❌ Threat Advisory: E-commerce Bots Use Domain Registration Services for Mass (Fake) Account Creation ❌
📖 Read
via "Threat Post".
Jason Kent is Hacker-in-Residence at Cequence Security.📖 Read
via "Threat Post".
Threat Post
Threat Advisory: E-commerce Bots Use Domain Registration Services for Mass Account Fraud
Jason Kent, hacker-in-residence at Cequence Security, discusses sneaky shopping bot tactics (i.e., domain parking) seen in a mass campaign, and what retail security teams can do about them.
‼ CVE-2021-45885 ‼
📖 Read
via "National Vulnerability Database".
An issue was discovered in Stormshield Network Security (SNS) 4.2.2 through 4.2.7 (fixed in 4.2.8). Under a specific update-migration scenario, the first SSH password change does not properly clear the old password.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-25993 ‼
📖 Read
via "National Vulnerability Database".
In Requarks wiki.js, versions 2.0.0-beta.147 to 2.5.255 are affected by Stored XSS vulnerability, where a low privileged (editor) user can upload a SVG file that contains malicious JavaScript while uploading assets in the page. That will send the JWT tokens to the attacker’s server and will lead to account takeover when accessed by the victim.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-23727 ‼
📖 Read
via "National Vulnerability Database".
This affects the package celery before 5.2.2. It by default trusts the messages and metadata stored in backends (result stores). When reading task metadata from the backend, the data is deserialized. Given that an attacker can gain access to, or somehow manipulate the metadata within a celery backend, they could trigger a stored command injection vulnerability and potentially gain further access to the system.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-36724 ‼
📖 Read
via "National Vulnerability Database".
ForeScout - SecureConnector Local Service DoS - A low privilaged user which doesn't have permissions to shutdown the secure connector service writes a large amount of characters in the installationPath. This will cause the buffer to overflow and override the stack cookie causing the service to crash.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-43876 ‼
📖 Read
via "National Vulnerability Database".
Microsoft SharePoint Elevation of Privilege Vulnerability.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-4188 ‼
📖 Read
via "National Vulnerability Database".
mruby is vulnerable to NULL Pointer Dereference📖 Read
via "National Vulnerability Database".
🦿 Learn highly marketable ethical hacking skills for less than $45 🦿
📖 Read
via "Tech Republic".
Even if you have no tech experience, you can develop valuable skills with the online training offered by The Super-Sized Ethical Hacking Bundle.📖 Read
via "Tech Republic".
TechRepublic
Learn highly marketable ethical hacking skills for less than $45
Even if you have no tech experience, you can develop valuable skills with the online training offered by The Super-Sized Ethical Hacking Bundle.
‼ CVE-2021-45427 ‼
📖 Read
via "National Vulnerability Database".
Emerson XWEB 300D EVO 3.0.7--3ee403 is affected by: unauthenticated arbitrary file deletion due to path traversal. An attacker can browse and delete files without any authentication due to incorrect access control and directory traversal.📖 Read
via "National Vulnerability Database".
🕴 In the Fight Against Cybercrime, Takedowns Are Only Temporary 🕴
📖 Read
via "Dark Reading".
Disrupting access to servers and infrastructure continues to interfere with cybercrime activity, but it's far from a perfect strategy.📖 Read
via "Dark Reading".
Dark Reading
In the Fight Against Cybercrime, Takedowns Are Only Temporary
Disrupting access to servers and infrastructure continues to interfere with cybercrime activity, but it's far from a perfect strategy.
⚠ Instagram copyright infringment scams – don’t get sucked in! ⚠
📖 Read
via "Naked Security".
We deconstructed a copyright phish so you don't have to. Be warned: the crooks are getting better at these scams...📖 Read
via "Naked Security".
Naked Security
Instagram copyright infringment scams – don’t get sucked in!
