‼ CVE-2022-21718 ‼
📖 Read
via "National Vulnerability Database".
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. A vulnerability in versions prior to `17.0.0-alpha.6`, `16.0.6`, `15.3.5`, `14.2.4`, and `13.6.6` allows renderers to obtain access to a bluetooth device via the web bluetooth API if the app has not configured a custom `select-bluetooth-device` event handler. This has been patched and Electron versions `17.0.0-alpha.6`, `16.0.6`, `15.3.5`, `14.2.4`, and `13.6.6` contain the fix. Code from the GitHub Security Advisory can be added to the app to work around the issue.📖 Read
via "National Vulnerability Database".
🕴 Red Canary's Annual Threat Detection Report Reveals Top Threats and Techniques Targeting Most Organizations 🕴
📖 Read
via "Dark Reading".
Report analyzes 30,000 threats in customer environments to uncover the trends, threats and techniques that comprised the 2021 threat landscape.📖 Read
via "Dark Reading".
Dark Reading
Red Canary's Annual Threat Detection Report Reveals Top Threats and Techniques Targeting Most Organizations
Report analyzes 30,000 threats in customer environments to uncover the trends, threats and techniques that comprised the 2021 threat landscape.
🕴 Ransomware Group Claims Major Okta Breach 🕴
📖 Read
via "Dark Reading".
Screenshots that ransomware gang Lapsus$ released this week suggest the threat actor also stole Microsoft source code.📖 Read
via "Dark Reading".
Dark Reading
Ransomware Group Claims Major Okta Breach
Screenshots that ransomware gang Lapsus$ released this week suggest the threat actor also stole Microsoft source code.
‼ CVE-2022-1031 ‼
📖 Read
via "National Vulnerability Database".
Use After Free in op_is_set_bp in GitHub repository radareorg/radare2 prior to 5.6.6.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-26188 ‼
📖 Read
via "National Vulnerability Database".
TOTOLINK N600R V4.3.0cu.7570_B20200620 was discovered to contain a command injection vulnerability via /setting/NTPSyncWithHost.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-26187 ‼
📖 Read
via "National Vulnerability Database".
TOTOLINK N600R V4.3.0cu.7570_B20200620 was discovered to contain a command injection vulnerability via the pingCheck function.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-26186 ‼
📖 Read
via "National Vulnerability Database".
TOTOLINK N600R V4.3.0cu.7570_B20200620 was discovered to contain a command injection vulnerability via the exportOvpn interface at cstecgi.cgi.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-33961 ‼
📖 Read
via "National Vulnerability Database".
A Cross Site Scripting (XSS) vulnerabililty exists in enhanced-github v5.0.11 via the file name parameter.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-26189 ‼
📖 Read
via "National Vulnerability Database".
TOTOLINK N600R V4.3.0cu.7570_B20200620 was discovered to contain a command injection vulnerability via the langType parameter in the login interface.📖 Read
via "National Vulnerability Database".
❌ Lapsus$ Data Kidnappers Claim Snatches From Microsoft, Okta ❌
📖 Read
via "Threat Post".
Lapsus$ shared screenshots of internal Okta systems and 40Gb of purportedly stolen Microsoft data on Bing, Bing Maps and Cortana.📖 Read
via "Threat Post".
Threat Post
Lapsus$ Data Kidnappers Claim Snatches From Microsoft, Okta
Lapsus$ shared screenshots of internal Okta systems and 40Gb of purportedly stolen Microsoft data on Bing, Bing Maps and Cortana.
🕴 Security Teams Need to Investigate the Okta Breach Themselves 🕴
📖 Read
via "Dark Reading".
Trust, but verify. While organizations wait for official alerts and notifications from Okta, security teams should also begin their own investigations to determine whether they have been exposed.📖 Read
via "Dark Reading".
Dark Reading
Security Teams Need to Investigate the Okta Breach Themselves
Trust, but verify. While organizations wait for official alerts and notifications from Okta, security teams should also begin their own investigations to determine whether they have been exposed.
