📢 IT Pro News In Review: Compromised Nvidia data, protesters boycott Russian tech, Conti data breach 📢
📖 Read
via "ITPro".
Catch up on the biggest headlines of the week in just two minutes📖 Read
via "ITPro".
IT PRO
IT Pro News In Review: Compromised Nvidia data, protesters boycott Russian tech, Conti data breach
Catch up on the biggest headlines of the week in just two minutes
📢 OneWeb suspends satellite launch from Russian spaceport 📢
📖 Read
via "ITPro".
The decision follows Roscosmos’ demand that the UK sell its 20% stake in OneWeb purchased in 2020📖 Read
via "ITPro".
IT PRO
OneWeb suspends satellite launch from Russian spaceport | IT PRO
The decision follows Roscosmos’ demand that the UK sell its 20% stake in OneWeb purchased in 2020
👍1
‼ CVE-2022-25069 ‼
📖 Read
via "National Vulnerability Database".
Mark Text v0.16.3 was discovered to contain a DOM-based cross-site scripting (XSS) vulnerability which allows attackers to perform remote code execution (RCE) via injecting a crafted payload into /lib/contentState/pasteCtrl.js.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-25465 ‼
📖 Read
via "National Vulnerability Database".
Espruino 2v11 release was discovered to contain a stack buffer overflow via src/jsvar.c in jsvGetNextSibling.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-25044 ‼
📖 Read
via "National Vulnerability Database".
Espruino 2v11.251 was discovered to contain a stack buffer overflow via src/jsvar.c in jsvNewFromString.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-0849 ‼
📖 Read
via "National Vulnerability Database".
Use After Free in r_reg_get_name_idx in GitHub repository radareorg/radare2 prior to 5.6.6.📖 Read
via "National Vulnerability Database".
⚠ Firefox patches two in-the-wild exploits – update now! ⚠
📖 Read
via "Naked Security".
Firefox just published a double-zero-day patch - "remote code execution" combined with "sandbox escape". Update now!📖 Read
via "Naked Security".
Sophos News
Naked Security – Sophos News
‼ CVE-2022-26487 ‼
📖 Read
via "National Vulnerability Database".
Mitel MiCollab before 9.4 SP1 FP1 and MiVoice Business Express through 8.1 allow remote attackers to obtain sensitive information and cause a denial of service (performance degradation and excessive outbound traffic).📖 Read
via "National Vulnerability Database".
👍1
‼ CVE-2022-26490 ‼
📖 Read
via "National Vulnerability Database".
st21nfca_connectivity_event_received in drivers/nfc/st21nfca/se.c in the Linux kernel through 5.16.12 has EVT_TRANSACTION buffer overflows because of untrusted length parameters.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-0868 ‼
📖 Read
via "National Vulnerability Database".
Open Redirect in GitHub repository medialize/uri.js prior to 1.19.10.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-44748 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability affecting F-Secure SAFE browser was discovered whereby browsers loads images automatically this vulnerability can be exploited remotely by an attacker to execute the JavaScript can be used to trigger universal cross-site scripting through the browser. User interaction is required prior to exploitation, such as entering a malicious website to trigger the vulnerability.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-44749 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability affecting F-Secure SAFE browser protection was discovered improper URL handling can be triggered to cause universal cross-site scripting through browsing protection in a SAFE web browser. User interaction is required prior to exploitation. A successful exploitation may lead to arbitrary code execution.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-0697 ‼
📖 Read
via "National Vulnerability Database".
Open Redirect in GitHub repository archivy/archivy prior to 1.7.0.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-4199 ‼
📖 Read
via "National Vulnerability Database".
Incorrect Permission Assignment for Critical Resource vulnerability in the crash handling component BDReinit.exe as used in Bitdefender Total Security, Internet Security, Antivirus Plus, Endpoint Security Tools for Windows allows a remote attacker to escalate local privileges to SYSTEM. This issue affects: Bitdefender Total Security versions prior to 26.0.10.45. Bitdefender Internet Security versions prior to 26.0.10.45. Bitdefender Antivirus Plus versions prior to 26.0.10.45. Bitdefender Endpoint Security Tools for Windows versions prior to 7.4.3.146.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-4198 ‼
📖 Read
via "National Vulnerability Database".
A NULL Pointer Dereference vulnerability in the messaging_ipc.dll component as used in Bitdefender Total Security, Internet Security, Antivirus Plus, Endpoint Security Tools, VPN Standalone allows an attacker to arbitrarily crash product processes and generate crashdump files. This issue affects: Bitdefender Total Security versions prior to 26.0.3.29. Bitdefender Internet Security versions prior to 26.0.3.29. Bitdefender Antivirus Plus versions prior to 26.0.3.29. Bitdefender Endpoint Security Tools versions prior to 7.2.2.92. Bitdefender VPN Standalone versions prior to 25.5.0.48.📖 Read
via "National Vulnerability Database".
🕴 After a Busy December, Attacks on Log4J Vulnerability Dropped 🕴
📖 Read
via "Dark Reading".
While attackers and researchers shift their attention to the next new vulnerability, security teams make sure they finish patching vulnerable Log4j versions in their applications and services .📖 Read
via "Dark Reading".
Dark Reading
After a Busy December, Attacks on Log4j Vulnerability Dropped
While attackers and researchers shift their attention to the next new vulnerability, security teams make sure they finish patching vulnerable Log4j versions in their applications and services.
🗓️ Utah privacy bill places tighter controls on consumer data 🗓️
📖 Read
via "The Daily Swig".
Policymakers move forward with new data privacy legislation📖 Read
via "The Daily Swig".
The Daily Swig | Cybersecurity news and views
Utah privacy bill places tighter controls on consumer data
Policymakers move forward with new data privacy legislation
🕴 Why the World Needs a Global Collective Cyber Defense 🕴
📖 Read
via "Dark Reading".
This sort of approach would enable cross-company and cross-sector threat information sharing, an effort that would allow companies to easily turn data into actionable insights.📖 Read
via "Dark Reading".
Dark Reading
Why the World Needs a Global Collective Cyber Defense
This sort of approach would enable cross-company and cross-sector threat information sharing, an effort that would allow companies to easily turn data into actionable insights.
🤯1
‼ CVE-2022-0754 ‼
📖 Read
via "National Vulnerability Database".
SQL Injection in GitHub repository salesagility/suitecrm prior to 7.12.5.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-0755 ‼
📖 Read
via "National Vulnerability Database".
Improper Access Control in GitHub repository salesagility/suitecrm prior to 7.12.5.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-0756 ‼
📖 Read
via "National Vulnerability Database".
Improper Authorization in GitHub repository salesagility/suitecrm prior to 7.12.5.📖 Read
via "National Vulnerability Database".