🕴 Why We Need "Developer-First" Application Security 🕴
📖 Read
via "Dark Reading".
The way to improve the security of the modern software development life cycle and reduce the number of application-based breaches is to re-center app security around the needs of developers.📖 Read
via "Dark Reading".
Dark Reading
Why We Need "Developer-First" Application Security
The way to improve the security of the modern software development life cycle and reduce the number of application-based breaches is to re-center app security around the needs of developers.
🗓️ Log4j: Security pros call for urgent patch implementation as in-the-wild exploitation continues 🗓️
📖 Read
via "The Daily Swig".
Initial, ‘incomplete’ patch created path to denial-of-service attacks📖 Read
via "The Daily Swig".
The Daily Swig | Cybersecurity news and views
Log4j: Security pros call for urgent patch implementation as in-the-wild exploitation continues
Initial, ‘incomplete’ patch created path to denial-of-service attacks
🦿 Kodachi is the operating system for those who value privacy but don't want to learn Linux 🦿
📖 Read
via "Tech Republic".
For anyone looking to gain an extra layer of privacy on a desktop or laptop, Kodachi Linux might be the perfect option. Jack Wallen highlights this live Linux distribution.📖 Read
via "Tech Republic".
TechRepublic
Kodachi is the operating system for those who value privacy but don’t want to learn Linux
For anyone looking to gain an extra layer of privacy on a desktop or laptop, Kodachi Linux might be the perfect option. Jack Wallen highlights this live Linux distribution.
🦿 Just in time for Christmas, Kronos payroll and HR cloud software goes offline due to ransomware 🦿
📖 Read
via "Tech Republic".
The attack has led to an outage expected to last weeks, leaving companies scrambling to make payroll with the holidays right around the corner.📖 Read
via "Tech Republic".
TechRepublic
Just in time for Christmas, Kronos payroll and HR cloud software goes offline due to ransomware
The attack has led to an outage expected to last weeks, leaving companies scrambling to make payroll with the holidays right around the corner.
🛠 Log4j Recognizer 🛠
📖 Read
via "Packet Storm Security".
This utility looks for log4j in the currently running JVM. It is useful for systems that allow plugins to introduce their own jars. Therefore, you can find if someone is using log4j with a dangerous version.📖 Read
via "Packet Storm Security".
Packetstormsecurity
Log4j Recognizer ≈ Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers
‼ CVE-2021-43237 ‼
📖 Read
via "National Vulnerability Database".
Windows Setup Elevation of Privilege Vulnerability📖 Read
via "National Vulnerability Database".
‼ CVE-2021-43893 ‼
📖 Read
via "National Vulnerability Database".
Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability📖 Read
via "National Vulnerability Database".
‼ CVE-2021-43227 ‼
📖 Read
via "National Vulnerability Database".
Storage Spaces Controller Information Disclosure Vulnerability This CVE ID is unique from CVE-2021-43235.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-43877 ‼
📖 Read
via "National Vulnerability Database".
ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability📖 Read
via "National Vulnerability Database".
‼ CVE-2021-43907 ‼
📖 Read
via "National Vulnerability Database".
Visual Studio Code WSL Extension Remote Code Execution Vulnerability📖 Read
via "National Vulnerability Database".
‼ CVE-2021-41333 ‼
📖 Read
via "National Vulnerability Database".
Windows Print Spooler Elevation of Privilege Vulnerability📖 Read
via "National Vulnerability Database".
‼ CVE-2021-43892 ‼
📖 Read
via "National Vulnerability Database".
Microsoft BizTalk ESB Toolkit Spoofing Vulnerability📖 Read
via "National Vulnerability Database".
‼ CVE-2021-43243 ‼
📖 Read
via "National Vulnerability Database".
VP9 Video Extensions Information Disclosure Vulnerability📖 Read
via "National Vulnerability Database".
‼ CVE-2021-43908 ‼
📖 Read
via "National Vulnerability Database".
Visual Studio Code Spoofing Vulnerability📖 Read
via "National Vulnerability Database".
‼ CVE-2021-42312 ‼
📖 Read
via "National Vulnerability Database".
Microsoft Defender for IOT Elevation of Privilege Vulnerability📖 Read
via "National Vulnerability Database".
‼ CVE-2021-43889 ‼
📖 Read
via "National Vulnerability Database".
Microsoft Defender for IoT Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-41365, CVE-2021-42310, CVE-2021-42311, CVE-2021-42313, CVE-2021-42314, CVE-2021-42315, CVE-2021-43882.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-43216 ‼
📖 Read
via "National Vulnerability Database".
Microsoft Local Security Authority Server (lsasrv) Information Disclosure Vulnerability📖 Read
via "National Vulnerability Database".
‼ CVE-2021-43675 ‼
📖 Read
via "National Vulnerability Database".
Lychee-v3 3.2.16 is affected by a Cross Site Scripting (XSS) vulnerability in php/Access/Guest.php. The function exit will terminate the script and print the message to the user. The message will contain albumID which is controlled by the user.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-42320 ‼
📖 Read
via "National Vulnerability Database".
Microsoft SharePoint Server Spoofing Vulnerability This CVE ID is unique from CVE-2021-43242.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-43256 ‼
📖 Read
via "National Vulnerability Database".
Microsoft Excel Remote Code Execution Vulnerability📖 Read
via "National Vulnerability Database".
‼ CVE-2021-43905 ‼
📖 Read
via "National Vulnerability Database".
Microsoft Office app Remote Code Execution Vulnerability📖 Read
via "National Vulnerability Database".