilege.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-25439 ‼
📖 Read
via "National Vulnerability Database".
Improper access control vulnerability in Samsung Members prior to versions 2.4.85.11 in Android O(8.1) and below, and 3.9.10.11 in Android P(9.0) and above allows untrusted applications to cause arbitrary webpage loading in webview.📖 Read
via "National Vulnerability Database".
⚠ PrintNightmare official patch is out – update now! ⚠
📖 Read
via "Naked Security".
Patch now! This security hole could allow almost anyone to take over your whole network from almost any account on almost any computer.📖 Read
via "Naked Security".
Naked Security
PrintNightmare official patch is out – update now!
Patch now! This security hole could allow almost anyone to take over your whole network from almost any account on almost any computer.
🦿 Microsoft patches remaining versions of Windows against PrintNightmare flaw 🦿
📖 Read
via "Tech Republic".
Patches to fix a severe flaw in the Windows Print spooler are now available for Windows 10 Version 1607, Windows Server 2012 and Windows Server 2016.📖 Read
via "Tech Republic".
❌ Coursera Flunks API Security Test in Researchers’ Exam ❌
📖 Read
via "Threat Post".
The problem APIs included numero uno on the OWASP API Security Top 10: a Broken Object Level Authorization (BOLA) issue that could have exposed personal data.📖 Read
via "Threat Post".
Threat Post
Coursera Flunks API Security Test in Researchers’ Exam
The problem APIs included numero uno on the OWASP API Security Top 10: a Broken Object Level Authorization (BOLA) issue that could have exposed personal data.
‼ CVE-2021-29711 ‼
📖 Read
via "National Vulnerability Database".
IBM UrbanCode Deploy (UCD) 6.2.7.3, 6.2.7.4, 6.2.7.8 , 6.2.7.9, 7.0.3.0, 7.0.4.0, 7.0.5.4, 7.1.0.0, 7.1.1.0, 7.1.1.1, and 7.1.1.2 could allow an authenticated user with certain permissions to initiate an agent upgrade through the CLI interface. IBM X-Force ID: 200965.📖 Read
via "National Vulnerability Database".