ATENTION‼ New - CVE-2015-1343
📖 Read
via "National Vulnerability Database".
All versions of unity-scope-gdrive logs search terms to syslog.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2015-1341
📖 Read
via "National Vulnerability Database".
Any Python module in sys.path can be imported if the command line of the process triggering the coredump is Python and the first argument is -m in Appoprt before 2.19.2 function _python_module_path.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2015-1340
📖 Read
via "National Vulnerability Database".
LXD before version 0.19-0ubuntu5 doUidshiftIntoContainer() has an unsafe Chmod() call that races against the stat in the Filepath.Walk() function. A symbolic link created in that window could cause any file on the system to have any mode of the attacker's choice.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2015-1327
📖 Read
via "National Vulnerability Database".
Content Hub before version 0.0+15.04.20150331-0ubuntu1.0 DBUS API only requires a file path for a content item, it doesn't actually require the confined app have access to the file to create a transfer. This could allow a malicious application using the DBUS API to export file:///etc/passwd which would then send a copy of that file to another app.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2015-1326
📖 Read
via "National Vulnerability Database".
python-dbusmock before version 0.15.1 AddTemplate() D-Bus method call or DBusTestCase.spawn_server_template() method could be tricked into executing malicious code if an attacker supplies a .pyc file.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2015-1320
📖 Read
via "National Vulnerability Database".
The SeaMicro provisioning of Ubuntu MAAS logs credentials, including username and password, for the management interface. This issue affects Ubuntu MAAS versions prior to 1.9.2.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2015-1316
📖 Read
via "National Vulnerability Database".
Juju Core's Joyent provider before version 1.25.5 uploads the user's private ssh key.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2014-1428
📖 Read
via "National Vulnerability Database".
A vulnerability in generate_filestorage_key of Ubuntu MAAS allows an attacker to brute-force filenames. This issue affects Ubuntu MAAS versions prior to 1.9.2.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2014-1427
📖 Read
via "National Vulnerability Database".
A vulnerability in the REST API of Ubuntu MAAS allows an attacker to cause a logged-in user to execute commands via cross-site scripting. This issue affects MAAS versions prior to 1.9.2.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2014-1426
📖 Read
via "National Vulnerability Database".
A vulnerability in maasserver.api.get_file_by_name of Ubuntu MAAS allows unauthenticated network clients to download any file. This issue affects: Ubuntu MAAS versions prior to 1.9.2.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2011-3151
📖 Read
via "National Vulnerability Database".
The Ubuntu SELinux initscript before version 1:0.10 used touch to create a lockfile in a world-writable directory. If the OS kernel does not have symlink protections then an attacker can cause a zero byte file to be allocated on any writable filesystem.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2011-3147
📖 Read
via "National Vulnerability Database".
Versions of nova before 2012.1 could expose hypervisor host files to a guest operating system when processing a maliciously constructed qcow filesystem.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2011-3145
📖 Read
via "National Vulnerability Database".
When mount.ecrpytfs_private before version 87-0ubuntu1.2 calls setreuid() it doesn't also set the effective group id. So when it creates the new version, mtab.tmp, it's created with the group id of the user running mount.ecryptfs_private.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2011-1830
📖 Read
via "National Vulnerability Database".
Ekiga versions before 3.3.0 attempted to load a module from /tmp/ekiga_test.so.📖 Read
via "National Vulnerability Database".
🔏 Machine Learning Technology at Center of Real Estate Trade Theft Case 🔏
📖 Read
via "Subscriber Blog RSS Feed ".
In a complaint, filed Friday, one company is alleging a former employee took screen shots of trade secrets, including proprietary wireframes and a proposed regional launch timeline of its services, before leaving for another real estate technology competitor.📖 Read
via "Subscriber Blog RSS Feed ".
Digital Guardian
Machine Learning Technology at Center of Real Estate Trade Theft Case
In a complaint, filed Friday, one company is alleging a former employee took screen shots of trade secrets, including proprietary wireframes and a proposed regional launch timeline of its services, before leaving for another real estate technology competitor.
🕴 Who Gets Targeted Most in Cyberattack Campaigns 🕴
📖 Read
via "Dark Reading: ".
Attackers are changing both their tactics and targets in an attempt to remain criminally successful, Proofpoint's study found.📖 Read
via "Dark Reading: ".
Darkreading
Who Gets Targeted Most in Cyberattack Campaigns
Attackers are changing both their tactics and targets in an attempt to remain criminally successful, Proofpoint's study found.
❌ Is Privacy Really iPhone? Researchers Weigh in on Apple’s Targeted Ad Tracking ❌
📖 Read
via "Threatpost".
A unique identifier is enabled by default on every iPhone that's shipped, allowing advertisers to follow the phone's activity across the web.📖 Read
via "Threatpost".
Threat Post
Is Privacy Really iPhone? Researchers Weigh in on Apple’s Targeted Ad Tracking
A unique identifier is enabled by default on every iPhone that's shipped, allowing advertisers to follow the phone's activity across the web.
❌ Wi-Fi Hotspot Finder Spills 2 Million Passwords ❌
📖 Read
via "Threatpost".
China-based app maker ignored repeated warnings by researchers that its password database - stored in plain text - was accessible to anyone online.📖 Read
via "Threatpost".
Threat Post
Wi-Fi Hotspot Finder Spills 2 Million Passwords
China-based app maker ignored repeated warnings by researchers that its password database - stored in plain text - was accessible to anyone online.
🕴 WannaCry Hero Hutchins Pleads Guilty to Malware Charges 🕴
📖 Read
via "Dark Reading: ".
Marcus Hutchins, the security researcher who helped halt the spread of the WannaCry attack, pleads guilty to two charges related to writing malware.📖 Read
via "Dark Reading: ".
Darkreading
WannaCry Hero Hutchins Pleads Guilty to Malware Charges
Marcus Hutchins, the security researcher who helped halt the spread of the WannaCry attack, pleads guilty to two charges related to writing malware.
🕴 Trojanized TeamViewer Used in Targeted Attacks Against Multiple Embassies 🕴
📖 Read
via "Dark Reading: ".
Motive remains unclear though financial theft appears to be one possibility, Check Point Research says.📖 Read
via "Dark Reading: ".
Darkreading
Trojanized TeamViewer Used in Targeted Attacks Against Multiple Embassies
Motive remains unclear though financial theft appears to be one possibility, Check Point Research says.
🕴 FBI: $2.7 billion in Losses to Cyber-Enabled Crimes in 2018 🕴
📖 Read
via "Dark Reading: ".
Internet Crime Complaint Center (IC3) last year received an average of 900+ reports daily of Internet-enabled theft, fraud, and exploitation.📖 Read
via "Dark Reading: ".
Dark Reading
FBI: $2.7 billion in Losses to Cyber-Enabled Crimes in 2018
Internet Crime Complaint Center (IC3) last year received an average of 900+ reports daily of Internet-enabled theft, fraud, and exploitation.