‼ CVE-2022-34055 ‼
📖 Read
via "National Vulnerability Database".
The drxhello package in PyPI v0.0.1 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-33122 ‼
📖 Read
via "National Vulnerability Database".
A stored cross-site scripting (XSS) vulnerability in eyoucms v1.5.6 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the URL field under the login page.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-32998 ‼
📖 Read
via "National Vulnerability Database".
The cryptoasset-data-downloader package in PyPI v1.0.0 to v1.0.1 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-34059 ‼
📖 Read
via "National Vulnerability Database".
The Sixfab-Tool in PyPI v0.0.2 to v0.0.3 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-34054 ‼
📖 Read
via "National Vulnerability Database".
The Perdido package in PyPI v0.0.1 to v0.0.2 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-32999 ‼
📖 Read
via "National Vulnerability Database".
The cloudlabeling package in PyPI v0.0.1 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-32997 ‼
📖 Read
via "National Vulnerability Database".
The RootInteractive package in PyPI v0.0.5 to v0.0.19b0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-33001 ‼
📖 Read
via "National Vulnerability Database".
The AAmiles package in PyPI v0.1.0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges.📖 Read
via "National Vulnerability Database".
🕴 Threat Intelligence Services Are Universally Valued by IT Staff 🕴
📖 Read
via "Dark Reading".
Most of those surveyed are concerned about AI-based attacks and deepfakes, but suggest that their organization is ready.📖 Read
via "Dark Reading".
Dark Reading
Threat Intelligence Services Are Universally Valued by IT Staff
Most of those surveyed are concerned about AI-based attacks and deepfakes but suggest that their organizations are ready.
🤯1
📢 'Embrace PowerShell for better security', say UK, US, NZ cyber authorities 📢
📖 Read
via "ITPro".
The powerful automation and IT administrative tool has been used by hackers as an attack tool, but proper configuration can take the power out of their hands📖 Read
via "ITPro".
ITPro
'Embrace PowerShell for better security', say UK, US, NZ cyber authorities
The powerful automation and IT administrative tool has been used by hackers as an attack tool, but proper configuration can take the power out of their hands
📢 Delivery firm Yodel disrupted by cyber attack 📢
📖 Read
via "ITPro".
The company confirmed that some services are down but deliveries are continuing, though specific details are currently unknown📖 Read
via "ITPro".
IT PRO
Delivery firm Yodel disrupted by cyber attack | IT PRO
The company confirmed that some services are down but deliveries are continuing, though specific details are currently unknown
📢 UK government opts against regulation for cyber security standards 📢
📖 Read
via "ITPro".
UK Cyber Security Council will move ahead with its planned chartered standards, with the government to monitor its adoption📖 Read
via "ITPro".
IT PRO
UK Government opts against regulation for cyber security standards | IT PRO
UK Cyber Security Council will move ahead with its planned chartered standards, with the Government to monitor its adoption
📢 Best free malware removal tools 2022 📢
📖 Read
via "ITPro".
Worried your device is infected? Here are the tools you need to get rid of malicious software📖 Read
via "ITPro".
ITPro
6 of the best free malware removal tools in 2023
Worried your device is infected? Here are some of the best free malware removal tools at your disposal in 2023
📢 Security BSides commits to greater conference diversity after speaker backlash 📢
📖 Read
via "ITPro".
A surprise booking of a divisive social engineer prompted a number of cyber security experts to pull out of BSides Cleveland📖 Read
via "ITPro".
IT PRO
Security BSides commits to greater conference diversity after speaker backlash | IT PRO
A surprise booking of a divisive social engineer prompted a number of cyber security experts to pull out of BSides Cleveland
📢 Cloudflare fixes outage that knocked major web services offline 📢
📖 Read
via "ITPro".
Online services such as Nord VPN, Shopify, and Steam were all inaccessible by users in most regions📖 Read
via "ITPro".
IT PRO
Cloudflare fixes outage that knocked major web services offline | IT PRO
Online services such as Nord VPN, Shopify, and Steam were all inaccessible by users in most regions
📢 How to react to a data breach 📢
📖 Read
via "ITPro".
Would you know what to do if an online attacker got their hands on your data? We outline the first steps you should take following a security breach📖 Read
via "ITPro".
ITPro
Data breach response: How to react when your business gets hit
Every business should have a data breach response plan, but when building one it can be difficult to know where to start
📢 IT Pro News in Review: UK tech raises $16bn, Microsoft acquires Miburo, largest DDoS attack mitigated 📢
📖 Read
via "ITPro".
Catch up on the biggest headlines of the week in just two minutes📖 Read
via "ITPro".
ITPro
IT Pro News in Review: UK tech raises $16bn, Microsoft acquires Miburo, largest DDoS attack mitigated
Catch up on the biggest headlines of the week in just two minutes
📢 SolarWinds details 'next generation' software development process 📢
📖 Read
via "ITPro".
The open source approach, which will be shared with the wider community, is a direct response to the SUNBURST cyber attack in 2020📖 Read
via "ITPro".
IT PRO
SolarWinds details 'next generation' software development process | IT PRO
The open source approach, which will be shared with the wider community, is a direct response to the SUNBURST cyber attack in 2020
📢 Avira Free Security review: An effective antimalware suite, but heavy on the marketing 📢
📖 Read
via "ITPro".
It’s hard to fully appreciate Avira’s malware protection when the packaging feels so manipulative📖 Read
via "ITPro".
IT PRO
Avira Free Security review: An effective antimalware suite, but heavy on the marketing | IT PRO
It’s hard to fully appreciate Avira’s malware protection when the packaging feels so manipulative
📢 BRATA malware has evolved to target online banking across Europe, researchers warn 📢
📖 Read
via "ITPro".
The new variant can now access SMS, GPS, and device control to better steal financial data📖 Read
via "ITPro".
IT PRO
BRATA malware has evolved to target online banking across Europe, researchers warn | IT PRO
The new variant can now access SMS, GPS, and device control to better steal financial data
📢 Okta sets aside $1 million to support cyber security training for non-profits 📢
📖 Read
via "ITPro".
One of the projects receiving a grant will help civil society organisations in Ukraine to strengthen their cyber security📖 Read
via "ITPro".
IT PRO
Okta sets aside $1 million to support cyber security training for non-profits | IT PRO
One of the projects receiving a grant will help civil society organisations in Ukraine to strengthen their cyber security