‼ CVE-2022-2344 ‼
📖 Read
via "National Vulnerability Database".
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0045.📖 Read
via "National Vulnerability Database".
‼ CVE-2015-1837 ‼
📖 Read
via "National Vulnerability Database".
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2015. Notes: none.📖 Read
via "National Vulnerability Database".
‼ CVE-2015-5598 ‼
📖 Read
via "National Vulnerability Database".
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2015. Notes: none.📖 Read
via "National Vulnerability Database".
🕴 Microsoft Reverses Course on Blocking Office Macros by Default 🕴
📖 Read
via "Dark Reading".
Security experts criticize company for reversing course on a decision it made just this February to block macros in files downloaded from the Internet.📖 Read
via "Dark Reading".
Dark Reading
Microsoft Reverses Course on Blocking Office Macros by Default
Security experts criticize company for reversing course, albeit temporarily, on a decision it made just this February to block macros in files downloaded from the Internet.
🕴 Microsoft Reverses Course on Blocking Office Macros by Default 🕴
📖 Read
via "Dark Reading".
Security experts criticize company for reversing course, albeit temporarily, on a decision it made just this February to block macros in files downloaded from the Internet.📖 Read
via "Dark Reading".
Dark Reading
Microsoft Reverses Course on Blocking Office Macros by Default
Security experts criticize company for reversing course, albeit temporarily, on a decision it made just this February to block macros in files downloaded from the Internet.
‼ CVE-2022-35412 ‼
📖 Read
via "National Vulnerability Database".
Digital Guardian Agent 7.7.4.0042 allows an administrator (who ordinarily does not have a supported way to uninstall the product) to disable some of the agent functionality and then exfiltrate files to an external USB device.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-31137 ‼
📖 Read
via "National Vulnerability Database".
Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. Versions prior to 6.1.1.0 are subject to a remote code execution vulnerability. System commands can be run remotely via the subprocess_execute function without processing the inputs received from the user in the /app/options.py file. Attackers need not be authenticated to exploit this vulnerability. Users are advised to upgrade. There are no known workarounds for this vulnerability.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-2353 ‼
📖 Read
via "National Vulnerability Database".
Prior to microweber/microweber v1.2.20, due to improper neutralization of input, an attacker can steal tokens to perform cross-site request forgery, fetch contents from same-site and redirect a user.📖 Read
via "National Vulnerability Database".
📢 NCSC and ICO chiefs plead with lawyers to stop making ransomware payments 📢
📖 Read
via "ITPro".
The two UK authorities say misconceptions around ICO fines are jeopardising the integrity of UK cyber security, in a direct appeal to the Law Society📖 Read
via "ITPro".
IT PRO
NCSC and ICO chiefs plead with lawyers to stop making ransomware payments | IT PRO
The two UK authorities say misconceptions around ICO fines are jeopardising the integrity of UK cyber security, in a direct appeal to the Law Society
📢 Web3 projects lose over $2 billion to hacks and exploits in 2022 📢
📖 Read
via "ITPro".
Blockchain and crypto schemes have already lost more in the first half of this year than throughout all of 2021📖 Read
via "ITPro".
IT PRO
Web3 projects lose over $2 billion to hacks and exploits in 2022 | IT PRO
Blockchain and crypto schemes have already lost more in the first half of this year than throughout all of 2021
📢 Russia-linked state-sponsored hackers launch fresh attacks by abusing latest red team tool 📢
📖 Read
via "ITPro".
Researchers said the new tool has evaded the detection of many leading security products and is quickly growing in popularity📖 Read
via "ITPro".
IT PRO
Russia-linked state-sponsored hackers launch fresh attacks by abusing latest red team tool | IT PRO
Researchers said the new tool has evaded the detection of many leading security products and is quickly growing in popularity
❤1
📢 SHI malware attack causes major disruption and forces staff offline 📢
📖 Read
via "ITPro".
IT supplier says there's no evidence to suggest customer data was exfiltrated during the "security incident" attack📖 Read
via "ITPro".
