πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
25.8K subscribers
89.2K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
β€Ό CVE-2021-39046 β€Ό

IBM Business Automation Workflow 18.0, 19.0, 20.0, and 21.0 and IBM Business Process Manager 8.5 and 8.6 stores user credentials in plain clear text which can be read by a lprivileged user. IBM X-Force ID: 214346.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2021-29899 β€Ό

IBM Engineering Requirements Quality Assistant prior to 3.1.3 could allow an authenticated user to cause a denial of service. IBM X-Force ID: 207413.

πŸ“– Read

via "National Vulnerability Database".
⚠ OpenSSL patches infinite-loop DoS bug in certificate verification ⚠

When it comes to writing loops in your code... never sit on the fence!

πŸ“– Read

via "Naked Security".
πŸ” Friday Five 3/18 πŸ”

How HIPAA can help mitigate cyberattacks, killing the password, and more - catch up on the infosec news of the week with the Friday Five!

πŸ“– Read

via "".
πŸ•΄ Security Teams Struggle to Get Started With Zero Trust πŸ•΄

Nearly a third of respondents in a Dark Reading survey on endpoint security strategy say zero trust is too confusing to implement.

πŸ“– Read

via "Dark Reading".
❌ DarkHotel APT Targets Wynn, Macao Hotels to Rip Off Guest Data ❌

A DarkHotel phishing campaign breached luxe hotel networks, including Wynn Palace and the Grand Coloane Resort in Macao, a new report says.

πŸ“– Read

via "Threat Post".
πŸ•΄ Menlo Security: Less Than Three in 10 Organizations Are Equipped to Combat Growing Wave of Web-Based Cyber Threats πŸ•΄

Report finds that 62 percent of IT decision makers have suffered a browser-based attack in the past 12 months.

πŸ“– Read

via "Dark Reading".
πŸ•΄ A Chance to Raise Shields Right πŸ•΄

CISA's "Shields Up" alert provides urgency β€” and opportunity β€” for supply chain conversations.

πŸ“– Read

via "Dark Reading".
πŸ•΄ CyCognito Launches Exploit Intelligence πŸ•΄

Risk intelligence solution provides insight, visibility, and guidance to identify, prioritize, and remediate vulnerabilities like Log4j

πŸ“– Read

via "Dark Reading".
β€Ό CVE-2022-22611 β€Ό

An out-of-bounds read was addressed with improved input validation. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, iTunes 12.12.3 for Windows, watchOS 8.5, macOS Monterey 12.3. Processing a maliciously crafted image may lead to arbitrary code execution.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-22617 β€Ό

A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Security Update 2022-003 Catalina. An application may be able to gain elevated privileges.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-22656 β€Ό

An authentication issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Security Update 2022-003 Catalina. A local attacker may be able to view the previous logged in userÒ€ℒs desktop from the fast user switching screen.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-25605 β€Ό

Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities discovered in WP-DownloadManager WordPress plugin (versions <= 1.68.6). Vvulnerable parameters &download_path, &download_path_url, &download_page_url.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-22618 β€Ό

This issue was addressed with improved checks. This issue is fixed in watchOS 8.5, iOS 15.4 and iPadOS 15.4. A user may be able to bypass the Emergency SOS passcode prompt.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-22626 β€Ό

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Security Update 2022-003 Catalina. Processing a maliciously crafted AppleScript binary may result in unexpected application termination or disclosure of process memory.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2021-30771 β€Ό

An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.4, iOS 14.6 and iPadOS 14.6, watchOS 7.5, tvOS 14.6. Processing a maliciously crafted font file may lead to arbitrary code execution.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-27243 β€Ό

An issue was discovered in MISP before 2.4.156. app/View/Users/terms.ctp allows Local File Inclusion via the custom terms file setting.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-25603 β€Ό

Authenticated (author or higher user role) Stored Cross-Site Scripting (XSS) vulnerability discovered in MaxGalleria WordPress plugin (versions 6.2.5).

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-22671 β€Ό

An authentication issue was addressed with improved state management. This issue is fixed in iOS 15.4 and iPadOS 15.4. A person with physical access to an iOS device may be able to access photos from the lock screen.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-22586 β€Ό

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.2. A malicious application may be able to execute arbitrary code with kernel privileges.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-22666 β€Ό

A memory corruption issue was addressed with improved validation. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, watchOS 8.5. Processing a maliciously crafted image may lead to heap corruption.

πŸ“– Read

via "National Vulnerability Database".