‼ CVE-2022-25518 ‼
📖 Read
via "National Vulnerability Database".
In CMDBuild from version 3.0 to 3.3.2 payload requests are saved in a temporary log table, which allows attackers with database access to read the password of the users who login to the application by querying the database table.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-27666 ‼
📖 Read
via "National Vulnerability Database".
In the Linux kernel before 5.16.15, there is a buffer overflow in ESP transformation in net/ipv4/esp4.c and net/ipv6/esp6.c via a large message.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-1033 ‼
📖 Read
via "National Vulnerability Database".
Unrestricted Upload of File with Dangerous Type in GitHub repository crater-invoice/crater prior to 6.0.6.📖 Read
via "National Vulnerability Database".
🕴 Darktrace AI Stops Cyberattack Exploiting Log4j Vulnerability at Global Financial Services Provider 🕴
📖 Read
via "Dark Reading".
📖 Read
via "Dark Reading".
Dark Reading
Darktrace AI Stops Cyberattack Exploiting Log4j Vulnerability at Global Financial Services Provider
CAMBRIDGE, UK, March 23, 2022 /PRNewswire/ -- Darktrace, a global leader in cyber security AI, today announced that a global provider of financial services recently detected and stopped an attacker attempting to leverage a vulnerability in Log4j to deploy…
🕴 Building a Red Team: How to Get Started 🕴
📖 Read
via "Dark Reading".
These groups of authorized hackers work to infiltrate their customer's data, development environment, or any other business area to locate and identify vulnerabilities.📖 Read
via "Dark Reading".
Dark Reading
Building a Red Team: How to Get Started
These groups of authorized hackers work to infiltrate their customer's data, development environment, or any other business area to locate and identify vulnerabilities.
🗓️ US and Canada reinstate cybercrime forum to prevent Russian cyber-attacks 🗓️
📖 Read
via "The Daily Swig".
North American nations agree to share information on key security issues📖 Read
via "The Daily Swig".
The Daily Swig | Cybersecurity news and views
US and Canada reinstate cybercrime forum to prevent Russian cyber-attacks
North American nations agree to share information on key security issues
‼ CVE-2021-25220 ‼
📖 Read
via "National Vulnerability Database".
BIND 9.11.0 -> 9.11.36 9.12.0 -> 9.16.26 9.17.0 -> 9.18.0 BIND Supported Preview Editions: 9.11.4-S1 -> 9.11.36-S1 9.16.8-S1 -> 9.16.26-S1 Versions of BIND 9 earlier than those shown - back to 9.1.0, including Supported Preview Editions - are also believed to be affected but have not been tested as they are EOL. The cache could become poisoned with incorrect records leading to queries being made to the wrong servers, which might also result in false information being returned to clients.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-0635 ‼
📖 Read
via "National Vulnerability Database".
Versions affected: BIND 9.18.0 When a vulnerable version of named receives a series of specific queries, the named process will eventually terminate due to a failed assertion check.📖 Read
via "National Vulnerability Database".
🗓️ Sophos fixes SQL injection vulnerability in UTM appliance 🗓️
📖 Read
via "The Daily Swig".
‘God box’ loses its religion📖 Read
via "The Daily Swig".
The Daily Swig | Cybersecurity news and views
Sophos fixes SQL injection vulnerability in UTM appliance
‘God box’ loses its religion
❌ Microsoft: Lapsus$ Used Employee Account to Steal Source Code ❌
📖 Read
via "Threat Post".
The data-extortion gang got at Microsoft's Azure DevOps server. Meanwhile, fellow Lapsus$ victim and authentication firm Okta said 2.5 percent of customers were affected in its own Lapsus$ attack.📖 Read
via "Threat Post".
Threat Post
Microsoft: Lapsus$ Used Employee Account to Steal Source Code
In related news, fellow Lapsus$ victim and authentication firm Okta said that 2.5 percent of its customers were affected in the threat actor's attack.