‼ CVE-2020-25872 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability exists within the FileManagerController.php function in FrogCMS 0.9.5 which allows an attacker to perform a directory traversal attack via a GET request urlencode parameter.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-1119 ‼
📖 Read
via "National Vulnerability Database".
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it can double-free a pointer, which may lead to denial of service. This flaw may result in a write-what-where condition, allowing an attacker to execute arbitrary code impacting integrity and availability.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-1122 ‼
📖 Read
via "National Vulnerability Database".
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it can dereference a NULL pointer, which may lead to denial of service.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-1118 ‼
📖 Read
via "National Vulnerability Database".
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where there is the potential to execute privileged operations by the guest OS, which may lead to information disclosure, data tampering, escalation of privileges, and denial of service📖 Read
via "National Vulnerability Database".
‼ CVE-2021-1123 ‼
📖 Read
via "National Vulnerability Database".
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it can deadlock, which may lead to denial of service.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-25873 ‼
📖 Read
via "National Vulnerability Database".
A directory traversal vulnerability in the component system/manager/class/web/database.php was discovered in Baijiacms V4 which allows attackers to arbitrarily delete folders on the server via the "id" parameter.📖 Read
via "National Vulnerability Database".
♟️ Zales.com Leaked Customer Data, Just Like Sister Firms Jared, Kay Jewelers Did in 2018 ♟️
📖 Read
via "Krebs on Security".
In December 2018, bling vendor Signet Jewelers fixed a weakness in their Kay Jewelers and Jared websites that exposed the order information for all of their online customers. This week, Signet subsidiary Zales.com updated its website to remediate a nearly identical customer data exposure.📖 Read
via "Krebs on Security".
Krebsonsecurity
Zales.com Leaked Customer Data, Just Like Sister Firms Jared, Kay Jewelers Did in 2018
In December 2018, bling vendor Signet Jewelers fixed a weakness in their Kay Jewelers and Jared websites that exposed the order information for all of their online customers. This week, Signet subsidiary Zales.com updated its website to remediate a nearly…
⚠ Europol announce “targeting” of 12 suspects in ransomware attacks ⚠
📖 Read
via "Naked Security".
More anti-ransomware activity by law enforcement, this time in Switzerland and Ukraine.📖 Read
via "Naked Security".
Naked Security
Europol announces “targeting” of 12 suspects in ransomware attacks
More anti-ransomware activity by law enforcement, this time in Switzerland and Ukraine.
🕴 Enterprises Allocating More IT Dollars on Cybersecurity 🕴
📖 Read
via "Dark Reading".
Enterprises are allocating more IT dollars towards implementing a multilayered approach to securing data and applications against new threats, data shows.📖 Read
via "Dark Reading".
Dark Reading
Enterprises Allocating More IT Dollars on Cybersecurity
Enterprises are allocating more IT dollars toward implementing a multilayered approach to securing data and applications against new threats, data shows.
‼ CVE-2021-36808 ‼
📖 Read
via "National Vulnerability Database".
A local attacker could bypass the app password using a race condition in Sophos Secure Workspace for Android before version 9.7.3115.📖 Read
via "National Vulnerability Database".
📢 IT Pro News in Review: SolarWinds cyber attack, AWS deal with MI5, UK VoIP providers under attack 📢
📖 Read
via "ITPro".
Catch up on the biggest headlines of the week in just two minutes📖 Read
via "ITPro".
IT PRO
IT Pro News in Review: SolarWinds cyber attack, AWS deal with MI5, UK VoIP providers under attack
Welcome to IT Pro's News in Review, a weekly bite-sized bulletin of the top tech stories of the week, for the week ending 15 October, 2021.
📢 Avast launches premium browser with built-in VPN 📢
📖 Read
via "ITPro".
Avast Secure Browser Pro is available now on Windows 10, iOS and Android📖 Read
via "ITPro".
IT PRO
Avast launches premium browser with built-in VPN | IT PRO
Avast Secure Browser Pro is available now on Windows 10, iOS and Android
📢 70% of IT workers skip key security steps due to work pressures 📢
📖 Read
via "ITPro".
Report finds that a fifth of DevOps and security professionals have considered quitting their jobs due to stress📖 Read
via "ITPro".
IT PRO
70% of IT workers skip key security steps due to work pressures | IT PRO
Report finds that a fifth of DevOps and security professionals have considered quitting their jobs due to stress
📢 BlackMatter ransomware victims reclaim data using secret decryptor 📢
📖 Read
via "ITPro".
Emsisoft discovered a critical flaw in the ransomware that allowed them to help victims recover their files📖 Read
via "ITPro".
IT PRO
BlackMatter ransomware victims reclaim data using secret decryptor | IT PRO
Emsisoft discovered a critical flaw in the ransomware that allowed them to help victims recover their files
📢 What is your digital footprint? 📢
📖 Read
via "ITPro".
Your digital footprint is always growing – so we explore how you can keep it under control📖 Read
via "ITPro".
IT PRO
What is your digital footprint? | IT PRO
Your digital footprint is always growing – so we explore how you can keep it under control
📢 Ransomware hit industrial sector the hardest in the third quarter 📢
📖 Read
via "ITPro".
Cyber criminals are now also targeting the technology sector, which saw a 30% rise in attack volume📖 Read
via "ITPro".
IT PRO
Ransomware hit industrial sector the hardest in the third quarter | IT PRO
Cyber criminals are now also targeting the technology sector, which saw a 30% rise in attack volume
📢 F-Secure Safe review: Simple security struggles to outdo Defender 📢
📖 Read
via "ITPro".
F-Secure Safe doesn’t have the protection or features to stand out against its rivals.📖 Read
via "ITPro".
IT PRO
F-Secure Safe review: Simple security struggles to outdo Defender | IT PRO
F-Secure Safe doesn’t have the protection or features to stand out against its rivals.
📢 BillQuick billing software exploit lets hackers deploy ransomware 📢
📖 Read
via "ITPro".
The now-patched critical zero-day vulnerability also leaked sensitive data from the time and billing platform📖 Read
via "ITPro".
ITPro
BillQuick billing software exploit lets hackers deploy ransomware
The now-patched critical zero-day vulnerability also leaked sensitive data from the time and billing platform
📢 Telstra to acquire Digicel Pacific for $1.6 billion with help from government 📢
📖 Read
via "ITPro".
The deal is being called a 'political buy' to counter Chinese influence in the region📖 Read
via "ITPro".
IT PRO
Telstra to acquire Digicel Pacific for $1.6 billion with help from government | IT PRO
The deal is being called a 'political buy' to counter Chinese influence in the region
📢 Tesco services knocked offline after suspected cyber attack 📢
📖 Read
via "ITPro".
Customers were left unable to make or cancel orders, or amend their scheduled deliveries📖 Read
via "ITPro".
IT PRO
Tesco services knocked offline after suspected cyber attack | IT PRO
Customers were left unable to make or cancel orders, or amend their scheduled deliveries