🕴 Nearly 40% of Macs Left Exposed to Two Zero-Day Exploits 🕴
📖 Read
via "Dark Reading".
Apple's emergency fixes last week for two actively exploited vulnerabilities neglected previous Big Sur and Catalina versions of macOS, security vendor says.📖 Read
via "Dark Reading".
Dark Reading
Nearly 40% of Macs Left Exposed to 2 Zero-Day Exploits
Apple's emergency fixes last week for two actively exploited vulnerabilities neglected previous Big Sur and Catalina versions of macOS, security vendor says.
‼ CVE-2022-26607 ‼
📖 Read
via "National Vulnerability Database".
A remote code execution (RCE) vulnerability in baigo CMS v3.0-alpha-2 was discovered to allow attackers to execute arbitrary code via uploading a crafted PHP file.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-26591 ‼
📖 Read
via "National Vulnerability Database".
FANTEC GmbH MWiD25-DS Firmware v2.000.030 allows unauthenticated attackers to access and download arbitrary files via a crafted GET request.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-26613 ‼
📖 Read
via "National Vulnerability Database".
PHP-CMS v1.0 was discovered to contain a SQL injection vulnerability via the category parameter in categorymenu.php.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-26605 ‼
📖 Read
via "National Vulnerability Database".
eZiosuite v2.0.7 contains an authenticated arbitrary file upload via the Avatar upload functionality.📖 Read
via "National Vulnerability Database".
🕴 Zoom's Bug Bounty Programs Soar to $1.8M 🕴
📖 Read
via "Dark Reading".
Like other software-reliant firms, the company raised its rewards to spur additional scrutiny by security researchers.📖 Read
via "Dark Reading".
Dark Reading
Zoom's Bug Bounty Programs Soar to $1.8M
Like other software-reliant firms, the company raised its rewards to spur additional scrutiny by security researchers.
🕴 Nearly Two-Thirds of Ransomware Victims Paid Ransoms Last Year, Finds "2022 Cyberthreat Defense Report" 🕴
📖 Read
via "Dark Reading".
Record-setting ransomware attacks, a shortage of skilled personnel, and low security awareness across the workforce cause headaches for IT security teams.📖 Read
via "Dark Reading".
Dark Reading
Nearly Two-Thirds of Ransomware Victims Paid Ransoms Last Year, Finds "2022 Cyberthreat Defense Report"
Record-setting ransomware attacks, a shortage of skilled personnel, and low security awareness across the workforce cause headaches for IT security teams.
‼ CVE-2020-22253 ‼
📖 Read
via "National Vulnerability Database".
Xiongmai Technology Co devices AHB7008T-MH-V2, AHB7804R-ELS, AHB7804R-MH-V2, AHB7808R-MS-V2, AHB7808R-MS, AHB7808T-MS-V2, AHB7804R-LMS, and HI3518E_50H10L_S39 were all discovered to have port 9530 open which allows unauthenticated attackers to make arbitrary Telnet connections with the victim device.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-27374 ‼
📖 Read
via "National Vulnerability Database".
Dr Trust USA iCheck Connect BP Monitor BP Testing 118 1.2.1 is vulnerable to a Replay Attack to BP Monitoring.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-27819 ‼
📖 Read
via "National Vulnerability Database".
SWHKD 1.1.5 allows unsafe parsing via the -c option. An information leak might occur but there is a simple denial of service (memory exhaustion) upon an attempt to parse a large or infinite file (such as a block or character device).📖 Read
via "National Vulnerability Database".
‼ CVE-2020-27376 ‼
📖 Read
via "National Vulnerability Database".
Dr Trust USA iCheck Connect BP Monitor BP Testing 118 version 1.2.1 is vulnerable to Missing Authentication.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-27373 ‼
📖 Read
via "National Vulnerability Database".
Dr Trust USA iCheck Connect BP Monitor BP Testing 118 1.2.1 is vulnerable to Plain text command over BLE.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-27375 ‼
📖 Read
via "National Vulnerability Database".
Dr Trust USA iCheck Connect BP Monitor BP Testing 118 version 1.2.1 is vulnerable to Transmitting Write Requests and Chars.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-27818 ‼
📖 Read
via "National Vulnerability Database".
SWHKD 1.1.5 unsafely uses the /tmp/swhkd.sock pathname. There can be an information leak or denial of service.📖 Read
via "National Vulnerability Database".
⚠ Serious Security: Darkweb drugs market Hydra taken offline by German police ⚠
📖 Read
via "Naked Security".
Why are Tor sites hard to locate and therefore difficult to take down? We explain in plain English...📖 Read
via "Naked Security".
Naked Security
Serious Security: Darkweb drugs market Hydra taken offline by German police
Why are Tor sites hard to locate and therefore difficult to take down? We explain in plain English…
❤1👍1
⚠ S3 Ep77: Bugs, busts and old-school PDP-11 hacking [Podcast] ⚠
📖 Read
via "Naked Security".
Latest episode - listen now! Cybersecurity news and advice in plain English.📖 Read
via "Naked Security".
Naked Security
S3 Ep77: Bugs, busts and old-school PDP-11 hacking [Podcast]
Latest episode – listen now! Cybersecurity news and advice in plain English.
‼ CVE-2021-46416 ‼
📖 Read
via "National Vulnerability Database".
Insecure direct object reference in SUNNY TRIPOWER 5.0 Firmware version 3.10.16.R leads to unauthorized user groups accessing due to insecure cookie handling.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-23900 ‼
📖 Read
via "National Vulnerability Database".
A command injection vulnerability in the API of the Wavlink WL-WN531P3 router, version M31G3.V5030.201204, allows an attacker to achieve unauthorized remote code execution via a malicious POST request through /cgi-bin/adm.cgi.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-46417 ‼
📖 Read
via "National Vulnerability Database".
Insecure handling of a download function leads to disclosure of internal files due to path traversal with root privileges in Franklin Fueling Systems Colibri Controller Module 1.8.19.8580.📖 Read
via "National Vulnerability Database".
👍1
❌ MacOS Malware: Myth vs. Truth – Podcast ❌
📖 Read
via "Threat Post".
Huntress Labs R&D Director Jamie Levy busts the old “Macs don’t get viruses” myth and offers tips on how MacOS malware differs and how to protect against it.📖 Read
via "Threat Post".
🗓️ Apple paid out $36,000 bug bounty for HTTP request smuggling flaws on core web apps – research 🗓️
📖 Read
via "The Daily Swig".
Queue poisoning attacks allegedly put accounts at risk of takeover📖 Read
via "The Daily Swig".
The Daily Swig | Cybersecurity news and views
Apple paid out $36,000 bug bounty for HTTP request smuggling flaws on core web apps – research
Queue poisoning attacks allegedly put accounts at risk of takeover