❌ Cisco Warns of Critical Nexus 9000 Data Center Flaw ❌
📖 Read
via "Threatpost".
Part of a slew of patches from the networking vendor, the CVSS 9.8 bug allows remote takeover of a vulnerable device.📖 Read
via "Threatpost".
Threat Post
Cisco Warns of Critical Nexus 9000 Data Center Flaw
Part of a slew of patches from the networking vendor, the CVSS 9.8 bug allows remote takeover of a vulnerable device.
🔐 6 ways to strengthen your password 🔐
📖 Read
via "Security on TechRepublic".
Make an effort to secure your digital life with these helpful, easy-to-follow password tips.📖 Read
via "Security on TechRepublic".
TechRepublic
6 ways to strengthen your password
Make an effort to secure your digital life with these helpful, easy-to-follow password tips.
🔏 NIST Sets New Standard for Data Encryption Testing 🔏
📖 Read
via "Subscriber Blog RSS Feed ".
NIST has updated the Federal Information Processing Standard, or FIPS, to align with the international standard, ISO 19790 for the first time,📖 Read
via "Subscriber Blog RSS Feed ".
Digital Guardian
NIST Sets New Standard for Data Encryption Testing
NIST has updated the Federal Information Processing Standard, or FIPS, to align with the international standard, ISO 19790 for the first time,
ATENTION‼ New - CVE-2018-14559 (ac10_firmware, ac7_firmware, ac9_firmware)
📖 Read
via "National Vulnerability Database".
An issue was discovered on Tenda AC7 devices with firmware through V15.03.06.44_CN(AC7), AC9 devices with firmware through V15.03.05.19(6318)_CN(AC9), and AC10 devices with firmware through V15.03.06.23_CN(AC10). A buffer overflow vulnerability exists in the router's web server (httpd). When processing the list parameters for a post request, the value is directly written with sprintf to a local variable placed on the stack, which overrides the return address of the function, causing a buffer overflow.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2018-14557 (ac10_firmware, ac7_firmware, ac9_firmware)
📖 Read
via "National Vulnerability Database".
An issue was discovered on Tenda AC7 devices with firmware through V15.03.06.44_CN(AC7), AC9 devices with firmware through V15.03.05.19(6318)_CN(AC9), and AC10 devices with firmware through V15.03.06.23_CN(AC10). A buffer overflow vulnerability exists in the router's web server (httpd). When processing the page parameters for a post request, the value is directly written with sprintf to a local variable placed on the stack, which overrides the return address of the function, a causing buffer overflow.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2018-12244 (endpoint_protection)
📖 Read
via "National Vulnerability Database".
SEP (Mac client) prior to and including 12.1 RU6 MP9 and prior to 14.2 RU1 may be susceptible to a CSV/DDE injection (also known as formula injection) vulnerability, which is a type of issue whereby an application or website allows untrusted input into CSV files.📖 Read
via "National Vulnerability Database".
🕴 Real-World Use, Risk of Open Source Code 🕴
📖 Read
via "Dark Reading: ".
Organizations are using more open source software than ever before, but managing that code remains a challenge.📖 Read
via "Dark Reading: ".
Dark Reading
Real-World Use, Risk of Open Source Code
Organizations are using more open source software than ever before, but managing that code remains a challenge.
❌ Dell Security Support Tool Harbors High-Severity Flaws ❌
📖 Read
via "Threatpost".
Dell has patched two high-severity vulnerabilities in its SupportAssist software meant to aid security issues for customers.📖 Read
via "Threatpost".
Threat Post
Dell Security Support Tool Harbors High-Severity Flaws
Dell has patched two high-severity vulnerabilities in its software meant to support hardware issues for customers.
❌ Ladders, SkyMed Leak Employment, Medical Data for Millions ❌
📖 Read
via "Threatpost".
One of the misconfigured Elasticsearch databases showed evidence of a ransomware attack.📖 Read
via "Threatpost".
Threat Post
Ladders, SkyMed Leak Employment, Medical Data for Millions
One of the misconfigured Elasticsearch databases showed evidence of a ransomware attack.
ATENTION‼ New - CVE-2017-18374
📖 Read
via "National Vulnerability Database".
The ZyXEL P660HN-T1A v1 TCLinux Fw $7.3.15.0 v001 / 3.40(ULM.0)b31 router distributed by TrueOnline has two user accounts with default passwords, including a hardcoded service account with the username true and password true. These accounts can be used to login to the web interface, exploit authenticated command injections and change router settings for malicious purposes.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2017-18373
📖 Read
via "National Vulnerability Database".
