🕴 Attackers Hone Their Playbooks, Become More Agile 🕴
📖 Read
via "Dark Reading".
Less malware, more interactive intrusions, and big game hunting lead to more success, with an 82% increase in ransomware-related data leaks.📖 Read
via "Dark Reading".
Dark Reading
Attackers Hone Their Playbooks, Become More Agile
Less malware, more interactive intrusions, and big game hunting lead to more success, with an 82% increase in ransomware-related data leaks.
🕴 Darktrace Artificial Intelligence Stops Cyberattack at Italian Electronics Distributor 🕴
📖 Read
via "Dark Reading".
Vulnerability allows attackers to run arbitrary commands, including the ability to delete, modify, and exfiltrate private source code.📖 Read
via "Dark Reading".
Dark Reading
Darktrace Artificial Intelligence Stops Cyberattack at Italian Electronics Distributor
Vulnerability allows attackers to run arbitrary commands, including the ability to delete, modify, and exfiltrate private source code.
🕴 Neustar Security Services Report Highlights Shifts in Threat Landscape Amid Maturing Cybercrime Economy 🕴
📖 Read
via "Dark Reading".
Carpet bombing attacks increase sharply in 2021, along with complex multivector attacks.📖 Read
via "Dark Reading".
Dark Reading
Neustar Security Services Report Highlights Shifts in Threat Landscape Amid Maturing Cybercrime Economy
Carpet bombing attacks increase sharply in 2021, along with complex multivector attacks.
🕴 NSA Issues Guidance for Selecting Strong Cisco Password Types 🕴
📖 Read
via "Dark Reading".
Poorly protected passwords in device configuration files present a risk of compromise, agency says.📖 Read
via "Dark Reading".
Dark Reading
NSA Issues Guidance for Selecting Strong Cisco Password Types
National Security Agency (NSA) has issued fresh guidance for organizations on selecting strong passwords for Cisco devices citing an increase in compromises.
‼ CVE-2022-22914 ‼
📖 Read
via "National Vulnerability Database".
An incorrect access control issue in the component FileManager of Ovidentia CMS 6.0 allows authenticated attackers to to view and download content in the upload directory via path traversal.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-45382 ‼
📖 Read
via "National Vulnerability Database".
A Remote Command Execution (RCE) vulnerability exists in all series H/W revisions D-link DIR-810L, DIR-820L/LW, DIR-826L, DIR-830L, and DIR-836L routers via the DDNS function in ncc2 binary file. Note: DIR-810L, DIR-820L, DIR-830L, DIR-826L, DIR-836L, all hardware revisions, have reached their End of Life ("EOL") /End of Service Life ("EOS") Life-Cycle and as such this issue will not be patched.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-46319 ‼
📖 Read
via "National Vulnerability Database".
Remote Code Execution (RCE) vulnerability exists in D-Link Router DIR-846 DIR846A1_FW100A43.bin and DIR846enFW100A53DLA-Retail.bin. Malicious users can use this vulnerability to use "\ " or backticks to bypass the shell metacharacters in the ssid0 or ssid1 parameters to execute arbitrary commands.This vulnerability is due to the fact that CVE-2019-17509 is not fully patched and can be bypassed by using line breaks or backticks on its basis.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-46314 ‼
📖 Read
via "National Vulnerability Database".
A Remote Command Execution (RCE) vulnerability exists in HNAP1/control/SetNetworkTomographySettings.php of D-Link Router DIR-846 DIR846A1_FW100A43.bin and DIR846enFW100A53DLA-Retail.bin because backticks can be used for command injection when judging whether it is a reasonable domain name.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-22916 ‼
📖 Read
via "National Vulnerability Database".
O2OA v6.4.7 was discovered to contain a remote code execution (RCE) vulnerability via /x_program_center/jaxrs/invoke.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-23646 ‼
📖 Read
via "National Vulnerability Database".
