‼ CVE-2021-28237 ‼
📖 Read
via "National Vulnerability Database".
LibreDWG v0.12.3 was discovered to contain a heap-buffer overflow via decode_preR13.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-28236 ‼
📖 Read
via "National Vulnerability Database".
LibreDWG v0.12.3 was discovered to contain a NULL pointer dereference via out_dxfb.c.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-36130 ‼
📖 Read
via "National Vulnerability Database".
AOM v2.0.1 was discovered to contain a NULL pointer dereference via the component av1/av1_dx_iface.c.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-36133 ‼
📖 Read
via "National Vulnerability Database".
AOM v2.0.1 was discovered to contain a global buffer overflow via the component av1/encoder/partition_search.h.📖 Read
via "National Vulnerability Database".
🕴 Ransomware, Carding, and Initial Access Brokers: Group-IB Presents Report on Trending Crimes 🕴
📖 Read
via "Dark Reading".
Report explores cybercrime developments from the second half of 2020 through the first half of 2021.📖 Read
via "Dark Reading".
Dark Reading
Ransomware, Carding, and Initial Access Brokers: Group-IB Presents Report on Trending Crimes
Report explores cybercrime developments from the second half of 2020 through the first half of 2021.
🗓️ FTC implements tougher data protection rules to safeguard customer information 🗓️
📖 Read
via "The Daily Swig".
New requirements for financial institutions include vulnerability assessments, employee training📖 Read
via "The Daily Swig".
The Daily Swig | Cybersecurity news and views
FTC implements tougher data protection rules to safeguard customer information
New requirements for financial institutions include vulnerability assessments, employee training
❌ Threat Group Takes Aim Again at Cloud Platform Provider Zoho ❌
📖 Read
via "Threat Post".
Attackers that previously targeted the cloud platform provider have shifted their focus to additional products in the company’s portfolio.📖 Read
via "Threat Post".
Threat Post
Threat Group Takes Aim Again at Cloud Platform Provider Zoho
Attackers that previously targeted the cloud platform provider have shifted their focus to additional products in the company’s portfolio.
‼ CVE-2021-44020 ‼
📖 Read
via "National Vulnerability Database".
An unnecessary privilege vulnerability in Trend Micro Worry-Free Business Security 10.0 SP1 could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. This vulnerability is similar to but not identical to CVE-2021-44019 and 44021.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-4000 ‼
📖 Read
via "National Vulnerability Database".
showdoc is vulnerable to URL Redirection to Untrusted Site📖 Read
via "National Vulnerability Database".
‼ CVE-2021-44021 ‼
📖 Read
via "National Vulnerability Database".
An unnecessary privilege vulnerability in Trend Micro Worry-Free Business Security 10.0 SP1 could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. This vulnerability is similar to but not identical to CVE-2021-44019 and 44020.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-43673 ‼
📖 Read
via "National Vulnerability Database".
dzzoffice 2.02.1_SC_UTF8 is affected by a Cross Site Scripting (XSS) vulnerability in explorerfile.php. The output of exit function will be print for the user exit(json_encode($return)).📖 Read
via "National Vulnerability Database".
‼ CVE-2021-43772 ‼
📖 Read
via "National Vulnerability Database".
Trend Micro Security 2021 v17.0 (Consumer) contains a vulnerability that allows files inside the protected folder to be modified without any detection.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-44022 ‼
📖 Read
via "National Vulnerability Database".
A reachable assertion vulnerability in Trend Micro Apex One could allow an attacker to crash the program on affected installations, leading to a denial-of-service (DoS). Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-44019 ‼
📖 Read
via "National Vulnerability Database".
An unnecessary privilege vulnerability in Trend Micro Worry-Free Business Security 10.0 SP1 could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. This vulnerability is similar to but not identical to CVE-2021-44020 and 44021.📖 Read
via "National Vulnerability Database".
🦿 How to avoid being a hacker's next target: Don't overshare information on business social media 🦿
📖 Read
via "Tech Republic".
When using LinkedIn and other social media accounts for professional reasons, there are important factors to consider about securing your personal data. Learn how to protect yourself from a hacker.📖 Read
via "Tech Republic".
TechRepublic
How to avoid being a hacker's next target: Don't overshare information on business social media
When using LinkedIn and other social media accounts for professional reasons, there are important factors to consider about securing your personal data. Learn how to protect yourself from a hacker.
🔏 Friday Five 12/2 🔏
📖 Read
via "".
$31 in digital coin stolen, an insider extortion attack, and a new cybersecurity resource for healthcare workers - catch up on the infosec news of the week with the Friday Five!📖 Read
via "".
Digital Guardian
Friday Five 12/2
$31 in digital coin stolen, an insider extortion attack, and a new cybersecurity resource for healthcare workers - catch up on the infosec news of the week with the Friday Five!
🗓️ US identity thieves jailed over $130,000 scam that targeted the elderly 🗓️
📖 Read
via "The Daily Swig".
Dark web fraudsters caught after stealing the identities of murder victims📖 Read
via "The Daily Swig".
The Daily Swig | Cybersecurity news and views
US identity thieves jailed over $130,000 scam that targeted the elderly
Dark web fraudsters caught after stealing the identities of murder victims
🕴 An Insider's Account of Disclosing Vulnerabilities 🕴
📖 Read
via "Dark Reading".
Vendors drag their heels when it comes to identifying software vulnerabilities and are often loath to expedite the fixes.📖 Read
via "Dark Reading".
Dark Reading
An Insider's Account of Disclosing Vulnerabilities
Vendors drag their heels when it comes to identifying software vulnerabilities and are often loath to expedite the fixes.
‼ CVE-2021-44278 ‼
📖 Read
via "National Vulnerability Database".
Librenms 21.11.0 is affected by a path manipulation vulnerability in includes/html/pages/device/showconfig.inc.php.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-43676 ‼
📖 Read
via "National Vulnerability Database".
matyhtf framework v3.0.5 is affected by a path manipulation vulnerability in Smarty.class.php.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-43674 ‼
📖 Read
via "National Vulnerability Database".
** UNSUPPORTED WHEN ASSIGNED ** ThinkUp 2.0-beta.10 is affected by a path manipulation vulnerability in Smarty.class.php.📖 Read
via "National Vulnerability Database".