π΄ Corelight Announces New SaaS Platform for Threat Hunting π΄
π Read
via "Dark Reading".
Corelight Investigator aids threat hunting and investigation through intelligent alert aggregation, built-in queries and scalable searchπ Read
via "Dark Reading".
Dark Reading
Corelight Announces New SaaS Platform for Threat Hunting
Corelight Investigator aids threat hunting and investigation through intelligent alert aggregation, built-in queries and scalable search
π΄ Mastercard Launches Cybersecurity βExperience Centreβ π΄
π Read
via "Dark Reading".
Experience Centre features emerging Mastercard products and solutions for securing digital payments on a global scale, including those developed locally in Vancouver.π Read
via "Dark Reading".
Dark Reading
Mastercard Launches Cybersecurity βExperience Centreβ
Experience Centre features emerging Mastercard products and solutions for securing digital payments on a global scale, including those developed locally in Vancouver.
π΄ Qualys to Unveil VMDR 2.0 at Qualys Security Conference in San Francisco π΄
π Read
via "Dark Reading".
Company will detail enhancements to Vulnerability Management, Detection and Response solution next month.π Read
via "Dark Reading".
Dark Reading
Qualys to Unveil VMDR 2.0 at Qualys Security Conference in San Francisco
Company will detail enhancements to Vulnerability Management, Detection and Response solution next month.
π΄ Cybersecurity-Focused SYN Ventures Closes $300 Million Fund II π΄
π Read
via "Dark Reading".
Cylance co-founder Ryan Permeh has joined full time as an operating partner.π Read
via "Dark Reading".
Dark Reading
Cybersecurity-Focused SYN Ventures Closes $300 Million Fund II
Cylance co-founder Ryan Permeh has joined full time as an operating partner.
π΄ Vishing Attacks Reach All Time High, According to Latest Agari and PhishLabs Report π΄
π Read
via "Dark Reading".
According to the findings, vishing attacks have overtaken business email compromise as the second most reported response-based email threat since Q3 2021.π Read
via "Dark Reading".
Dark Reading
Vishing Attacks Reach All Time High, According to Latest Agari and PhishLabs Report
According to the findings, vishing attacks have overtaken business email compromise as the second most reported response-based email threat since Q3 2021.
π΄ Zero-Click Zoom Bug Allows Code Execution Just by Sending a Message π΄
π Read
via "Dark Reading".
Google has disclosed a nasty set of six bugs affecting Zoom chat that can be chained together for MitM and RCE attacks, no user interaction required.π Read
via "Dark Reading".
Dark Reading
Zero-Click Zoom Bug Allows Code Execution Just by Sending a Message
Google has disclosed a nasty set of six bugs affecting Zoom chat that can be chained together for MitM and RCE attacks, no user interaction required.
π΄ JFrog Launches Project Pyrsia to Help Prevent Software Supply Chain Attacks π΄
π Read
via "Dark Reading".
Open source software community initiative utilizes blockchain technology.π Read
via "Dark Reading".
Dark Reading
JFrog Launches Project Pyrsia to Help Prevent Software Supply Chain Attacks
Open source software community initiative utilizes blockchain technology.
π΄ Interpol's Massive 'Operation Delilah' Nabs BEC Bigwig π΄
π Read
via "Dark Reading".
A sprawling, multiyear operation nabs a suspected SilverTerrier BEC group ringleader, exposing a massive attack infrastructure and sapping the group of a bit of its strength.π Read
via "Dark Reading".
Dark Reading
Interpol's Massive 'Operation Delilah' Nabs BEC Bigwig
A sprawling, multiyear operation nabs a suspected SilverTerrier BEC group ringleader, exposing a massive attack infrastructure and sapping the group of a bit of its strength.
βΌ CVE-2022-29402 βΌ
π Read
via "National Vulnerability Database".
TP-Link TL-WR840N EU v6.20 was discovered to contain insecure protections for its UART console. This vulnerability allows attackers to connect to the UART port via a serial connection and execute commands as the root user without authentication.π Read
via "National Vulnerability Database".
βΌ CVE-2022-29248 βΌ
π Read
via "National Vulnerability Database".
