‼ CVE-2021-40333 ‼
📖 Read
via "National Vulnerability Database".
Weak Password Requirements vulnerability in Hitachi Energy FOX61x, XCM20 allows an attacker to gain unauthorized access to the Data Communication Network (DCN) routing configuration. This issue affects: Hitachi Energy FOX61x versions prior to R15A. Hitachi Energy XCM20 versions prior to R15A.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-43327 ‼
📖 Read
via "National Vulnerability Database".
An issue was discovered on Renesas RX65 and RX65N devices. With a VCC glitch, an attacker can extract the security ID key from the device. Then, the protected firmware can be extracted.📖 Read
via "National Vulnerability Database".
🕴 Top 5 Reasons to Get 'SASE' With Security 🕴
📖 Read
via "Dark Reading".
Proactively updating and integrating technology, and ensuring tight collaboration between IT and security … it's simple, right? Well, not always – especially for organizations with limited resources.📖 Read
via "Dark Reading".
Dark Reading
Top 5 Reasons to Get 'SASE' With Security
Proactively updating and integrating technology, and ensuring tight collaboration between IT and security … it's simple, right? Well, not always – especially for organizations with limited resources.
🕴 Darktrace Reports 30% More Ransomware Attacks Targeting Organizations During the Holiday Period 🕴
📖 Read
via "Dark Reading".
Researchers also observed a 70% average increase in attempted ransomware attacks.📖 Read
via "Dark Reading".
Dark Reading
Darktrace Reports 30% More Ransomware Attacks Targeting Organizations During the Holiday Period
Researchers also observed a 70% average increase in attempted ransomware attacks.
‼ CVE-2020-36129 ‼
📖 Read
via "National Vulnerability Database".
AOM v2.0.1 was discovered to contain a stack buffer overflow via the component src/aom_image.c.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-36135 ‼
📖 Read
via "National Vulnerability Database".
AOM v2.0.1 was discovered to contain a NULL pointer dereference via the component rate_hist.c.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-36134 ‼
📖 Read
via "National Vulnerability Database".
AOM v2.0.1 was discovered to contain a segmentation violation via the component aom_dsp/x86/obmc_sad_avx2.c.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-36131 ‼
📖 Read
via "National Vulnerability Database".
AOM v2.0.1 was discovered to contain a stack buffer overflow via the component stats/rate_hist.c.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-28237 ‼
📖 Read
via "National Vulnerability Database".
LibreDWG v0.12.3 was discovered to contain a heap-buffer overflow via decode_preR13.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-28236 ‼
📖 Read
via "National Vulnerability Database".
LibreDWG v0.12.3 was discovered to contain a NULL pointer dereference via out_dxfb.c.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-36130 ‼
📖 Read
via "National Vulnerability Database".
AOM v2.0.1 was discovered to contain a NULL pointer dereference via the component av1/av1_dx_iface.c.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-36133 ‼
📖 Read
via "National Vulnerability Database".
AOM v2.0.1 was discovered to contain a global buffer overflow via the component av1/encoder/partition_search.h.📖 Read
via "National Vulnerability Database".
🕴 Ransomware, Carding, and Initial Access Brokers: Group-IB Presents Report on Trending Crimes 🕴
📖 Read
via "Dark Reading".
Report explores cybercrime developments from the second half of 2020 through the first half of 2021.📖 Read
via "Dark Reading".
Dark Reading
Ransomware, Carding, and Initial Access Brokers: Group-IB Presents Report on Trending Crimes
Report explores cybercrime developments from the second half of 2020 through the first half of 2021.
🗓️ FTC implements tougher data protection rules to safeguard customer information 🗓️
📖 Read
via "The Daily Swig".
New requirements for financial institutions include vulnerability assessments, employee training📖 Read
via "The Daily Swig".
The Daily Swig | Cybersecurity news and views
FTC implements tougher data protection rules to safeguard customer information
New requirements for financial institutions include vulnerability assessments, employee training
❌ Threat Group Takes Aim Again at Cloud Platform Provider Zoho ❌
📖 Read
via "Threat Post".
Attackers that previously targeted the cloud platform provider have shifted their focus to additional products in the company’s portfolio.📖 Read
via "Threat Post".
Threat Post
Threat Group Takes Aim Again at Cloud Platform Provider Zoho
Attackers that previously targeted the cloud platform provider have shifted their focus to additional products in the company’s portfolio.
‼ CVE-2021-44020 ‼
📖 Read
via "National Vulnerability Database".
An unnecessary privilege vulnerability in Trend Micro Worry-Free Business Security 10.0 SP1 could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. This vulnerability is similar to but not identical to CVE-2021-44019 and 44021.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-4000 ‼
📖 Read
via "National Vulnerability Database".
showdoc is vulnerable to URL Redirection to Untrusted Site📖 Read
via "National Vulnerability Database".
‼ CVE-2021-44021 ‼
📖 Read
via "National Vulnerability Database".
An unnecessary privilege vulnerability in Trend Micro Worry-Free Business Security 10.0 SP1 could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. This vulnerability is similar to but not identical to CVE-2021-44019 and 44020.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-43673 ‼
📖 Read
via "National Vulnerability Database".
dzzoffice 2.02.1_SC_UTF8 is affected by a Cross Site Scripting (XSS) vulnerability in explorerfile.php. The output of exit function will be print for the user exit(json_encode($return)).📖 Read
via "National Vulnerability Database".
‼ CVE-2021-43772 ‼
📖 Read
via "National Vulnerability Database".
Trend Micro Security 2021 v17.0 (Consumer) contains a vulnerability that allows files inside the protected folder to be modified without any detection.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-44022 ‼
📖 Read
via "National Vulnerability Database".
A reachable assertion vulnerability in Trend Micro Apex One could allow an attacker to crash the program on affected installations, leading to a denial-of-service (DoS). Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.📖 Read
via "National Vulnerability Database".