⚠ Website operator fined for using Google Fonts “the cloudy way” ⚠
📖 Read
via "Naked Security".
Google Fonts are OK, it seems, but only if everyone keeps their own copy of the fonts they use.📖 Read
via "Naked Security".
Naked Security
Website operator fined for using Google Fonts “the cloudy way”
Google Fonts are OK, it seems, but only if everyone keeps their own copy of the fonts they use.
❌ Apple Pays $100.5K Bug Bounty for Mac Webcam Hack ❌
📖 Read
via "Threat Post".
The researcher found that he could gain unauthorized camera access via a shared iCloud document that could also "hack every website you've ever visited."📖 Read
via "Threat Post".
Threat Post
Apple Pays $100.5K Bug Bounty for Mac Webcam Hack
The researcher found that he could gain unauthorized camera access via a shared iCloud document that could also "hack every website you've ever visited."
‼ CVE-2021-42635 ‼
📖 Read
via "National Vulnerability Database".
PrinterLogic Web Stack versions 19.1.1.13 SP9 and below use a hardcoded APP_KEY value, leading to pre-auth remote code execution.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-44114 ‼
📖 Read
via "National Vulnerability Database".
Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Stock Management System in PHP/OOP 1.0, which allows remote malicious users to execute arbitrary remote code execution via create user function.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-42631 ‼
📖 Read
via "National Vulnerability Database".
PrinterLogic Web Stack versions 19.1.1.13 SP9 and below deserializes attacker controlled leading to pre-auth remote code execution.📖 Read
via "National Vulnerability Database".
🔏 Number of GDPR Fines Rose 7x in 2021 🔏
📖 Read
via "".
The cost is skewed by massive fines but a new survey shows there was still a steady increase in the number of GDPR fines across the EU last year.📖 Read
via "".
Digital Guardian
Number of GDPR Fines Rose 7x in 2021
The cost is skewed by massive fines but a new survey shows there was still a steady increase in the number of GDPR fines across the EU last year.
🕴 Aggressive BlackCat Ransomware on the Rise 🕴
📖 Read
via "Dark Reading".
The cybercriminals behind the malware claim to have compromised more than a dozen companies; they have aggressively outed victims and purportedly paid a significant share of ransoms back to affiliates.📖 Read
via "Dark Reading".
Dark Reading
Aggressive BlackCat Ransomware on the Rise
The cybercriminals behind the malware claim to have compromised more than a dozen companies; they have aggressively outed victims and purportedly paid a significant share of ransoms back to affiliates.
❌ Public Exploit Released for Windows 10 Bug ❌
📖 Read
via "Threat Post".
The vulnerability affects all unpatched Windows 10 versions following a messy Microsoft January update.📖 Read
via "Threat Post".
Threat Post
Public Exploit Released for Windows 10 Bug
The vulnerability affects all unpatched Windows 10 versions following a messy Microsoft January update.
🕴 BlackBerry Agrees to Sell Legacy Patents for $600M 🕴
📖 Read
via "Dark Reading".
It has entered into a patent sale agreement with Catapult IP Innovations.📖 Read
via "Dark Reading".
Dark Reading
BlackBerry Agrees to Sell Legacy Patents for $600M
It has entered into a patent sale agreement with Catapult IP Innovations.
‼ CVE-2022-21659 ‼
📖 Read
via "National Vulnerability Database".
Flask-AppBuilder is an application development framework, built on top of the Flask web framework. In affected versions there exists a user enumeration vulnerability. This vulnerability allows for a non authenticated user to enumerate existing accounts by timing the response time from the server when you are logging in. Users are advised to upgrade to version 3.4.4 as soon as possible. There are no known workarounds for this issue.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-24263 ‼
📖 Read
via "National Vulnerability Database".
Hospital Management System v4.0 was discovered to contain a SQL injection vulnerability in /Hospital-Management-System-master/func.php via the email parameter.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-24264 ‼
📖 Read
via "National Vulnerability Database".
Cuppa CMS v1.0 was discovered to contain a SQL injection vulnerability in /administrator/components/table_manager/ via the search_word parameter.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-23872 ‼
📖 Read
via "National Vulnerability Database".
Emlog pro v1.1.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the component /admin/configure.php via the parameter footer_info.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-24265 ‼
📖 Read
via "National Vulnerability Database".
Cuppa CMS v1.0 was discovered to contain a SQL injection vulnerability in /administrator/components/menu/ via the path=component/menu/&menu_filter=3 parameter.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-24266 ‼
📖 Read
via "National Vulnerability Database".
Cuppa CMS v1.0 was discovered to contain a SQL injection vulnerability in /administrator/components/table_manager/ via the order_by parameter.📖 Read
via "National Vulnerability Database".
🕴 Security Service Edge Boosters Form New Forum to Encourage Adoption 🕴
📖 Read
via "Dark Reading".
IT leaders who formed the SSE Forum say the technology offers cloud-forward security for modern workplaces.📖 Read
via "Dark Reading".
Dark Reading
Security Service Edge Boosters Form New Forum to Encourage Adoption
IT leaders who formed the SSE Forum say the technology offers cloud-forward security for modern workplaces.
🕴 Mandiant: One in 7 Ransomware Extortion Attacks Expose OT Data 🕴
📖 Read
via "Dark Reading".
Analysis of 'shaming site' data dumps found sensitive documentation from OT organizations including oil & gas.📖 Read
via "Dark Reading".
Dark Reading
Mandiant: 1 in 7 Ransomware Extortion Attacks Exposes OT Data
Analysis of "shaming site" data dumps found sensitive documentation from OT organizations, including oil and gas.
👍1
‼ CVE-2021-46662 ‼
📖 Read
via "National Vulnerability Database".
MariaDB through 10.5.9 allows a set_var.cc application crash via certain uses of an UPDATE statement in conjunction with a nested subquery.📖 Read
via "National Vulnerability Database".
👍1
‼ CVE-2021-46667 ‼
📖 Read
via "National Vulnerability Database".
MariaDB before 10.6.5 has a sql_lex.cc integer overflow, leading to an application crash.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-46664 ‼
📖 Read
via "National Vulnerability Database".
MariaDB through 10.5.9 allows an application crash in sub_select_postjoin_aggr for a NULL value of aggr.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-46669 ‼
📖 Read
via "National Vulnerability Database".
MariaDB through 10.5.9 allows attackers to trigger a convert_const_to_int use-after-free when the BIGINT data type is used.📖 Read
via "National Vulnerability Database".