‼ CVE-2022-23900 ‼
📖 Read
via "National Vulnerability Database".
A command injection vulnerability in the API of the Wavlink WL-WN531P3 router, version M31G3.V5030.201204, allows an attacker to achieve unauthorized remote code execution via a malicious POST request through /cgi-bin/adm.cgi.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-46417 ‼
📖 Read
via "National Vulnerability Database".
Insecure handling of a download function leads to disclosure of internal files due to path traversal with root privileges in Franklin Fueling Systems Colibri Controller Module 1.8.19.8580.📖 Read
via "National Vulnerability Database".
👍1
❌ MacOS Malware: Myth vs. Truth – Podcast ❌
📖 Read
via "Threat Post".
Huntress Labs R&D Director Jamie Levy busts the old “Macs don’t get viruses” myth and offers tips on how MacOS malware differs and how to protect against it.📖 Read
via "Threat Post".
🗓️ Apple paid out $36,000 bug bounty for HTTP request smuggling flaws on core web apps – research 🗓️
📖 Read
via "The Daily Swig".
Queue poisoning attacks allegedly put accounts at risk of takeover📖 Read
via "The Daily Swig".
The Daily Swig | Cybersecurity news and views
Apple paid out $36,000 bug bounty for HTTP request smuggling flaws on core web apps – research
Queue poisoning attacks allegedly put accounts at risk of takeover
🕴 The Blurring Line, and Growing Risk, Between Physical and Digital Supply Chains 🕴
📖 Read
via "Dark Reading".
Risk increases as the lines between physical and digital supply chains blur and the computing footprint expands.📖 Read
via "Dark Reading".
Dark Reading
The Blurring Line, and Growing Risk, Between Physical and Digital Supply Chains
Risk increases as the lines between physical and digital supply chains blur and the computing footprint expands.
🕴 Nearly Two-Thirds of Organizations Hit with Ransomware Paid Up in 2021 🕴
📖 Read
via "Dark Reading".
CyberEdge report contains data on the skills shortage, the hottest security tech in 2022, the weakest links of the year, specialty certifications in demand, and more.📖 Read
via "Dark Reading".
Dark Reading
Nearly Two-Thirds of Organizations Hit with Ransomware Paid Up in 2021
CyberEdge report contains data on the skills shortage, the hottest security tech in 2022, the weakest links of the year, specialty certifications in demand, and more.
🕴 Blumira Unveils Cloud SIEM With Integrated Detection and Response for SMBs 🕴
📖 Read
via "Dark Reading".
Self-service cloud SIEM comes in free and paid editions.📖 Read
via "Dark Reading".
Dark Reading
Blumira Unveils Cloud SIEM With Integrated Detection and Response for SMBs
Self-service cloud SIEM comes in free and paid editions.
❌ SSRF Flaw in Fintech Platform Allowed for Compromise of Bank Accounts ❌
📖 Read
via "Threat Post".
Researchers discovered the vulnerability in an API already integrated into many bank systems, which could have defrauded millions of users by giving attackers access to their funds.📖 Read
via "Threat Post".
Threat Post
SSRF Flaw in Fintech Platform Allowed for Compromise of Bank Accounts
Researchers discovered the vulnerability in an API already integrated into many bank systems, which could have defrauded millions of users by giving attackers access to their funds.
👍1
🗓️ Wake-up call: Is the infosec skills gap causing a mental health crisis? 🗓️
📖 Read
via "The Daily Swig".
Increasing workloads are causing depression and anxiety among frontline security staff, report claims📖 Read
via "The Daily Swig".
The Daily Swig | Cybersecurity news and views
Wake-up call: Is the infosec skills gap causing a mental health crisis?
Increasing workloads are causing depression and anxiety among frontline security staff, report claims
👍1
‼ CVE-2021-46418 ‼
📖 Read
via "National Vulnerability Database".
An unauthorized file creation vulnerability in Telesquare TLR-2855KS6 via PUT method can allow creation of CGI scripts.📖 Read
via "National Vulnerability Database".
👍1
‼ CVE-2021-46419 ‼
📖 Read
via "National Vulnerability Database".
An unauthorized file deletion vulnerability in Telesquare TLR-2855KS6 via DELETE method can allow deletion of system files and scripts.📖 Read
via "National Vulnerability Database".
👍1
🕴 Keysight Delivers Zero Trust Test Solution 🕴
📖 Read
via "Dark Reading".
Enables network equipment manufacturers to validate devices in distributed cloud networks.📖 Read
via "Dark Reading".
Dark Reading
Keysight Delivers Zero Trust Test Solution
Enables network equipment manufacturers to validate devices in distributed cloud networks.
👍2
🗓️ VMware patches critical flaws in Workspace ONE Access identity management software 🗓️
📖 Read
via "The Daily Swig".
Virtual reality📖 Read
via "The Daily Swig".
The Daily Swig | Cybersecurity news and views
VMware patches critical flaws in Workspace ONE Access identity management software
Virtual reality
🕴 Nord Security Raises First Outside Capital at $1.6B Valuation 🕴
📖 Read
via "Dark Reading".
Financing raised from Novator Ventures, Burda Principal Investments, General Catalyst, and leading angel investors.📖 Read
via "Dark Reading".
Dark Reading
Nord Security Raises First Outside Capital at $1.6B Valuation
Financing raised from Novator Ventures, Burda Principal Investments, General Catalyst, and leading angel investors.
‼ CVE-2022-27016 ‼
📖 Read
via "National Vulnerability Database".
There is a stack overflow vulnerability in the SetStaticRouteCfg() function in the httpd service of Tenda AC9 15.03.2.21_cn.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-25339 ‼
📖 Read
via "National Vulnerability Database".
ownCloud owncloud/android 2.20 has Incorrect Access Control for local attackers.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-25338 ‼
📖 Read
via "National Vulnerability Database".
ownCloud owncloud/android before 2.20 has Incorrect Access Control for physically proximate attackers.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-26627 ‼
📖 Read
via "National Vulnerability Database".
Online Project Time Management System v1.0 was discovered to contain an arbitrary file write vulnerability which allows attackers to execute arbitrary code via a crafted HTML file.📖 Read
via "National Vulnerability Database".
🕴 Top Application Security Mitigations in Q1 of 2022 🕴
📖 Read
via "Dark Reading".
What is the best way to mitigate application security attacks? Learn how companies have mitigated the top threats.📖 Read
via "Dark Reading".
Dark Reading
Top Application Security Mitigations in Q1 of 2022
What is the best way to mitigate application security attacks? Learn how companies have mitigated the top threats.
‼ CVE-2022-23972 ‼
📖 Read
via "National Vulnerability Database".
ASUS RT-AX56U’s SQL handling function has an SQL injection vulnerability due to insufficient user input validation. An unauthenticated LAN attacker to inject arbitrary SQL code to read, modify and delete database.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-22515 ‼
📖 Read
via "National Vulnerability Database".
A remote, unauthenticated attacker could utilize the control programmer of the CODESYS Control runtime system to use the vulnerability in order to read and modify the configuration file(s) of the affected products.📖 Read
via "National Vulnerability Database".