❌ TrickBot Gang Enters Cybercrime Elite with Fresh Affiliates ❌
📖 Read
via "Threat Post".
The group – which also created BazarLoader and the Conti ransomware – has juiced its distribution tactics to threaten enterprises more than ever.📖 Read
via "Threat Post".
Threat Post
TrickBot Gang Enters Cybercrime Elite with Fresh Affiliates
The group – which also created BazarLoader and the Conti ransomware – has juiced its distribution tactics to threaten enterprises more than ever.
‼ CVE-2021-28021 ‼
📖 Read
via "National Vulnerability Database".
Buffer overflow vulnerability in function stbi__extend_receive in stb_image.h in stb 2.26 via a crafted JPEG file.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-29745 ‼
📖 Read
via "National Vulnerability Database".
IBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to priviledge escalation where a lower evel user could have access to the 'New Job' page to which they should not have access to. IBM X-Force ID: 201695.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-29679 ‼
📖 Read
via "National Vulnerability Database".
IBM Cognos Analytics 11.1.7 and 11.2.0 could allow an authenticated user to execute code remotely due to incorrectly neutralizaing user-contrlled input that could be interpreted a a server-side include (SSI) directive. IBM X-Force ID: 199915.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-41320 ‼
📖 Read
via "National Vulnerability Database".
A technical user has hardcoded credentials in Wallstreet Suite TRM 7.4.83 (64-bit edition) with higher privilege than the average authenticated user.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-4951 ‼
📖 Read
via "National Vulnerability Database".
IBM Cognos Analytics 11.1.7 and 11.2.0 contains locally cached browser data, that could allow a local attacker to obtain sensitive information.📖 Read
via "National Vulnerability Database".
🦿 How to use DocSecrets to encrypt sections of your Google Docs 🦿
📖 Read
via "Tech Republic".
If you need to hide sections of text in Google Documents, give the handy DocSecrets add-on a try.📖 Read
via "Tech Republic".
TechRepublic
How to use DocSecrets to encrypt sections of your Google Docs - TechRepublic
If you need to hide sections of text in Google Documents, give the handy DocSecrets add-on a try.
‼ CVE-2021-27561 ‼
📖 Read
via "National Vulnerability Database".
Yealink Device Management (DM) 3.6.0.20 allows command injection as root via the /sm/api/v1/firewall/zone/services URI, without authentication.📖 Read
via "National Vulnerability Database".
🕴 Cisco Duo Trusted Access Report: More Than 50% of Companies Plan Passwordless Move 🕴
📖 Read
via "Dark Reading".
Multifactor authentications soar as enterprises move away from passwords to secure hybrid workers.📖 Read
via "Dark Reading".
Dark Reading
Cisco Duo Trusted Access Report: More Than 50% of Companies Plan Passwordless Move
Multifactor authentications soar as enterprises move away from passwords to secure hybrid workers.
‼ CVE-2018-16060 ‼
📖 Read
via "National Vulnerability Database".
Mitsubishi Electric SmartRTU devices allow remote attackers to obtain sensitive information (directory listing and source code) via a direct request to the /web URI.📖 Read
via "National Vulnerability Database".
‼ CVE-2018-16061 ‼
📖 Read
via "National Vulnerability Database".
Mitsubishi Electric SmartRTU devices allow XSS via the username parameter or PATH_INFO to login.php.📖 Read
via "National Vulnerability Database".
🕴 China's Hackers Crack Devices at Tianfu Cup for $1.5M in Prizes 🕴
📖 Read
via "Dark Reading".
China's premier hackers will target web browsers, operating systems, mobile devices, and even a car at Tianfu Cup.📖 Read
via "Dark Reading".
Dark Reading
China's Hackers Crack Devices at Tianfu Cup for $1.5M in Prizes
China's premier hackers will target web browsers, operating systems, mobile devices, and even a car at Tianfu Cup.
🕴 In Cyberwar, Attribution Can Be Impossible — and That's OK 🕴
📖 Read
via "Dark Reading".
Instead of using a substantial proportion of resources to determine attribution, organizations should focus on defenses that will help them remediate an attack.📖 Read
via "Dark Reading".
Dark Reading
In Cyberwar, Attribution Can Be Impossible — and That's OK
Instead of using a substantial proportion of resources to determine attribution, organizations should focus on defenses that will help them remediate an attack.
‼ CVE-2021-36097 ‼
📖 Read
via "National Vulnerability Database".
Agents are able to lock the ticket without the "Owner" permission. Once the ticket is locked, it could be moved to the queue where the agent has "rw" permissions and gain a full control. This issue affects: OTRS AG OTRS 8.0.x version: 8.0.16 and prior versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-38562 ‼
📖 Read
via "National Vulnerability Database".
Best Practical Request Tracker (RT) 4.2 before 4.2.17, 4.4 before 4.4.5, and 5.0 before 5.0.2 allows sensitive information disclosure via a timing attack against lib/RT/REST2/Middleware/Auth.pm.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-38297 ‼
📖 Read
via "National Vulnerability Database".
Go before 1.16.9 and 1.17.x before 1.17.2 has a Buffer Overflow via large arguments in a function invocation from a WASM module, when GOARCH=wasm GOOS=js is used.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-41611 ‼
📖 Read
via "National Vulnerability Database".
An issue was discovered in Squid 5.0.6 through 5.1.x before 5.2. When validating an origin server or peer certificate, Squid may incorrectly classify certain certificates as trusted. This problem allows a remote server to obtain security trust well improperly. This indication of trust may be passed along to clients, allowing access to unsafe or hijacked services.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-42565 ‼
📖 Read
via "National Vulnerability Database".
myfactory.FMS before 7.1-912 allows XSS via the UID parameter.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-42566 ‼
📖 Read
via "National Vulnerability Database".
myfactory.FMS before 7.1-912 allows XSS via the Error parameter.📖 Read
via "National Vulnerability Database".
🗓️ Google, Mozilla close to finalizing Sanitizer API for Chrome and Firefox browsers 🗓️
📖 Read
via "The Daily Swig".
Latest specification is a work in progress📖 Read
via "The Daily Swig".
The Daily Swig | Cybersecurity news and views
Google, Mozilla close to finalizing Sanitizer API for Chrome and Firefox browsers
Latest specification is a work in progress
⚠ Cybersecurity Awareness Month: Building your career ⚠
📖 Read
via "Naked Security".
Explore. Experience. Share. How to get into cybersecurity...📖 Read
via "Naked Security".
Naked Security
Cybersecurity Awareness Month: Building your career
Explore. Experience. Share. How to get into cybersecurity…