The Billion 5200W-T TCLinux Fw $7.3.8.0 v008 130603 router distributed by TrueOnline has three user accounts with default passwords, including two hardcoded service accounts: one with the username true and password true, and another with the username user3 and and a long password consisting of a repetition of the string 0123456789. These accounts can be used to login to the web interface, exploit authenticated command injections, and change router settings for malicious purposes.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2017-18372
📖 Read
via "National Vulnerability Database".
The Billion 5200W-T TCLinux Fw $7.3.8.0 v008 130603 router distributed by TrueOnline has a command injection vulnerability in the Time Setting function, which is only accessible by an authenticated user. The vulnerability is in the tools_time.asp page and can be exploited through the uiViewSNTPServer parameter. Authentication can be achieved by exploiting CVE-2017-18373.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2017-18371
📖 Read
via "National Vulnerability Database".
The ZyXEL P660HN-T1A v2 TCLinux Fw #7.3.37.6 router distributed by TrueOnline has three user accounts with default passwords, including two hardcoded service accounts: one with the username true and password true, and another with the username supervisor and password zyad1234. These accounts can be used to login to the web interface, exploit authenticated command injections, and change router settings for malicious purposes.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2017-18370
📖 Read
via "National Vulnerability Database".
The ZyXEL P660HN-T1A v2 TCLinux Fw #7.3.37.6 router distributed by TrueOnline has a command injection vulnerability in the Remote System Log forwarding function, which is only accessible by an authenticated user. The vulnerability is in the logSet.asp page and can be exploited through the ServerIP parameter. Authentication can be achieved by exploiting CVE-2017-18371.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2017-18369
📖 Read
via "National Vulnerability Database".
The Billion 5200W-T 1.02b.rc5.dt49 router distributed by TrueOnline has a command injection vulnerability in the Remote System Log forwarding function, which is accessible by an unauthenticated user. The vulnerability is in the adv_remotelog.asp page and can be exploited through the syslogServerAddr parameter.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2017-18368
📖 Read
via "National Vulnerability Database".
The ZyXEL P660HN-T1A v1 TCLinux Fw $7.3.15.0 v001 / 3.40(ULM.0)b31 router distributed by TrueOnline has a command injection vulnerability in the Remote System Log forwarding function, which is accessible by an unauthenticated user. The vulnerability is in the ViewLog.asp page and can be exploited through the remote_host parameter.📖 Read
via "National Vulnerability Database".
🕴 Security Depends on Careful Design 🕴
📖 Read
via "Dark Reading: ".
Deploying focused edge protection on-site extends security beyond the network level to shield millions of previously exposed devices, apps, and control systems.📖 Read
via "Dark Reading: ".
Darkreading
Security Depends on Careful Design
Deploying focused edge protection on-site extends security beyond the network level to shield millions of previously exposed devices, apps, and control systems.
❌ D-Link Cloud Camera Flaw Gives Hackers Access to Video Stream ❌
📖 Read
via "Threatpost".
Researchers warn customers to reconsider the use of the camera’s remote access feature if the device is monitoring highly sensitive areas of their household or company.📖 Read
via "Threatpost".
Threat Post
D-Link Cloud Camera Flaw Gives Hackers Access to Video Stream
Researchers warn customers to reconsider the use of the camera’s remote access feature if the device is monitoring highly sensitive areas of their household or company.
🕴 Security Doesn't Trust IT - and IT Doesn't Trust Security 🕴
📖 Read
via "Dark Reading: ".
How a rocky relationship between IT operations and cybersecurity teams can compound security risks.📖 Read
via "Dark Reading: ".
Darkreading
Security Doesn't Trust IT – and IT Doesn't Trust Security
How a rocky relationship between IT operations and cybersecurity teams can compound security risks.
🕴 Misconfigured Ladders Database Exposed 13M User Records 🕴
📖 Read
via "Dark Reading: ".
Job-hunting site Ladders leaves job seeker data exposed on the Internet.📖 Read
via "Dark Reading: ".
Darkreading
Misconfigured Ladders Database Exposed 13M User Records
Job-hunting site Ladders leaves job seeker data exposed on the Internet.
🔐 How to use the Enpass Password Audit tools 🔐
📖 Read
via "Security on TechRepublic".
If Enpass is your password manager of choice, there are three handy audit tools you should be using. Jack Wallen explains.📖 Read
via "Security on TechRepublic".