🗓️ Russian nation-state hackers targeting US contractors for sensitive defense information, FBI warns 🗓️
📖 Read
via "The Daily Swig".
Cybersecurity and military secrets among documents accessed📖 Read
via "The Daily Swig".
The Daily Swig | Cybersecurity news and views
Russian nation-state hackers targeting US contractors for sensitive defense information, FBI warns
Cybersecurity and military secrets among documents accessed
❌ Microsoft Teams Targeted With Takeover Trojans ❌
📖 Read
via "Threat Post".
Threat actors are infiltrating the increasingly popular collaboration app to attach malicious files to chat threads that drop system-hijacking malware.📖 Read
via "Threat Post".
Threat Post
Microsoft Teams Targeted With Takeover Trojans
Threat actors are infiltrating the increasingly popular collaboration app to attach malicious files to chat threads that drop system-hijacking malware.
❌ Kill Cloud Risk: Get Everybody to Stop Fighting Over App Security – Podcast ❌
📖 Read
via "Threat Post".
When it comes to ensuring safe cloud app rollouts, there’s flat-out animosity between business shareholders. HackerOne’s Alex Rice and GitLab’s Johnathan Hunt share tips on quashing all the squabbling.📖 Read
via "Threat Post".
🕴 4 Keys to Bridging the Gap Between Security and Developers 🕴
📖 Read
via "Dark Reading".
Security personnel's priority is protecting the organization. Developers are trying to hit tight timelines. Here's how both groups can get get their needs met.📖 Read
via "Dark Reading".
‼ CVE-2022-23318 ‼
📖 Read
via "National Vulnerability Database".
A heap-buffer-overflow in pcf2bdf, versions >= 1.05 allows an attacker to trigger unsafe memory access via a specially crafted PCF font file. This out-of-bound read may lead to an application crash, information disclosure via program memory or other context-dependent impact.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-22899 ‼
📖 Read
via "National Vulnerability Database".
Core FTP / SFTP Server v2 Build 725 was discovered to allow unauthenticated attackers to cause a Denial of Service (DoS) via a crafted packet through the SSH service.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-23319 ‼
📖 Read
via "National Vulnerability Database".
A segmentation fault during PCF file parsing in pcf2bdf versions >=1.05 allows an attacker to trigger a program crash via a specially crafted PCF font file. This crash affects the availability of the software and dependent downstream components.📖 Read
via "National Vulnerability Database".
🗓️ Microsoft bolsters Edge browser security with enhanced features 🗓️
📖 Read
via "The Daily Swig".
Latest protections unveiled📖 Read
via "The Daily Swig".
The Daily Swig | Cybersecurity news and views
Microsoft bolsters Edge browser security with enhanced features
Latest protections unveiled
❌ Ukrainian DDoS Attacks Should Put US on Notice–Researchers ❌
📖 Read
via "Threat Post".
On Tuesday, institutions central to Ukraine’s military and economy were hit with denial-of-service (DoS) attacks. Impact was limited, but the ramifications are not.📖 Read
via "Threat Post".
Threat Post
Ukrainian DDoS Attacks Should Put US on Notice–Researchers
On Tuesday, institutions central to Ukraine’s military and economy were hit with denial-of-service (DoS) attacks. Impact was limited, but the ramifications are not.
‼ CVE-2022-20659 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network (EPN) Manager could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface of an affected device. This vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by persuading a user of an affected interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-20653 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability in the DNS-based Authentication of Named Entities (DANE) email verification component of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient error handling in DNS name resolution by the affected software. An attacker could exploit this vulnerability by sending specially formatted email messages that are processed by an affected device. A successful exploit could allow the attacker to cause the device to become unreachable from management interfaces or to process additional email messages for a period of time until the device recovers, resulting in a DoS condition. Continued attacks could cause the device to become completely unavailable, resulting in a persistent DoS condition.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-44868 ‼
📖 Read
via "National Vulnerability Database".
A problem was found in ming-soft MCMS v5.1. There is a sql injection vulnerability in /ms/cms/content/list.do📖 Read
via "National Vulnerability Database".
👍1
‼ CVE-2022-20750 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability in the checkpoint manager implementation of Cisco Redundancy Configuration Manager (RCM) for Cisco StarOS Software could allow an unauthenticated, remote attacker to cause the checkpoint manager process to restart upon receipt of malformed TCP data. This vulnerability is due to improper input validation of an ingress TCP packet. An attacker could exploit this vulnerability by sending crafted TCP data to the affected application. A successful exploit could allow the attacker to cause a denial of service (DoS) condition due to the checkpoint manager process restarting.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-23632 ‼
📖 Read
via "National Vulnerability Database".
Traefik is an HTTP reverse proxy and load balancer. Prior to version 2.6.1, Traefik skips the router transport layer security (TLS) configuration when the host header is a fully qualified domain name (FQDN). For a request, the TLS configuration choice can be different than the router choice, which implies the use of a wrong TLS configuration. When sending a request using FQDN handled by a router configured with a dedicated TLS configuration, the TLS configuration falls back to the default configuration that might not correspond to the configured one. If the CNAME flattening is enabled, the selected TLS configuration is the SNI one and the routing uses the CNAME value, so this can skip the expected TLS configuration. Version 2.6.1 contains a patch for this issue. As a workaround, one may add the FDQN to the host rule. However, there is no workaround if the CNAME flattening is enabled.📖 Read
via "National Vulnerability Database".
⚠ S3 Ep70: Bitcoin, billing blunders, and 0-day after 0-day after 0-day [Podcast + Transcript] ⚠
📖 Read
via "Naked Security".
Latest episode - listen and learn!📖 Read
via "Naked Security".
Naked Security
S3 Ep70: Bitcoin, billing blunders, and 0-day after 0-day after 0-day [Podcast + Transcript]
Latest episode – listen and learn!
❌ Baby Golang-Based Botnet Already Pulling in $3K/Month for Operators ❌
📖 Read
via "Threat Post".
Kraken has already spread like wildfire, but in the past few months, the malware's author has been tinkering away, adding more infostealers and backdoors.📖 Read
via "Threat Post".
Threat Post
Baby Golang-Based Botnet Already Pulling in $3K/Month for Operators
Newborn as it is, the Kraken botnet has already spread like wildfire, thanks to the malware's author tinkering away over the past few months, adding more infostealers and backdoors.
🕴 Software-Developer Security Vendor Snyk Buys Cloud Security Company 🕴
📖 Read
via "Dark Reading".
Acquisition helps expand Snyk into the cloud security sector.📖 Read
via "Dark Reading".
Dark Reading
Software-Developer Security Vendor Snyk Buys Cloud Security Company
Acquisition helps expand Snyk into the cloud security sector.
‼ CVE-2022-24683 ‼
📖 Read
via "National Vulnerability Database".
HashiCorp Nomad and Nomad Enterprise 0.9.2 through 1.0.17, 1.1.11, and 1.2.5 allow operators with read-fs and alloc-exec (or job-submit) capabilities to read arbitrary files on the host filesystem as root.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-39034 ‼
📖 Read
via "National Vulnerability Database".
IBM MQ 9.1 LTS is vulnerable to a denial of service attack caused by an issue within the channel process. IBM X-Force ID: 213964.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-0638 ‼
📖 Read
via "National Vulnerability Database".
Cross-Site Request Forgery (CSRF) in Packagist microweber/microweber prior to 1.2.11.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-0639 ‼
📖 Read
via "National Vulnerability Database".
Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.7.📖 Read
via "National Vulnerability Database".