🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2021-43055 ‼

The eFTL Server component of TIBCO Software Inc.'s TIBCO eFTL - Community Edition, TIBCO eFTL - Developer Edition, and TIBCO eFTL - Enterprise Edition contains an easily exploitable vulnerability that allows clients to inherit the permissions of the client that initially connected on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO eFTL - Community Edition: versions 6.7.2 and below, TIBCO eFTL - Developer Edition: versions 6.7.2 and below, and TIBCO eFTL - Enterprise Edition: versions 6.7.2 and below.

📖 Read

via "National Vulnerability Database".

177 views21:16

🛡 Cybersecurity & Privacy 🛡 - News

♟️ ‘Wormable’ Flaw Leads January 2022 Patch Tuesday ♟️

Microsoft today released updates to plug nearly 120 security holes in Windows and supported software. Six of the vulnerabilities were publicly detailed already, potentially giving attackers a head start in figuring out how to exploit them in unpatched systems. More concerning, Microsoft warns that one of the flaws fixed this month is "wormable," meaning no human interaction would be required for an attack to spread from one vulnerable Windows box to another.

📖 Read

via "Krebs on Security".

Krebsonsecurity

‘Wormable’ Flaw Leads January 2022 Patch Tuesday

Microsoft today released updates to plug nearly 120 security holes in Windows and supported software. Six of the vulnerabilities were publicly detailed already, potentially giving attackers a head start in figuring out how to exploit them in unpatched systems.…

178 views22:37

🛡 Cybersecurity & Privacy 🛡 - News

🕴 Cloud Apps Replace Web as Source for Most Malware Downloads 🕴

Two-thirds of all malware distributed to enterprise networks last year originated from cloud apps such as Google Drive, OneDrive, and numerous other cloud apps, new research shows.

📖 Read

via "Dark Reading".

Dark Reading

Cloud Apps Replace Web as Source for Most Malware Downloads

Two-thirds of all malware distributed to enterprise networks last year originated from cloud apps such as Google Drive, OneDrive, and numerous other cloud apps, new research shows.

167 views22:53

🛡 Cybersecurity & Privacy 🛡 - News

📢 FBI warns of hackers mailing malicious USB sticks to businesses 📢

The FIN7 cyber crime group is alleged to be behind the months-long wave of attacks against the defence, transportation, and insurance industries

📖 Read

via "ITPro".

IT PRO

FBI warns of hackers mailing malicious USB sticks to businesses | IT PRO

The FIN7 cyber crime group is alleged to be behind the months-long wave of attacks against the defence, transportation, and insurance industries

146 views23:14

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2022-21897 ‼

Windows Common Log File System Driver Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-21916.

📖 Read

via "National Vulnerability Database".

130 views23:17

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2022-21842 ‼

Microsoft Word Remote Code Execution Vulnerability.

📖 Read

via "National Vulnerability Database".

117 views23:17

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2022-21902 ‼

Windows DWM Core Library Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-21852, CVE-2022-21896.

📖 Read

via "National Vulnerability Database".

115 views23:17

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2022-21895 ‼

Windows User Profile Service Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-21919.

📖 Read

via "National Vulnerability Database".

110 views23:17

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2022-21864 ‼

Windows UI Immersive Server API Elevation of Privilege Vulnerability.

📖 Read

via "National Vulnerability Database".

107 views23:17

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2022-21912 ‼

DirectX Graphics Kernel Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-21898.

📖 Read

via "National Vulnerability Database".

105 views23:17

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2022-21919 ‼

Windows User Profile Service Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-21895.

📖 Read

via "National Vulnerability Database".

105 views23:17

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2022-21904 ‼

Windows GDI Information Disclosure Vulnerability.

📖 Read

via "National Vulnerability Database".

108 views23:17

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2022-21848 ‼

Windows IKE Extension Denial of Service Vulnerability. This CVE ID is unique from CVE-2022-21843, CVE-2022-21883, CVE-2022-21889, CVE-2022-21890.

📖 Read

via "National Vulnerability Database".

108 views23:17

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2022-21873 ‼

Tile Data Repository Elevation of Privilege Vulnerability.

📖 Read

via "National Vulnerability Database".

112 views23:17

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2022-21913 ‼

Local Security Authority (Domain Policy) Remote Protocol Security Feature Bypass.

📖 Read

via "National Vulnerability Database".

110 views23:17

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2022-21839 ‼

Windows Event Tracing Discretionary Access Control List Denial of Service Vulnerability.

📖 Read

via "National Vulnerability Database".

112 views23:17

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2022-21960 ‼

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-21892, CVE-2022-21928, CVE-2022-21958, CVE-2022-21959, CVE-2022-21961, CVE-2022-21962, CVE-2022-21963.

📖 Read

via "National Vulnerability Database".

110 views23:17

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2022-21962 ‼

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-21892, CVE-2022-21928, CVE-2022-21958, CVE-2022-21959, CVE-2022-21960, CVE-2022-21961, CVE-2022-21963.

📖 Read

via "National Vulnerability Database".

114 views23:17

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2022-21910 ‼

Microsoft Cluster Port Driver Elevation of Privilege Vulnerability.

📖 Read

via "National Vulnerability Database".

114 views23:17

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2022-21907 ‼

HTTP Protocol Stack Remote Code Execution Vulnerability.

📖 Read

via "National Vulnerability Database".

115 views23:17

🛡 Cybersecurity & Privacy 🛡 - News

‼ CVE-2022-21914 ‼

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-21885.

📖 Read

via "National Vulnerability Database".

121 views23:17

About

Blog

Apps

Platform