‼ CVE-2022-1534 ‼
📖 Read
via "National Vulnerability Database".
Buffer Over-read at parse_rawml.c:1416 in GitHub repository bfabiszewski/libmobi prior to 0.11. The bug causes the program reads data past the end of the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a crash.📖 Read
via "National Vulnerability Database".
🗓️ Data breach at US healthcare provider ARcare impacts 345,000 individuals 🗓️
📖 Read
via "The Daily Swig".
Sensitive medical and other personal data was potentially exposed📖 Read
via "The Daily Swig".
The Daily Swig | Cybersecurity news and views
Data breach at US healthcare provider ARcare impacts 345,000 individuals
Sensitive medical and other personal data was potentially exposed
🕴 Ambient.ai Expands Computer Vision Capabilities for Better Building Security 🕴
📖 Read
via "Dark Reading".
The AI startup releases new threat signatures to expand the computer vision platform’s ability to identify potential physical security incidents from camera feeds.📖 Read
via "Dark Reading".
Dark Reading
Ambient.ai Expands Computer Vision Capabilities for Better Building Security
The AI startup releases new threat signatures to expand the computer vision platform’s ability to identify potential physical security incidents from camera feeds.
🛠 TOR Virtual Network Tunneling Tool 0.4.7.7 🛠
📖 Read
via "Packet Storm Security".
Tor is a network of virtual tunnels that allows people and groups to improve their privacy and security on the Internet. It also enables software developers to create new communication tools with built-in privacy features. It provides the foundation for a range of applications that allow organizations and individuals to share information over public networks without compromising their privacy. Individuals can use it to keep remote Websites from tracking them and their family members. They can also use it to connect to resources such as news sites or instant messaging services that are blocked by their local Internet service providers (ISPs). This is the source code release.📖 Read
via "Packet Storm Security".
Packetstormsecurity
TOR Virtual Network Tunneling Tool 0.4.7.7 ≈ Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers
❌ Security Turbulence in the Cloud: Survey Says… ❌
📖 Read
via "Threat Post".
Exclusive Threatpost research examines organizations’ top cloud security concerns, attitudes towards zero-trust and DevSecOps.📖 Read
via "Threat Post".
Threat Post
Security Turbulence in the Cloud: Survey Says…
Exclusive Threatpost research examines organizations’ top cloud security concerns, attitudes towards zero-trust and DevSecOps.
‼ CVE-2022-1536 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability has been found in automad up to 1.10.9 and classified as problematic. This vulnerability affects the Dashboard. The manipulation of the argument title with the input Home</title><script>alert("home")</script><title> leads to a cross site scripting. The attack can be initiated remotely but requires an authentication. The exploit details have disclosed to the public and may be used.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-44596 ‼
📖 Read
via "National Vulnerability Database".
Wondershare LTD Dr. Fone as of 2021-12-06 version is affected by Remote code execution. Due to software design flaws an unauthenticated user can communicate over UDP with the "InstallAssistService.exe" service(the service is running under SYSTEM privileges) and manipulate it to execute malicious executable without any validation from a remote location and gain SYSTEM privileges📖 Read
via "National Vulnerability Database".
‼ CVE-2021-44595 ‼
📖 Read
via "National Vulnerability Database".
Wondershare Dr. Fone Latest version as of 2021-12-06 is vulnerable to Incorrect Access Control. A normal user can send manually crafted packets to the ElevationService.exe and execute arbitrary code without any validation with SYSTEM privileges.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-41942 ‼
📖 Read
via "National Vulnerability Database".
The Magic CMS MSVOD v10 video system has a SQL injection vulnerability. Attackers can use vulnerabilities to obtain sensitive information in the database.📖 Read
via "National Vulnerability Database".
🕴 Take a Diversified Approach to Encryption 🕴
📖 Read
via "Dark Reading".
Encryption will break, so it's important to mix and layer different encryption methods.📖 Read
via "Dark Reading".
Dark Reading
Take a Diversified Approach to Encryption
Encryption will break, so it's important to mix and layer different encryption methods.
⚠ S3 Ep80: Ransomware news, phishing woes, NAS bugs, and a giant hole in Java [Podcast] ⚠
📖 Read
via "Naked Security".
