π’ Intuit issues yet another phishing warning to QuickBooks customers π’
π Read
via "ITPro".
The latest announcement marks the fifth phishing security advisory the company has made for QuickBooks users this yearπ Read
via "ITPro".
IT PRO
Intuit issues yet another phishing warning to QuickBooks customers | IT PRO
The latest announcement marks the fifth phishing security advisory the company has made for QuickBooks users this year
π’ Google Chrome branded the least effective browser for stopping phishing attacks π’
π Read
via "ITPro".
The world's most popular browser came dead last when compared against competitorsπ Read
via "ITPro".
IT PRO
Google Chrome branded the least effective browser for stopping phishing attacks | IT PRO
The world's most popular browser came dead last when compared against competitors
π’ Booz Allen Hamilton wins NASAβs $622m CyPrESS contract π’
π Read
via "ITPro".
The IDIQ βcontractβ βwill strengthen NASAβs βββcyber security and privacy effortsπ Read
via "ITPro".
IT PRO
Booz Allen Hamilton wins NASAβs $622m CyPrESS contract | IT PRO
The IDIQ βcontractβ βwill strengthen NASAβs βββcyber security and privacy efforts
π1
π’ The cookie phase-out might precede an AdTech apocalypse π’
π Read
via "ITPro".
With the industry phasing out third-party cookies, what does this mean for businesses reliant on them to track and improve their campaigns?π Read
via "ITPro".
IT PRO
The cookie phase-out might precede an AdTech apocalypse | IT PRO
With the industry phasing out third-party cookies, what does this mean for businesses reliant on them to track and improve their campaigns?
π’ DOE βββββββββββββββfundsβ βdevelopment of Qunnect's Quantum Repeater π’
π Read
via "ITPro".
The $1.85 million grant will eventually pave the way for quantum internetπ Read
via "ITPro".
IT PRO
DOE βββββββββββββββfundsβ βdevelopment of Qunnect's Quantum Repeater | IT PRO
The $1.85 million grant will eventually pave the way for quantum internet
π’ Russian hackers declare war on 10 countries after failed Eurovision DDoS attack π’
π Read
via "ITPro".
Italian police thwart cyber attacks on Eurovision's voting systems from the Russian-linked hacker group Killnet after the same group targeted public sector institutions days earlierπ Read
via "ITPro".
IT PRO
Russian hackers declare war on 10 countries after failed Eurovision DDoS attack | IT PRO
Italian police thwart cyber attacks on Eurovision's voting systems from the Russian-linked hacker group Killnet after the same group targeted public sector institutions days earlier
π’ McAfee appoints Greg Johnson as new CEO π’
π Read
via "ITPro".
Peter Leav to step down in June as anti-virus giant continues to focus on its consumer businessπ Read
via "ITPro".
IT PRO
McAfee appoints Greg Johnson as new CEO | IT PRO
Peter Leav to step down in June as anti-virus giant continues to focus on its consumer business
π΄ Critical OAS Bugs Open Industrial Systems to Takeover π΄
π Read
via "Dark Reading".
The most serious flaw gives attackers a way to remotely execute code on systems that many organizations use to move data in critical ICS environments, security vendor says.π Read
via "Dark Reading".
Dark Reading
Critical OAS Bugs Open Industrial Systems to Takeover
The most serious flaw gives attackers a way to remotely execute code on systems that many organizations use to move data in critical ICS environments, security vendor says.
βΌ CVE-2022-1927 βΌ
π Read
via "National Vulnerability Database".
Buffer Over-read in GitHub repository vim/vim prior to 8.2.π Read
via "National Vulnerability Database".
βΌ CVE-2022-1928 βΌ
π Read
via "National Vulnerability Database".
Cross-site Scripting (XSS) - Stored in GitHub repository go-gitea/gitea prior to 1.16.9.π Read
via "National Vulnerability Database".
βΌ CVE-2022-1566 βΌ
π Read
via "National Vulnerability Database".
The Quotes llama WordPress plugin through 0.7 does not sanitise and escape Quotes, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed. The attack could also be performed by tricking an admin to import a malicious CSV fileπ Read
via "National Vulnerability Database".
βΌ CVE-2022-1299 βΌ
π Read
via "National Vulnerability Database".
The Slideshow WordPress plugin through 2.3.1 does not sanitize and escape some of its default slideshow settings, which could allow high-privileged users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowedπ Read
via "National Vulnerability Database".
βΌ CVE-2022-1528 βΌ
π Read
via "National Vulnerability Database".
The VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.5.9 does not escape the current URL before putting it back in a JavaScript context, leading to a Reflected Cross-Site Scriptingπ Read
via "National Vulnerability Database".
βΌ CVE-2022-1562 βΌ
π Read
via "National Vulnerability Database".
The Enable SVG WordPress plugin before 1.4.0 does not sanitise uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloadsπ Read
via "National Vulnerability Database".
βΌ CVE-2022-1527 βΌ
π Read
via "National Vulnerability Database".
The WP 2FA WordPress plugin before 2.2.1 does not sanitise and escape a parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scriptingπ Read
via "National Vulnerability Database".
βΌ CVE-2022-0642 βΌ
π Read
via "National Vulnerability Database".
The JivoChat Live Chat WordPress plugin before 1.3.5.4 does not properly check CSRF tokens on POST requests to the plugins admin page, and does not sanitise some parameters, leading to a stored Cross-Site Scripting vulnerability where an attacker can trick a logged in administrator to inject arbitrary javascript.π Read
via "National Vulnerability Database".
βΌ CVE-2022-1583 βΌ
π Read
via "National Vulnerability Database".
The External Links in New Window / New Tab WordPress plugin before 1.43 does not ensure window.opener is set to "null" when links to external sites are clicked, which may enable tabnabbing attacks to occur.π Read
via "National Vulnerability Database".
βΌ CVE-2022-1542 βΌ
π Read
via "National Vulnerability Database".
The HPB Dashboard WordPress plugin through 1.3.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed.π Read
via "National Vulnerability Database".
βΌ CVE-2022-1589 βΌ
π Read
via "National Vulnerability Database".
The Change wp-admin login WordPress plugin before 1.1.0 does not properly check for authorisation and is also missing CSRF check when updating its settings, which could allow unauthenticated users to change the settings. The attacked could also be performed via a CSRF vectorπ Read
via "National Vulnerability Database".
βΌ CVE-2022-1568 βΌ
π Read
via "National Vulnerability Database".
The Team Members WordPress plugin before 5.1.1 does not escape some of its Team settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowedπ Read
via "National Vulnerability Database".
βΌ CVE-2022-1456 βΌ
π Read
via "National Vulnerability Database".
The Poll Maker WordPress plugin before 4.0.2 does not sanitise and escape some settings, which could allow high privilege users such as admin to perform Store Cross-Site Scripting attack even when unfiltered_html is disallowedπ Read
via "National Vulnerability Database".