We deconstructed a copyright phish so you don’t have to. Be warned: the crooks are getting better at these scams…
🕴 Zero Trust and Access: Protecting the Keys to the Kingdom 🕴
📖 Read
via "Dark Reading".
Zero trust moves the control pane closer to the defended asset and attempts to tightly direct access and privileges.📖 Read
via "Dark Reading".
Dark Reading
Zero Trust and Access: Protecting the Keys to the Kingdom
Zero trust moves the control pane closer to the defended asset and attempts to tightly direct access and privileges.
‼ CVE-2021-45818 ‼
📖 Read
via "National Vulnerability Database".
SAFARI Montage 8.7.32 is affected by a CRLF injection vulnerability which can lead to can lead to HTTP response splitting.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-43861 ‼
📖 Read
via "National Vulnerability Database".
Mermaid is a Javascript based diagramming and charting tool that uses Markdown-inspired text definitions and a renderer to create and modify complex diagrams. Prior to version 8.13.8, malicious diagrams can run javascript code at diagram readers' machines. Users should upgrade to version 8.13.8 to receive a patch. There are no known workarounds aside from upgrading.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-45815 ‼
📖 Read
via "National Vulnerability Database".
Quectel UC20 UMTS/HSPA+ UC20 6.3.14 is affected by a Cross Site Scripting (XSS) vulnerability.📖 Read
via "National Vulnerability Database".
🗓️ Swig Security Review 2021 – Part II 🗓️
📖 Read
via "The Daily Swig".
Key thinkers on the biggest security stories and trends in 2021📖 Read
via "The Daily Swig".
The Daily Swig | Cybersecurity news and views
Swig Security Review 2021 – Part II
Key thinkers on the biggest security stories and trends in 2021
❌ APT ‘Aquatic Panda’ Targets Universities with Log4Shell Exploit Tools ❌
📖 Read
via "Threat Post".
Researchers from CrowdStrike disrupted an attempt by the threat group to steal industrial intelligence and military secrets from an academic institution.📖 Read
via "Threat Post".
Threat Post
APT ‘Aquatic Panda’ Targets Universities with Log4Shell Exploit Tools
Researchers from CrowdStrike disrupted an attempt by the threat group to steal industrial intelligence and military secrets from an academic institution.
🗓️ HCL DX vendor ‘could not reproduce’ allegedly critical vulnerabilities 🗓️
📖 Read
via "The Daily Swig".
Disclosure process for bugs in HCL DX – formerly WebSphere Portal – seemingly went awry📖 Read
via "The Daily Swig".
The Daily Swig | Cybersecurity news and views
HCL DX vendor ‘could not reproduce’ allegedly critical vulnerabilities
Disclosure process for bugs in HCL DX – formerly WebSphere Portal – seemingly went awry
‼ CVE-2021-43862 ‼
📖 Read
via "National Vulnerability Database".
jQuery Terminal Emulator is a plugin for creating command line interpreters in your applications. Versions prior to 2.31.1 contain a low impact and limited cross-site scripting (XSS) vulnerability. The code for XSS payload is always visible, but an attacker can use other techniques to hide the code the victim sees. If the application uses the `execHash` option and executes code from URL, the attacker can use this URL to execute their code. The scope is limited because the javascript attribute used is added to span tag, so no automatic execution like with `onerror` on images is possible. This issue is fixed in version 2.31.1. As a workaround, the user can use formatting that wrap whole user input and its no op. The code for this workaround is available in the GitHub Security Advisory. The fix will only work when user of the library is not using different formatters (e.g. to highlight code in different way).📖 Read
via "National Vulnerability Database".
🕴 Getting Started With Threat-Informed Security Programs 🕴
📖 Read
via "Dark Reading".
Security leaders need to examine their business model, document risks, and develop a strategic plan to address those risks.📖 Read
via "Dark Reading".
Dark Reading
Getting Started With Threat-Informed Security Programs
Security leaders need to examine their business model, document risks, and develop a strategic plan to address those risks.