❌ Apple Releases Urgent iOS Updates to Patch New Zero-Day Bug ❌
📖 Read
via "Threat Post".
The bug is under attack. Within hours of the patch release, a researcher published POC code, calling it a "great" flaw that can be used for jailbreaks and local privilege escalation.📖 Read
via "Threat Post".
Threat Post
Apple Releases Urgent iOS Updates to Patch New Zero-Day Bug
The bug is under attack. Within hours of the patch release, a researcher published POC code, calling it a "great" flaw that can be used for jailbreaks and local privilege escalation.
🦿 Remote security: 5 tips 🦿
📖 Read
via "Tech Republic".
Tom Merritt shows us how to be extra safe while more workers than ever before are working from their home offices.📖 Read
via "Tech Republic".
TechRepublic
Remote security: 5 tips
Tom Merritt shows us how to be extra safe while more workers than ever before are working from their home offices.
🦿 Top 5 tips for remote security 🦿
📖 Read
via "Tech Republic".
With more workers at home than ever before, security has become an even bigger concern. Tom Merritt shows us how to be extra safe.📖 Read
via "Tech Republic".
TechRepublic
Top 5 tips for remote security
With more workers at home than ever before, security has become an even bigger concern. Tom Merritt shows us how to be extra safe.
🦿 How to protect your organization from security threats across your supply chain 🦿
📖 Read
via "Tech Republic".
In a survey by BlueVoyant, 97% of people said they've been impacted by a security breach that occurred in their supply chain.📖 Read
via "Tech Republic".
TechRepublic
How to protect your organization from security threats across your supply chain
In a survey by BlueVoyant, 97% of people said they've been impacted by a security breach that occurred in their supply chain.
🗓️ NSA warns of heightened wildcard TLS certificate risk 🗓️
📖 Read
via "The Daily Swig".
Wild Alpaca peril📖 Read
via "The Daily Swig".
The Daily Swig | Cybersecurity news and views
NSA warns of heightened wildcard TLS certificate risk
Wild Alpaca peril
🕴 Google Launches Security Advisory Service, Security to Workspaces 🕴
📖 Read
via "Dark Reading".
Internet giant aims to help companies use the cloud securely and adds more security features to its productivity workspaces to better compete with Microsoft.📖 Read
via "Dark Reading".
Dark Reading
Google Launches Security Advisory Service, Security to Workspaces
Internet giant aims to help companies use the cloud securely and adds more security features to its productivity workspaces to better compete with Microsoft.
‼ CVE-2021-38452 ‼
📖 Read
via "National Vulnerability Database".
A path traversal vulnerability in the Moxa MXview Network Management software Versions 3.x to 3.2.2 may allow an attacker to create or overwrite critical files used to execute code, such as programs or libraries.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-40498 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability has been identified in SAP SuccessFactors Mobile Application for Android - versions older than 2108, which allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service, which can lead to denial of service. The vulnerability is related to Android implementation methods that are widely used across Android mobile applications, and such methods are embedded into the SAP SuccessFactors mobile application. These Android methods begin executing once the user accesses their profile on the mobile application. While executing, it can also pick up the activities from other Android applications that are running in the background of the users device and are using the same types of methods in the application. Such vulnerability can also lead to phishing attacks that can be used for staging other types of attacks.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-38454 ‼
📖 Read
via "National Vulnerability Database".
A path traversal vulnerability in the Moxa MXview Network Management software Versions 3.x to 3.2.2 may allow an attacker to create or overwrite critical files used to execute code, such as programs or libraries.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-25634 ‼
📖 Read
via "National Vulnerability Database".
LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alteration of the document occurred since the last signing and that the signature is valid. An Improper Certificate Validation vulnerability in LibreOffice allowed an attacker to modify a digitally signed ODF document to insert an additional signing time timestamp which LibreOffice would incorrectly present as a valid signature signed at the bogus signing time. This issue affects: The Document Foundation LibreOffice 7-0 versions prior to 7.0.6; 7-1 versions prior to 7.1.2.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-38456 ‼
📖 Read
via "National Vulnerability Database".
