📢 SoftBank under pressure over links with 'blacklisted' Chinese facial recognition firm 📢
📖 Read
via "ITPro".
A subsidiary of the Japanese tech giant that conducts business with Mastercard and Visa relies on tech by the sanctioned SenseTime📖 Read
via "ITPro".
IT PRO
SoftBank under pressure over links with 'blacklisted' Chinese facial recognition firm | IT PRO
A subsidiary of the Japanese tech giant that conducts business with Mastercard and Visa relies on tech by the sanctioned SenseTime
📢 Microsoft identifies sophisticated Hive ransomware variant written in Rust 📢
📖 Read
via "ITPro".
The move away from Go and an encryption redesign makes the new strain even more of a threat to business targets📖 Read
via "ITPro".
ITPro
Microsoft identifies sophisticated Hive ransomware variant written in Rust
The move away from Go and an encryption redesign makes the new strain even more of a threat to business targets
📢 MI5 and FBI warn businesses over mass Chinese IP theft 📢
📖 Read
via "ITPro".
The security services urged organisations to consolidate security practices and approach Chinese business relationships with caution📖 Read
via "ITPro".
IT PRO
MI5 and FBI warn businesses over mass Chinese IP theft | IT PRO
The security services urged organisations to consolidate security practices and approach Chinese business relationships with caution
👎1
‼ CVE-2022-27910 ‼
📖 Read
via "National Vulnerability Database".
In Joomla component 'Joomlatools - DOCman 3.5.13 (and likely most versions below)' are affected to an reflected Cross-Site Scripting (XSS) in an image upload function📖 Read
via "National Vulnerability Database".
♟️ Experian, You Have Some Explaining to Do ♟️
📖 Read
via "Krebs on Security".
Twice in the past month KrebsOnSecurity has heard from readers who've had their accounts at big-three credit bureau Experian hacked and updated with a new email address that wasn't theirs. In both cases the readers used password managers to select strong, unique passwords for their Experian accounts. Research suggests identity thieves were able to hijack the accounts simply by signing up for new accounts at Experian using the victim's personal information and a different email address.📖 Read
via "Krebs on Security".
Krebsonsecurity
Experian, You Have Some Explaining to Do
Twice in the past month KrebsOnSecurity has heard from readers who've had their accounts at big-three credit bureau Experian hacked and updated with a new email address that wasn't theirs. In both cases the readers used password managers to select…
👍1
‼ CVE-2022-31571 ‼
📖 Read
via "National Vulnerability Database".
The akashtalole/python-flask-restful-api repository through 2019-09-16 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-31562 ‼
📖 Read
via "National Vulnerability Database".
The waveyan/internshipsystem repository through 2018-05-22 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-31582 ‼
📖 Read
via "National Vulnerability Database".
The shaolo1/VideoServer repository through 2019-09-21 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-31580 ‼
📖 Read
via "National Vulnerability Database".
The sanojtharindu/caretakerr-api repository through 2021-05-17 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-31578 ‼
📖 Read
via "National Vulnerability Database".
The piaoyunsoft/bt_lnmp repository through 2019-10-10 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-31579 ‼
📖 Read
via "National Vulnerability Database".
The ralphjzhang/iasset repository through 2022-05-04 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-35416 ‼
📖 Read
via "National Vulnerability Database".
H3C SSL VPN through 2022-07-10 allows wnm/login/login.json svpnlang cookie XSS.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-31581 ‼
📖 Read
via "National Vulnerability Database".
The scorelab/OpenMF repository before 2022-05-03 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-35414 ‼
📖 Read
via "National Vulnerability Database".
softmmu/physmem.c in QEMU through 7.0.0 can perform an uninitialized read on the translate_fail path, leading to an io_readx or io_writex crash.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-31585 ‼
📖 Read
via "National Vulnerability Database".
The umeshpatil-dev/Home__internet repository through 2020-08-28 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-31583 ‼
📖 Read
via "National Vulnerability Database".
The sravaniboinepelli/AutomatedQuizEval repository through 2020-04-27 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-31584 ‼
📖 Read
via "National Vulnerability Database".
The stonethree/s3label repository through 2019-08-14 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-32294 ‼
📖 Read
via "National Vulnerability Database".
Zimbra Collaboration Open Source 8.8.15 does not encrypt the initial-login randomly created password (from the "zmprove ca" command). It is visible in cleartext on port UDP 514 (aka the syslog port).📖 Read
via "National Vulnerability Database".
‼ CVE-2022-31587 ‼
📖 Read
via "National Vulnerability Database".
The yuriyouzhou/KG-fashion-chatbot repository through 2018-05-22 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-31586 ‼
📖 Read
via "National Vulnerability Database".
The unizar-30226-2019-06/ChangePop-Back repository through 2019-06-04 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.📖 Read
via "National Vulnerability Database".