Guzzle is a PHP HTTP client. Guzzle prior to versions 6.5.6 and 7.4.3 contains a vulnerability with the cookie middleware. The vulnerability is that it is not checked if the cookie domain equals the domain of the server which sets the cookie via the Set-Cookie header, allowing a malicious server to set cookies for unrelated domains. The cookie middleware is disabled by default, so most library consumers will not be affected by this issue. Only those who manually add the cookie middleware to the handler stack or construct the client with ['cookies' => true] are affected. Moreover, those who do not use the same Guzzle client to call multiple domains and have disabled redirect forwarding are not affected by this vulnerability. Guzzle versions 6.5.6 and 7.4.3 contain a patch for this issue. As a workaround, turn off the cookie middleware.π Read
via "National Vulnerability Database".
π Insider Threats Responsible for 68% of UK Legal Sector Data Breaches π
π Read
via "".
Data analyzed this week highlights the percentage of data breaches carried out by insiders at law firms in the U.K.π Read
via "".
π΄ Is Your Data Security Living on the Edge? π΄
π Read
via "Dark Reading".
Gartner's security service edge fundamentally changes how companies should be delivering data protection in a cloud and mobile first world.π Read
via "Dark Reading".
Dark Reading
Is Your Data Security Living on the Edge?
Gartner's security service edge fundamentally changes how companies should be delivering data protection in a cloud and mobile first world.
π΄ Forescout Launches Forescout Frontline to Help Organizations Tackle Ransomware and Real Time Threats π΄
π Read
via "Dark Reading".
New threat hunting and risk identification service provides organizations with an enterprise-wide baseline of their threat landscape and risk exposure.π Read
via "Dark Reading".
Dark Reading
Forescout Launches Forescout Frontline to Help Organizations Tackle Ransomware and Real Time Threats
New threat hunting and risk identification service provides organizations with an enterprise-wide baseline of their threat landscape and risk exposure.
βΌ CVE-2022-29256 βΌ
π Read
via "National Vulnerability Database".
sharp is an application for Node.js image processing. Prior to version 0.30.5, there is a possible vulnerability in logic that is run only at `npm install` time when installing versions of `sharp` prior to the latest v0.30.5. If an attacker has the ability to set the value of the `PKG_CONFIG_PATH` environment variable in a build environment then they might be able to use this to inject an arbitrary command at `npm install` time. This is not part of any runtime code, does not affect Windows users at all, and is unlikely to affect anyone that already cares about the security of their build environment. This problem is fixed in version 0.30.5.π Read
via "National Vulnerability Database".
βΌ CVE-2022-31651 βΌ
π Read
via "National Vulnerability Database".
In SoX 14.4.2, there is an assertion failure in rate_init in rate.c in libsox.a.π Read
via "National Vulnerability Database".
βΌ CVE-2022-31650 βΌ
π Read
via "National Vulnerability Database".
In SoX 14.4.2, there is a floating-point exception in lsx_aiffstartwrite in aiff.c in libsox.a.π Read
via "National Vulnerability Database".
π’ Open source packages with millions of installs hacked to harvest AWS credentials π’
π Read
via "ITPro".
Two popular open source packages used by Python and PHP developers have been quietly compromised with successful attacks already being reportedπ Read
via "ITPro".
IT PRO
Open source packages with millions of installs hacked to harvest AWS credentials | IT PRO
Two popular open source packages used by Python and PHP developers have been quietly compromised with successful attacks already being reported
π’ DOE βββββββββββββββfundsβ βdevelopment of Qunnect's Quantum Repeater π’
π Read
via "ITPro".
The $1.85 million grant will eventually pave the way for quantum internetπ Read
via "ITPro".
IT PRO
DOE βββββββββββββββfundsβ βdevelopment of Qunnect's Quantum Repeater | IT PRO
The $1.85 million grant will eventually pave the way for quantum internet
β Cybergang Claims REvil is Back, Executes DDoS Attacks β
π Read
via "Threat Post".
Actors claiming to be the defunct ransomware group are targeting one of Akamiβs customers with a Layer 7 attack, demanding an extortion payment in Bitcoin.π Read
via "Threat Post".
Threat Post
Cybergang Claims REvil is Back, Executes DDoS Attacks
Actors claiming to be the defunct ransomware group are targeting one of Akamiβs customers with a Layer 7 attack, demanding an extortion payment in Bitcoin.
β Poisoned Python and PHP packages purloin passwords for AWS access β
π Read
via "Naked Security".
More supply chain trouble - this time with clear examples so you can learn how to spot this stuff yourself.π Read
via "Naked Security".
Sophos News
Naked Security β Sophos News
βΌ CVE-2021-42692 βΌ
π Read
via "National Vulnerability Database".
There is a stack-overflow vulnerability in tinytoml v0.4 that can cause a crash or DoS.π Read
via "National Vulnerability Database".