🕴 Incident Response: 3 Easy Traps & How to Avoid Them 🕴
📖 Read
via "Dark Reading: ".
Sage legal advice about navigating a data breach from a troubleshooting cybersecurity outside counsel.📖 Read
via "Dark Reading: ".
Darkreading
Incident Response: 3 Easy Traps & How to Avoid Them
Sage legal advice about navigating a data breach from a troubleshooting cybersecurity outside counsel.
❌ SandboxEscaper Drops Three More Windows Exploits, IE Zero-Day ❌
📖 Read
via "Threatpost".
As promised, developer SandboxEscaper has dropped exploit code for four more bugs, on the heels of releasing a Windows zero-day yesterday.📖 Read
via "Threatpost".
Threat Post
SandboxEscaper Drops Three More Windows Exploits, IE Zero-Day
As promised, developer SandboxEscaper has dropped exploit code for four more bugs, on the heels of releasing a Windows zero day yesterday.
ATENTION‼ New - CVE-2018-15664
📖 Read
via "National Vulnerability Database".
In Docker through 18.06.1-ce-rc2, the API endpoints behind the 'docker cp' command are vulnerable to a symlink-exchange attack with Directory Traversal, giving attackers arbitrary read-write access to the host filesystem with root privileges, because daemon/archive.go does not do archive operations on a frozen filesystem (or from within a chroot).📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2017-5213
📖 Read
via "National Vulnerability Database".
Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Cross Site Scripting (XSS).📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2017-5212
📖 Read
via "National Vulnerability Database".
Open-Xchange GmbH OX App Suite 7.8.3 is affected by: Incorrect Access Control.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2017-5211
📖 Read
via "National Vulnerability Database".
Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Content Spoofing.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2017-5210
📖 Read
via "National Vulnerability Database".
Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Information Exposure.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2017-17061
📖 Read
via "National Vulnerability Database".
OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Cross Site Scripting (XSS).📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2017-17060
📖 Read
via "National Vulnerability Database".
OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Insecure Permissions.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2017-15652
📖 Read
via "National Vulnerability Database".
Artifex Ghostscript 9.22 is affected by: Obtain Information. The impact is: obtain sensitive information. The component is: affected source code file, affected function, affected executable, affected libga (imagemagick used that). The attack vector is: Someone must open a postscript file though ghostscript. Because of imagemagick also use libga, so it was affected as well.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2017-15030
📖 Read
via "National Vulnerability Database".
Open-Xchange GmbH OX App Suite 7.8.4 and earlier is affected by: Cross Site Scripting (XSS).📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2017-15029
📖 Read
via "National Vulnerability Database".
Open-Xchange GmbH OX App Suite 7.8.4 and earlier is affected by: SSRF.📖 Read
via "National Vulnerability Database".
🕴 Russian Nation-State Hacking Unit's Tools Get More Fancy 🕴
📖 Read
via "Dark Reading: ".
APT28/Fancy Bear has expanded its repertoire to more than 30 commands for infecting systems, executing code, and reconnaissance, researchers have found.📖 Read
via "Dark Reading: ".
Darkreading
Russian Nation-State Hacking Unit's Tools Get More Fancy
APT28/Fancy Bear has expanded its repertoire to more than 30 commands for infecting systems, executing code, and reconnaissance, researchers have found.
🕴 Microsoft Opens Defender ATP for Mac to Public Preview 🕴
📖 Read
via "Dark Reading: ".
Users of the security platform who have preview features enabled can access Defender ATP for Mac via the Security Center onboarding section.📖 Read
via "Dark Reading: ".
Dark Reading
Endpoint Security recent news | Dark Reading
Explore the latest news and expert commentary on Endpoint Security, brought to you by the editors of Dark Reading
🔐 GDPR fines levied so far: The lessons businesses can learn 🔐
📖 Read
via "Security on TechRepublic".
After one year of enforcement of the GDPR, businesses can learn much from how the provisions of the regulation have been applied and how organizations have been fined.📖 Read
via "Security on TechRepublic".
TechRepublic
GDPR fines levied so far: The lessons businesses can learn
After one year of enforcement of the GDPR, businesses can learn much from how the provisions of the regulation have been applied and how organizations have been fined.
🔏 NYDFS Tasks New Cybersecurity Division to Enforce Cybersecurity Regulation 🔏
📖 Read
via "Subscriber Blog RSS Feed ".
With a new cybersecurity team dedicated to enforcing the department’s regulations under its wing, the New York Department of Financial Services (NYDFS) will grow even more vigilant of violations.📖 Read
via "Subscriber Blog RSS Feed ".
Digital Guardian
NYDFS Tasks New Cybersecurity Division to Enforce Cybersecurity Regulation
With a new cybersecurity team dedicated to enforcing the department’s regulations under its wing, the New York Department of Financial Services (NYDFS) will grow even more vigilant of violations.
ATENTION‼ New - CVE-2017-13668
📖 Read
via "National Vulnerability Database".
OX Software GmbH OX App Suite 7.8.4 and earlier is affected by: Cross Site Scripting (XSS).📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2017-11740
📖 Read
via "National Vulnerability Database".
In Zoho ManageEngine Application Manager 13.1 Build 13100, the administrative user has the ability to upload files/binaries that can be executed upon the occurrence of an alarm. An attacker can abuse this functionality by uploading a malicious script that can be executed on the remote system.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2017-11739
📖 Read
via "National Vulnerability Database".
In Zoho ManageEngine Application Manager 13.1 Build 13100, an authenticated user, with administrative privileges, has the ability to add a widget on any dashboard. This widget can be a "Utility Widget" with a "Custom HTML or Text" field. Once this widget is created, it will be loaded on the dashboard where it was added. An attacker can abuse this functionality by creating a "Utility Widget" that contains malicious JavaScript code, aka XSS.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2017-11738
📖 Read
via "National Vulnerability Database".
In Zoho ManageEngine Application Manager 13.1 Build 13100, the 'haid' parameter of the '/auditLogAction.do' module is vulnerable to a Time-based Blind SQL Injection attack.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2017-11561
📖 Read
via "National Vulnerability Database".
An issue was discovered in ZOHO ManageEngine OpManager 12.2. An authenticated user can upload any file they want to share in the "Group Chat" or "Alarm" section. This functionality can be abused by a malicious user by uploading a web shell.📖 Read
via "National Vulnerability Database".