IT PRO
SHI malware attack causes major disruption and forces staff offline | IT PRO
IT supplier says there's no evidence to suggest customer data was exfiltrated during the "security incident" attack
📢 Marriott hit by data breach through social engineering 📢
📖 Read
via "ITPro".
Unknown attackers were reportedly able to exfiltrate 20GB of information from the company📖 Read
via "ITPro".
IT PRO
Marriott hit by data breach through social engineering | IT PRO
Unknown attackers were reportedly able to exfiltrate 20GB of information from the company
📢 Experts bemoan Microsoft’s 'terrible' backtrack on blocking VBA macros 📢
📖 Read
via "ITPro".
Experts express bewilderment over the decision to reverse the long-overdue macro block, as fears mount that cyber criminals can take advantage📖 Read
via "ITPro".
ITPro
'This is a terrible idea': Security experts bemoan Microsoft’s backtrack on blocking VBA macros
Experts express bewilderment over the decision to reverse the long-overdue macro block, as fears mount that cyber criminals can take advantage
📢 Southwest Health Center hit by data breach 📢
📖 Read
via "ITPro".
So far, there have been no reports of foul play or misuse of exposed data📖 Read
via "ITPro".
IT PRO
Southwest Health Center hit by data breach | IT PRO
So far, there have been no reports of foul play or misuse of exposed data
📢 Online Safety Bill: Messaging apps 'forced to scan messages' for child abuse content in fresh amendment 📢
📖 Read
via "ITPro".
Apps utilising end-to-end encryption would require backdoors or new mechanisms to allow user data to be scanned and passed on to authorities📖 Read
via "ITPro".
IT PRO
Online Safety Bill: Messaging apps 'forced to scan messages' for child abuse content in fresh amendment | IT PRO
Apps utilising end-to-end encryption would require backdoors or new mechanisms to allow user data to be scanned and passed on to authorities
📢 Kaspersky appoints new territory manager for UK&I 📢
📖 Read
via "ITPro".
Channel veteran Stuart Peters is tasked with expanding the cybersecurity provider’s presence in the region📖 Read
via "ITPro".
IT PRO
Kaspersky appoints new territory manager for UK&I | IT PRO
Channel veteran Stuart Peters is tasked with expanding the cybersecurity provider’s presence in the region
👍1
📢 The new wave of cyber security threats facing critical national infrastructure (CNI) 📢
📖 Read
via "ITPro".
CNI is increasingly becoming a viable target, thanks to a litany of new malware strains, with cyber attacks threatening to have serious consequences📖 Read
via "ITPro".
IT PRO
The new wave of cyber security threats facing critical national infrastructure (CNI) | IT PRO
CNI is increasingly becoming a viable target, thanks to a litany of new malware strains, with cyber attacks threatening to have serious consequences
📢 QR codes are just as insecure as anything else 📢
📖 Read
via "ITPro".
A browser locked down tighter than a duck’s derriere won’t save you from phishing attacks – but getting to grips with the latest advice and best practice might📖 Read
via "ITPro".
IT PRO
QR codes are just as insecure as anything else | IT PRO
A browser locked down tighter than a duck’s derriere won’t save you from phishing attacks – but getting to grips with the latest advice and best practice might
📢 UK government must 'engage with tech giants' on foreign policy 📢
📖 Read
via "ITPro".
The Foreign Affairs Committee urge the government to work more closely with big tech, which is becoming the new battleground for threats to national privacy and security📖 Read
via "ITPro".
IT PRO
Engage with tech giants on foreign policy or risk national security, MPs tell government | IT PRO
The Foreign Affairs Committee urge the government to work more closely with big tech, which is becoming the new battleground for threats to national privacy and security
📢 Apple launching Lockdown Mode with iOS 16 📢
📖 Read
via "ITPro".
Apple breaks its bug bounty record with $2 million top prize, alongside $10 million grant funding, as it launches industry-first protections for highly targeted individuals📖 Read
via "ITPro".
IT PRO
Apple launching Lockdown Mode with iOS 16 to guard against Pegasus-style spyware | IT PRO
Apple breaks its bug bounty record with $2 million top prize, alongside $10 million grant funding, as it launches industry-first protections for highly targeted individuals