Latest episode - listen now!📖 Read
via "Naked Security".
Naked Security
S3 Ep80: Ransomware news, phishing woes, NAS bugs, and a giant hole in Java [Podcast]
Latest episode – listen now!
🗓️ Bug Bounty Radar // The latest bug bounty programs for May 2022 🗓️
📖 Read
via "The Daily Swig".
New web targets for the discerning hacker📖 Read
via "The Daily Swig".
The Daily Swig | Cybersecurity news and views
Bug Bounty Radar // The latest bug bounty programs for May 2022
New web targets for the discerning hacker
📢 IT Pro News in Review: Vulnerable Lenovo laptops, record EE 5G speeds, Okta ends LAPSUS$ probe 📢
📖 Read
via "ITPro".
Catch up on the biggest headlines of the week in just two minutes📖 Read
via "ITPro".
IT PRO
IT Pro News in Review: Vulnerable Lenovo laptops, record EE 5G speeds, Okta ends LAPSUS$ probe
Catch up on the biggest headlines of the week in just two minutes
📢 DDoS attacks surge to record numbers in 2022 as a result of Russia-Ukraine war 📢
📖 Read
via "ITPro".
Cases this year saw some of the longest-lasting DDoS attacks ever seen as hacktivists assembled to take on their enemies in the ongoing cyber war between Russia and Ukraine📖 Read
via "ITPro".
IT PRO
DDoS attacks surge to record numbers in 2022 as a result of Russia-Ukraine war | IT PRO
Cases this year saw some of the longest-lasting DDoS attacks ever seen as hacktivists assembled to take on their enemies in the ongoing cyber war between Russia and Ukraine
👍1
📢 Encryption battle plays out in Australian Parliament 📢
📖 Read
via "ITPro".
The opposition said that the government is “addicted to secrecy”📖 Read
via "ITPro".
IT PRO
Encryption battle plays out in Australian Parliament | IT PRO
The opposition said that the government is “addicted to secrecy”
📢 Best VPN services 2022 📢
📖 Read
via "ITPro".
With remote working on the rise, we round up the best tried and tested VPN services📖 Read
via "ITPro".
IT PRO
Best VPN services 2022 | IT PRO
With remote working on the rise, we round up the best tried and tested VPN services
📢 AWS launches quantum random number generator 📢
📖 Read
via "ITPro".
The cloud giant is using an Australian university’s technology to help customers access random numbers for experiments through an API📖 Read
via "ITPro".
IT PRO
AWS launches quantum random number generator | IT PRO
The cloud giant is using an Australian university’s technology to help customers access random numbers for experiments through an API
📢 Exclusive: Former Shiseido staff say company was aware of data breach weeks before official notice 📢
📖 Read
via "ITPro".
Fake companies were created using the stolen identities of hundreds of Shiseido employees, former staff claim📖 Read
via "ITPro".
IT PRO
Exclusive: Former Shiseido staff say company was aware of data breach weeks before official notice | IT PRO
Fake companies were created using the stolen identities of hundreds of Shiseido employees, former staff claim
📢 Microsoft announces lucrative new bug bounty awards for M365 products and services 📢
📖 Read
via "ITPro".
The new awards will focus on scenario-based weaknesses and offer bonuses of up to 30% for the most severe bugs📖 Read
via "ITPro".
ITPro
Microsoft announces lucrative new bug bounty awards for M365 products and services
The new awards will focus on scenario-based weaknesses and offer bonuses of up to 30% for the most severe bugs
📢 Funky Pigeon site offline after "cyber incident" 📢
📖 Read
via "ITPro".
The WH Smith-owned card site has reported the breach to "the relevant regulators"📖 Read
via "ITPro".
IT PRO
Funky Pigeon site offline after "cyber incident" | IT PRO
The WH Smith-owned card site has reported the breach to "the relevant regulators"
📢 Tech leaders share how to break into the tech industry 📢
📖 Read
via "ITPro".
“You have to feel like a true member of the IT world before you actually become a member"📖 Read
via "ITPro".
IT PRO
Tech leaders share how to break into the tech industry | IT PRO
“You have to feel like a true member of the IT world before you actually become a member"