Next.js is a React framework. Starting with version 10.0.0 and prior to version 12.1.0, Next.js is vulnerable to User Interface (UI) Misrepresentation of Critical Information. In order to be affected, the `next.config.js` file must have an `images.domains` array assigned and the image host assigned in `images.domains` must allow user-provided SVG. If the `next.config.js` file has `images.loader` assigned to something other than default, the instance is not affected. Version 12.1.0 contains a patch for this issue. As a workaround, change `next.config.js` to use a different `loader configuration` other than the default.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-46315 ‼
📖 Read
via "National Vulnerability Database".
Remote Command Execution (RCE) vulnerability exists in HNAP1/control/SetWizardConfig.php in D-Link Router DIR-846 DIR846A1_FW100A43.bin and DIR846enFW100A53DLA-Retail.bin. Malicoius users can use this vulnerability to use "\ " or backticks in the shell metacharacters in the ssid0 or ssid1 parameters to cause arbitrary command execution. Since CVE-2019-17510 vulnerability has not been patched and improved www/hnap1/control/setwizardconfig.php, can also use line breaks and backquotes to bypass.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-25313 ‼
📖 Read
via "National Vulnerability Database".
In Expat (aka libexpat) before 2.4.5, an attacker can trigger stack exhaustion in build_model via a large nesting depth in the DTD element.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-22922 ‼
📖 Read
via "National Vulnerability Database".
TP-Link TL-WA850RE Wi-Fi Range Extender before v6_200923 was discovered to use highly predictable and easily detectable session keys, allowing attackers to gain administrative privileges.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-25315 ‼
📖 Read
via "National Vulnerability Database".
In Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-25314 ‼
📖 Read
via "National Vulnerability Database".
In Expat (aka libexpat) before 2.4.5, there is an integer overflow in copyString.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-46108 ‼
📖 Read
via "National Vulnerability Database".
D-Link DSL-2730E CT-20131125 devices allow XSS via the username parameter to the password page in the maintenance configuration.📖 Read
via "National Vulnerability Database".
🗓️ Lagging behind? New study highlights weaknesses in open source patch process 🗓️
📖 Read
via "The Daily Swig".
Patch delays create a ‘window of opportunity’ for observant attackers📖 Read
via "The Daily Swig".
The Daily Swig | Cybersecurity news and views
Lagging behind? New study highlights weaknesses in open source patch process
Patch delays create a ‘window of opportunity’ for observant attackers
‼ CVE-2022-0660 ‼
📖 Read
via "National Vulnerability Database".
Generation of Error Message Containing Sensitive Information in Packagist microweber/microweber prior to 1.2.11.📖 Read
via "National Vulnerability Database".
❌ Iranian State Broadcaster Clobbered by ‘Clumsy, Buggy’ Code ❌
📖 Read
via "Threat Post".
Researchers said a Jan. 27 attack that aired footage of opposition leaders calling for assassination of Iran’s Supreme Leader was a clumsy and unsophisticated wiper attack.📖 Read
via "Threat Post".
Threat Post
Iranian State Broadcaster Clobbered by ‘Clumsy, Buggy’ Code
Researchers said a Jan. 27 attack that aired footage of opposition leaders calling for assassination of Iran’s Supreme Leader was a clumsy and unsophisticated wiper attack.
❌ Severe WordPress Plug-In UpdraftPlus Bug Threatens Backups ❌
📖 Read
via "Threat Post".
An oversight in a WordPress plug-in exposes PII and authentication data to malicious insiders.📖 Read
via "Threat Post".
Threat Post
Severe WordPress Plug-In UpdraftPlus Bug Threatens Backups
An oversight in a WordPress plug-in exposes PII and authentication data to malicious insiders.
🗓️ Critical vulnerabilities in Zabbix Web Frontend allow authentication bypass, code execution on servers 🗓️
📖 Read
via "The Daily Swig".
Patch now to protect, say researchers📖 Read
via "The Daily Swig".
The Daily Swig | Cybersecurity news and views
Critical vulnerabilities in Zabbix Web Frontend allow authentication bypass, code execution on servers
Patch now to protect, say researchers