❌ CANs Reinvent LANs for an All-Local World ❌
📖 Read
via "Threat Post".
A close look at a new type of network, known as a Cloud Area Network.📖 Read
via "Threat Post".
Threat Post
CANs Reinvent LANs for an All-Local World
A close look at a new type of network, known as a Cloud Area Network.
🗓️ Heroku resets user passwords after concluding April cyber-attack ran deep 🗓️
📖 Read
via "The Daily Swig".
Hack investigation blames compromised token for breach📖 Read
via "The Daily Swig".
The Daily Swig | Cybersecurity news and views
Heroku resets user passwords after concluding April cyber-attack ran deep
Hack investigation blames compromised token for breach
🕴 Why Security Matters Even More in Online Gaming 🕴
📖 Read
via "Dark Reading".
As the gaming sector booms, game publishers and gaming networks have been heavily targeted with distributed denial-of-service (DDoS) attacks in the last year.📖 Read
via "Dark Reading".
Darkreading
Why Security Matters Even More in Online Gaming
As the gaming sector booms, game publishers and gaming networks have been heavily targeted with distributed denial-of-service (DDoS) attacks in the last year.
⚠ S3 Ep81: Passwords (still with us!), Github, Firefox at 100, and network worms [Podcast] ⚠
📖 Read
via "Naked Security".
Latest episode - listen now!📖 Read
via "Naked Security".
Naked Security
S3 Ep81: Passwords (still with us!), Github, Firefox at 100, and network worms [Podcast]
Latest episode – listen now!
‼ CVE-2022-28462 ‼
📖 Read
via "National Vulnerability Database".
novel-plus 3.6.0 suffers from an Arbitrary file reading vulnerability.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-29939 ‼
📖 Read
via "National Vulnerability Database".
In LibreHealth EHR 2.0.0, lack of sanitization of the GET parameters debug and InsId in interface\billing\sl_eob_process.php leads to multiple cross-site scripting (XSS) vulnerabilities.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-29938 ‼
📖 Read
via "National Vulnerability Database".
In LibreHealth EHR 2.0.0, lack of sanitization of the GET parameter payment_id in interface\billing\new_payment.php via interface\billing\payment_master.inc.php leads to SQL injection.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-29339 ‼
📖 Read
via "National Vulnerability Database".
In GPAC 2.1-DEV-rev87-g053aae8-master, function BS_ReadByte() in utils/bitstream.c has a failed assertion, which causes a Denial of Service. This vulnerability was fixed in commit 9ea93a2.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-42242 ‼
📖 Read
via "National Vulnerability Database".
A command execution vulnerability exists in jfinal_cms 5.0.1 via com.jflyfox.component.controller.Ueditor.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-28471 ‼
📖 Read
via "National Vulnerability Database".
In ffjpeg (commit hash: caade60), the function bmp_load() in bmp.c contains an integer overflow vulnerability, which eventually results in the heap overflow in jfif_encode() in jfif.c. This is due to the incomplete patch for issue 38📖 Read
via "National Vulnerability Database".
‼ CVE-2022-29940 ‼
📖 Read
via "National Vulnerability Database".
In LibreHealth EHR 2.0.0, lack of sanitization of the GET parameters formseq and formid in interface\orders\find_order_popup.php leads to multiple cross-site scripting (XSS) vulnerabilities.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-29340 ‼
📖 Read
via "National Vulnerability Database".
GPAC 2.1-DEV-rev87-g053aae8-master. has a Null Pointer Dereference vulnerability in gf_isom_parse_movie_boxes_internal due to improper return value handling of GF_SKIP_BOX, which causes a Denial of Service. This vulnerability was fixed in commit 37592ad.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-1575 ‼
📖 Read
via "National Vulnerability Database".
Arbitrary Code Execution through Sanitizer Bypass in GitHub repository jgraph/drawio prior to 18.0.0. - Arbitrary (remote) code execution in the desktop app. - Stored XSS in the web app.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-28461 ‼
📖 Read
via "National Vulnerability Database".
mingyuefusu Library Management System all versions as of 03-27-2022 is vulnerable to SQL Injection.📖 Read
via "National Vulnerability Database".
🕴 Docker Under Siege: Cybercriminals Compromise Honeypots to Ramp Up Attacks 🕴
📖 Read
via "Dark Reading".
Cloud containers are increasingly part of the cybercrime playbook, with researchers flagging ongoing scanning for Docker weaknesses along with rapid exploitation to infect systems with coin-miners, denial-of-service tools, and ransomware.📖 Read
via "Dark Reading".
Dark Reading
Docker Under Siege: Cybercriminals Compromise Honeypots to Ramp Up Attacks
Cloud containers are increasingly part of the cybercrime playbook, with researchers flagging ongoing scanning for Docker weaknesses along with rapid exploitation to infect systems with coin-miners, denial-of-service tools, and ransomware.
⚠ World Password Day – the 1960s just called and gave you your passwords back ⚠
📖 Read
via "Naked Security".
Yes, passwords are going away. No, it won't happen tomorrow. So it's still worth knowing the basics of picking proper passwords.📖 Read
via "Naked Security".
Naked Security
World Password Day – the 1960s just called and gave you your passwords back
Yes, passwords are going away. No, it won’t happen tomorrow. So it’s still worth knowing the basics of picking proper passwords.
🕴 1,000+ Attacks in 2 Years: How the SideWinder APT Sheds Its Skin 🕴
📖 Read
via "Dark Reading".
Researcher to reveal fresh details at Black Hat Asia on a tenacious cyber-espionage group attacking specific military, law enforcement, aviation, and other entities in Central and South Asia.📖 Read
via "Dark Reading".
Dark Reading
1,000+ Attacks in 2 Years: How the SideWinder APT Sheds Its Skin
Researcher to reveal fresh details at Black Hat Asia on a tenacious cyber-espionage group attacking specific military, law enforcement, aviation, and other entities in Central and South Asia.
‼ CVE-2022-1464 ‼
📖 Read
via "National Vulnerability Database".
Stored xss bug in GitHub repository gogs/gogs prior to 0.12.7. As the repo is public , any user can view the report and when open the attachment then xss is executed. This bug allow executed any javascript code in victim account .📖 Read
via "National Vulnerability Database".
‼ CVE-2021-42183 ‼
📖 Read
via "National Vulnerability Database".
MasaCMS 7.2.1 is affected by a path traversal vulnerability in /index.cfm/_api/asset/image/.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-1516 ‼
📖 Read
via "National Vulnerability Database".
A NULL pointer dereference flaw was found in the Linux kernel’s X.25 set of standardized network protocols functionality in the way a user terminates their session using a simulated Ethernet card and continued usage of this connection. This flaw allows a local user to crash the system.📖 Read
via "National Vulnerability Database".
🕴 Multichannel Phishing Concerns Cybersecurity Leaders in 2022 🕴
📖 Read
via "Dark Reading".
With 80% of companies using cloud collaboration tools, cybercriminals are using multichannel phishing attacks to exploit security gaps in the hybrid work model.📖 Read
via "Dark Reading".
Darkreading
Multichannel Phishing Concerns Cybersecurity Leaders in 2022
With 80% of companies using cloud collaboration tools, cybercriminals are using multichannel phishing attacks to exploit security gaps in the hybrid work model.