‼ CVE-2017-20035 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability, which was classified as problematic, has been found in PHPList 3.2.6. This issue affects some unknown processing of the file /lists/admin/ of the component Subscribe. The manipulation leads to cross site scripting (Persistent). The attack may be initiated remotely. Upgrading to version 3.3.1 is able to address this issue. It is recommended to upgrade the affected component.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-42811 ‼
📖 Read
via "National Vulnerability Database".
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in SafeNet KeySecure allows an authenticated user to read arbitrary files from the underlying system on which the product is deployed.📖 Read
via "National Vulnerability Database".
🗓️ Separate Fujitsu cloud storage vulnerabilities could enable attackers to destroy virtual backups 🗓️
📖 Read
via "The Daily Swig".
Sysadmins should update their installations immediately📖 Read
via "The Daily Swig".
The Daily Swig | Cybersecurity news and views
Separate Fujitsu cloud storage vulnerabilities could enable attackers to destroy virtual backups
Sysadmins should update their installations immediately
🕴 In a Quickly Evolving Landscape, CISOs Shift Their 2022 Priorities 🕴
📖 Read
via "Dark Reading".
Cloud migration, DevSecOps, cyber insurance, and more have emerged as important motivators for cybersecurity investment and focus.📖 Read
via "Dark Reading".
Dark Reading
In a Quickly Evolving Landscape, CISOs Shift Their 2022 Priorities
Cloud migration, DevSecOps, cyber insurance, and more have emerged as important motivators for cybersecurity investment and focus.
❌ U.S. Water Utilities Prime Cyberattack Target, Experts ❌
📖 Read
via "Threat Post".
Environmentalists and policymakers warn water treatment plants are ripe for attack.📖 Read
via "Threat Post".
Threat Post
U.S. Water Utilities Prime Cyberattack Target, Experts
Environmentalists and policymakers warn water treatment plants are ripe for attack.
🕴 How 4 Young Musicians Hacked Sheet Music to Help Fight the Cold War 🕴
📖 Read
via "Dark Reading".
In 1985, a group of klezmer musicians from the US rendezvoused with underground dissidents in Tbilisi, Georgia. This is the story of how they pulled it off with homebrew cryptography.📖 Read
via "Dark Reading".
Dark Reading
The Edge
Find in-depth cybersecurity features on strategy, latest trends, and people to know.
🕴 Artificial Intelligence and Security: What You Should Know 🕴
📖 Read
via "Dark Reading".
Next-generation AI products learn proactively and identify changes in the networks, users, and databases using "data drift" to adapt to specific threats as they evolve.📖 Read
via "Dark Reading".
Dark Reading
Artificial Intelligence and Security: What You Should Know
Next-generation AI products learn proactively and identify changes in the networks, users, and databases using "data drift" to adapt to specific threats as they evolve.
🔏 Friday Five 6/10 🔏
📖 Read
via "".
Read up on how Apple is getting ahead of the curve on security, how you could be targeted in a Facebook phishing scam, why a different type of cyberattack could surpass ransomware, and more all in this week’s Friday Five!
📖 Read
via "".
‼ CVE-2021-44582 ‼
📖 Read
via "National Vulnerability Database".
A Privilege Escalation vulnerability exists in Sourcecodester Money Transfer Management System 1.0, which allows a remote malicious user to gain elevated privileges to the Admin role via any URL.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-31788 ‼
📖 Read
via "National Vulnerability Database".
IdeaLMS 2022 allows SQL injection via the IdeaLMS/ChatRoom/ClassAccessControl/6?isBigBlueButton=0&ClassID= pathname.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-44117 ‼
📖 Read
via "National Vulnerability Database".
A Cross Site Request Forgery (CSRF) vulnerability exists in TheDayLightStudio Fuel CMS 1.5.0 via a POST call to /fuel/sitevariables/delete/4.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-32563 ‼
📖 Read
via "National Vulnerability Database".
