πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
25.8K subscribers
89.2K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
β€Ό CVE-2022-24110 β€Ό

Kiteworks MFT 7.5 may allow an unauthorized user to reset other users' passwords. This is fixed in version 7.6 and later.

πŸ“– Read

via "National Vulnerability Database".
πŸ—“οΈ New Zealand government mandates bug reporting process for federal agencies πŸ—“οΈ

Researchers can report vulnerabilities on a β€˜no blame’ basis

πŸ“– Read

via "The Daily Swig".
πŸ•΄ Ransomware Threat Intel: You're Soaking In It! πŸ•΄

Organizations need to improve their ability to detect and prevent emerging ransomware attacks.

πŸ“– Read

via "Dark Reading".
⚠ Power company pays out $3 trillion compensation to astonished customer ⚠

More money than the UK's economy produces in a year!

πŸ“– Read

via "Naked Security".
πŸ•΄ Could Biology Hold the Clue to Better Cybersecurity? πŸ•΄

Sophisticated malware attacks underscore the need for a more dynamic security framework, inspired by biological concepts.

πŸ“– Read

via "Dark Reading".
β€Ό CVE-2021-45420 β€Ό

** UNSUPPORTED WHEN ASSIGNED ** Emerson Dixell XWEB-500 products are affected by arbitrary file write vulnerability in /cgi-bin/logo_extra_upload.cgi, /cgi-bin/cal_save.cgi, and /cgi-bin/lo_utils.cgi. An attacker will be able to write any file on the target system without any kind of authentication mechanism, and this can lead to denial of service and potentially remote code execution. Note: the product has not been supported since 2018 and should be removed or replaced.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2021-45421 β€Ό

** UNSUPPORTED WHEN ASSIGNED ** Emerson Dixell XWEB-500 products are affected by information disclosure via directory listing. A potential attacker can use this misconfiguration to access all the files in the remote directories. Note: the product has not been supported since 2018 and should be removed or replaced.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-24686 β€Ό

HashiCorp Nomad and Nomad Enterprise 0.3.0 through 1.0.17, 1.1.11, and 1.2.5 artifact download functionality has a race condition such that the Nomad client agent could download the wrong artifact into the wrong destination. Fixed in 1.0.18, 1.1.12, and 1.2.6

πŸ“– Read

via "National Vulnerability Database".
πŸ•΄ (ISC)Β² to Pilot Online Proctored Exams for CISSP in U.S., U.K. and Singapore πŸ•΄

Second pilot program will assess feasibility and security of offering online exams to increase global accessibility for certification candidates.

πŸ“– Read

via "Dark Reading".
πŸ•΄ LogRhythm Unveils New Brand Identity πŸ•΄

Announcement comes in advance of new technology offerings in 2022.

πŸ“– Read

via "Dark Reading".
πŸ•΄ One Identity Enhances Unified Identity Security Platform with CIEM, Application Governance and Teams Modules πŸ•΄

Plans to further advance vision for end-to-end identity security.

πŸ“– Read

via "Dark Reading".
πŸ—“οΈ Missouri prosecutor declines to file charges over β€˜hacker’ allegation against reporter πŸ—“οΈ

Relief as controversial charges dropped tempered by fears about chilling effect

πŸ“– Read

via "The Daily Swig".
❌ Adobe: Zero-Day Magento 2 RCE Bug Under Active Attack ❌

The vendor issued an emergency fix on Sunday, and eCommerce websites should update ASAP to avoid Magecart card-skimming attacks and other problems.

πŸ“– Read

via "Threat Post".
β€Ό CVE-2021-46371 β€Ό

antd-admin 5.5.0 is affected by an incorrect access control vulnerability. Unauthorized access to some interfaces in the foreground leads to leakage of sensitive information.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-0512 β€Ό

Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.6.

πŸ“– Read

via "National Vulnerability Database".
❌ β€˜Cities: Skylines’ Gaming Modder Banned Over Hidden Malware ❌

35K+ players were exposed to an auto-updater that planted a trojan that choked performance for fellow modders and Colossal Order employees.

πŸ“– Read

via "Threat Post".
β™ŸοΈ Wazawaka Goes Waka Waka β™ŸοΈ

In January, KrebsOnSecurity examined clues left behind by "Wazawaka," the hacker handle chosen by a major ransomware criminal in the Russian-speaking cybercrime scene. Wazawaka has since "lost his mind" according to his erstwhile colleagues, creating a Twitter account to drop exploit code for a widely-used virtual private networking (VPN) appliance, and publishing bizarre selfie videos taunting security researchers and journalists. In last month's story, we explored clues that led from Wazawaka's multitude of monikers, email addresses, and passwords to a 30-something father in Abakan, Russia named Mikhail Pavlovich Matveev. This post concerns itself with the other half of Wazawaka's identities not mentioned in the first story, such as how Wazawaka also ran the Babuk ransomware affiliate program, and later became "Orange," the founder of the ransomware-focused Dark Web forum known as "RAMP."

πŸ“– Read

via "Krebs on Security".
β€Ό CVE-2022-22854 β€Ό

An access control issue in hprms/admin/?page=user/list of Hospital Patient Record Management System v1.0 allows attackers to escalate privileges via accessing and editing the user list.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-23367 β€Ό

Fulusso v1.1 was discovered to contain a DOM-based cross-site scripting (XSS) vulnerability in /BindAccount/SuccessTips.js. This vulnerability allows attackers to inject malicious code into a victim user's device via open redirection.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2021-39079 β€Ό

IBM Cognos Analytics Mobile for Android applications prior to version 1.1.14 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 215592.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2021-45392 β€Ό

A Buffer Overflow vulnerability exists in Tenda Router AX12 V22.03.01.21_CN in the sub_422CE4 function in page /goform/setIPv6Status via the prefixDelegate parameter, which causes a Denial of Service.

πŸ“– Read

via "National Vulnerability Database".