A path traversal vulnerability in the Moxa MXview Network Management software Versions 3.x to 3.2.2 may allow an attacker to create or overwrite critical files used to execute code, such as programs or libraries.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-40500 ‼
📖 Read
via "National Vulnerability Database".
SAP BusinessObjects Business Intelligence Platform (Crystal Reports) - versions 420, 430, allows an unauthenticated attacker to exploit missing XML validations at endpoints to read sensitive data. These endpoints are normally exposed over the network and successful exploitation can enable the attacker to retrieve arbitrary files from the server.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-38460 ‼
📖 Read
via "National Vulnerability Database".
A path traversal vulnerability in the Moxa MXview Network Management software Versions 3.x to 3.2.2 may allow an attacker to create or overwrite critical files used to execute code, such as programs or libraries.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-37726 ‼
📖 Read
via "National Vulnerability Database".
A remote buffer overflow vulnerability was discovered in HPE Aruba Instant (IAP) version(s): Aruba Instant 8.7.x.x: 8.7.0.0 through 8.7.1.2. Aruba has released patches for Aruba Instant (IAP) that address this security vulnerability.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-40495 ‼
📖 Read
via "National Vulnerability Database".
There are multiple Denial-of Service vulnerabilities in SAP NetWeaver Application Server for ABAP and ABAP Platform - versions 740, 750, 751, 752, 753, 754, 755. An unauthorized attacker can use the public SICF service /sap/public/bc/abap to reduce the performance of SAP NetWeaver Application Server ABAP and ABAP Platform.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-38180 ‼
📖 Read
via "National Vulnerability Database".
SAP Business One - version 10.0, allows an attacker to inject formulas when exporting data to Excel (CSV injection) due to improper sanitation during the data export. An attacker could thereby execute arbitrary commands on the victim's computer but only if the victim allows to execute macros while opening the file and the security settings of Excel allow for command execution.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-38178 ‼
📖 Read
via "National Vulnerability Database".
The software logistics system of SAP NetWeaver AS ABAP and ABAP Platform versions - 700, 701, 702, 710, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756, enables a malicious user to transfer ABAP code artifacts or content, by-passing the established quality gates. By this vulnerability malicious code can reach quality and production, and can compromise the confidentiality, integrity, and availability of the system and its data.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-38183 ‼
📖 Read
via "National Vulnerability Database".
SAP NetWeaver - versions 700, 701, 702, 730, does not sufficiently encode user-controlled inputs, allowing an attacker to cause a potential victim to supply a malicious content to a vulnerable web application, which is then reflected to the victim and executed by the web browser, resulting in Cross-Site Scripting vulnerability.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-40497 ‼
📖 Read
via "National Vulnerability Database".
SAP BusinessObjects Analysis (edition for OLAP) - versions 420, 430, allows an attacker to exploit certain application endpoints to read sensitive data. These endpoints are normally exposed over the network and successful exploitation could lead to exposure of some system specific data like its version.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-21940 ‼
📖 Read
via "National Vulnerability Database".
A heap-based buffer overflow vulnerability exists in the pushMuxer processRtspInfo functionality of Anker Eufy Homebase 2 2.1.6.9h. A specially-crafted network packet can lead to a heap buffer overflow. An attacker can send a malicious packet to trigger this vulnerability.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-37727 ‼
📖 Read
via "National Vulnerability Database".
A remote arbitrary command execution vulnerability was discovered in HPE Aruba Instant (IAP) version(s): 6.4.x.x: 6.4.4.8-4.2.4.18 and below; Aruba Instant 6.5.x.x: 6.5.4.20 and below; Aruba Instant 8.5.x.x: 8.5.0.12 and below; Aruba Instant 8.6.x.x: 8.6.0.11 and below; Aruba Instant 8.7.x.x: 8.7.1.3 and below. Aruba has released patches for Aruba Instant (IAP) that address this security vulnerability.📖 Read
via "National Vulnerability Database".