An issue was discovered in Couchbase Sync Gateway 3.x before 3.0.2. Admin credentials are not verified when using X.509 client-certificate authentication from Sync Gateway to Couchbase Server. When Sync Gateway is configured to authenticate with Couchbase Server using X.509 client certificates, the admin credentials provided to the Admin REST API are ignored, resulting in privilege escalation for unauthenticated users. The Public REST API is not impacted by this issue. A workaround is to replace X.509 certificate based authentication with Username and Password authentication inside the bootstrap configuration.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-27502 ‼
📖 Read
via "National Vulnerability Database".
RealVNC VNC Server 6.9.0 through 5.1.0 for Windows allows local privilege escalation because an installer repair operation executes %TEMP% files as SYSTEM.📖 Read
via "National Vulnerability Database".
📢 IBM bolsters cyber security offerings with Randori acquisition 📢
📖 Read
via "ITPro".
It plans to use the company’s attack surface management and offensive security offerings to strengthen its cloud and AI capabilities📖 Read
via "ITPro".
IT PRO
IBM bolsters cyber security offerings with Randori acquisition | IT PRO
It plans to use the company’s attack surface management and offensive security offerings to strengthen its cloud and AI capabilities
📢 Double extortion ransomware pushes average payments close to $1 million 📢
📖 Read
via "ITPro".
As the average payment approaches the landmark figure, experts reflect on times when the going rate was just $500📖 Read
via "ITPro".
IT PRO
Double extortion ransomware pushes average payments close to $1 million | IT PRO
As the average payment approaches the landmark figure, experts reflect on times when the going rate was just $500
📢 The EU’s Apple App Store crackdown ‘will fuel cyber attacks’ 📢
📖 Read
via "ITPro".
Organisations should be encouraged to embrace the ‘security by Playstation’ approach as much as possible, expert says📖 Read
via "ITPro".
IT PRO
The EU’s Apple App Store crackdown ‘will fuel cyber attacks’ | IT PRO
Organisations should be encouraged to embrace the ‘security by Playstation’ approach as much as possible, expert says
📢 Cyber security companies ‘must remember who the enemies are’ 📢
📖 Read
via "ITPro".
Tech giants must collaborate more with the wider industry, WithSecure’s CEO urges, as he lays bare European anxieties📖 Read
via "ITPro".
IT PRO
Cyber security companies ‘must remember who the enemies are’ | IT PRO
Tech giants must collaborate more with the wider industry, WithSecure’s CEO urges, as he lays bare European anxieties
📢 Kaspersky Free review: Effective and lightweight – everything you want from a free antivirus solution 📢
📖 Read
via "ITPro".
It’ll be a real shame if politics means people missing out on this top-class security tool📖 Read
via "ITPro".
IT PRO
Kaspersky Free review: Effective and lightweight – everything you want from a free antivirus solution | IT PRO
It’ll be a real shame if politics means people missing out on this top-class security tool
📢 Cyber criminals are spending longer inside business' networks after the initial breach 📢
📖 Read
via "ITPro".
Cyber attackers' dwell time is up 36% thanks to initial access brokers and repeat exploitation of Microsoft Exchange vulnerabilities, according to Sophos📖 Read
via "ITPro".
ITPro
Cyber criminals are spending longer inside business' networks after the initial breach
Cyber attackers' dwell time is up 36% thanks to initial access brokers and repeat exploitation of Microsoft Exchange vulnerabilities, according to Sophos
📢 Kali Linux team announces free cyber security training delivered live on Twitch 📢
📖 Read
via "ITPro".
The brand-new initiative is aimed at reaching more aspiring certified pen-testers through twice-weekly livestreamed lessons📖 Read
via "ITPro".
IT Pro
Kali Linux creators announce free cyber security sessions delivered live on Twitch
The brand-new initiative is aimed at reaching more aspiring certified pen-testers through twice-weekly livestreamed lessons