🕴 AuditBoard Launches Third-Party Risk Management Solution, Empowering Enterprises to Tackle IT Vendor Risk at Scale 🕴
📖 Read
via "Dark Reading".
Solution streamlines the assessment, monitoring, and remediation of third-party risk for information security, compliance, and risk teams.📖 Read
via "Dark Reading".
Dark Reading
AuditBoard Launches Third-Party Risk Management Solution, Empowering Enterprises to Tackle IT Vendor Risk at Scale
Solution streamlines the assessment, monitoring, and remediation of third-party risk for information security, compliance, and risk teams.
❌ APT Lazarus Targets Engineers with macOS Malware ❌
📖 Read
via "Threat Post".
The North Korean APT is using a fake job posting for Coinbase in a cyberespionage campaign targeting users of both Apple and Intel-based systems.📖 Read
via "Threat Post".
Threat Post
APT Lazarus Targets Engineers with macOS Malware
The North Korean APT is using a fake job posting for Coinbase in a cyberespionage campaign targeting users of both Apple and Intel-based systems.
🕴 Thoma Bravo Closes $6.9B Acquisition of Identity-Security Vendor SailPoint 🕴
📖 Read
via "Dark Reading".
All-cash transaction deal that was first announced in April means SailPoint is no longer a publicly traded company.📖 Read
via "Dark Reading".
Dark Reading
Thoma Bravo Closes $6.9B Acquisition of Identity-Security Vendor SailPoint
All-cash transaction deal that was first announced in April means SailPoint is no longer a publicly traded company.
‼ CVE-2022-38149 ‼
📖 Read
via "National Vulnerability Database".
HashiCorp Consul Template through 0.29.1 inserts Sensitive Information into a Log File.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-36186 ‼
📖 Read
via "National Vulnerability Database".
A Null Pointer dereference vulnerability exists in GPAC 2.1-DEV-revUNKNOWN-master via the function gf_filter_pid_set_property_full () at filter_core/filter_pid.c:5250,which causes a Denial of Service (DoS). This vulnerability was fixed in commit b43f9d1.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-2845 ‼
📖 Read
via "National Vulnerability Database".
Buffer Over-read in GitHub repository vim/vim prior to 9.0.0217.📖 Read
via "National Vulnerability Database".
🤔1
‼ CVE-2022-36190 ‼
📖 Read
via "National Vulnerability Database".
GPAC mp4box 2.1-DEV-revUNKNOWN-master has a use-after-free vulnerability in function gf_isom_dovi_config_get. This vulnerability was fixed in commit fef6242.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-30262 ‼
📖 Read
via "National Vulnerability Database".
The Emerson ControlWave 'Next Generation' RTUs through 2022-05-02 mishandle firmware integrity. They utilize the BSAP-IP protocol to transmit firmware updates. Firmware updates are supplied as CAB archive files containing a binary firmware image. In all cases, firmware images were found to have no authentication (in the form of firmware signing) and only relied on insecure checksums for regular integrity checks.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-31262 ‼
📖 Read
via "National Vulnerability Database".
An exploitable local privilege escalation vulnerability exists in GOG Galaxy 2.0.46. Due to insufficient folder permissions, an attacker can hijack the %ProgramData%\GOG.com folder structure and change the GalaxyCommunication service executable to a malicious file, resulting in code execution as SYSTEM.📖 Read
via "National Vulnerability Database".
🕴 China-Backed RedAlpha APT Builds Sprawling Cyber-Espionage Infrastructure 🕴
📖 Read
via "Dark Reading".
The state-sponsored group particularly targets organizations working on behalf of the Uyghurs, Tibet, and Taiwan, looking to gather intel that could lead to human-rights abuses, researchers say.📖 Read
via "Dark Reading".
Dark Reading
China-Backed RedAlpha APT Builds Sprawling Cyber-Espionage Infrastructure
The state-sponsored group particularly targets organizations working on behalf of the Uyghurs, Tibet, and Taiwan, looking to gather intel that could lead to human-rights abuses, researchers say.
🕴 'Operation Sugarush' Mounts Concerning Spy Effort on Shipping, Healthcare Industries 🕴
📖 Read
via "Dark Reading".
A suspected Iranian threat actor known as UNC3890 is gathering intel that could be used for kinetic strikes against global shipping targets.📖 Read
via "Dark Reading".
Dark Reading
'Operation Sugarush' Mounts Concerning Spy Effort on Shipping, Healthcare Industries
A suspected Iranian threat actor known as UNC3890 is gathering intel that could be used for kinetic strikes against global shipping targets.
🕴 When Countries Are Attacked: Making the Case for More Private-Public Cooperation 🕴
📖 Read
via "Dark Reading".
The increased sophistication of cyberattacks makes them more widely damaging and difficult to prevent.📖 Read
via "Dark Reading".
Dark Reading
When Countries Are Attacked: Making the Case for More Private-Public Cooperation
The increased sophistication of cyberattacks makes them more widely damaging and difficult to prevent.
‼ CVE-2022-36191 ‼
📖 Read
via "National Vulnerability Database".
A heap-buffer-overflow had occurred in function gf_isom_dovi_config_get of isomedia/avc_ext.c:2490, as demonstrated by MP4Box. This vulnerability was fixed in commit fef6242.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-22455 ‼
📖 Read
via "National Vulnerability Database".
IBM Security Verify Governance Identity Manager 10.0 virtual appliance component performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses. IBM X-Force ID: 224989.📖 Read
via "National Vulnerability Database".
🕴 'DarkTortilla' Malware Wraps in Sophistication for High-Volume RAT Infections 🕴
📖 Read
via "Dark Reading".
The stealthy crypter, active since 2015, has been used to deliver a wide range of information stealers and RATs at a rapid, widespread clip.📖 Read
via "Dark Reading".
Dark Reading
'DarkTortilla' Malware Wraps in Sophistication for High-Volume RAT Infections
The stealthy crypter, active since 2015, has been used to deliver a wide range of information stealers and RATs at a rapid, widespread clip.
👍1
🔏 HHS Warns of New Phishing Scam Targeting Healthcare Orgs 🔏
📖 Read
via "".
The latest phishing campaign targeting the industry involves a convincing looking Evernote landing page.📖 Read
via "".
🕴 Google Chrome Zero-Day Found Exploited in the Wild 🕴
📖 Read
via "Dark Reading".
The high-severity security vulnerability (CVE-2022-2856) is due to improper user-input validation.📖 Read
via "Dark Reading".
Dark Reading
Google Chrome Zero-Day Found Exploited in the Wild
The high-severity security vulnerability (CVE-2022-2856) is due to improper user-input validation.
‼ CVE-2022-38392 ‼
📖 Read
via "National Vulnerability Database".
A certain 5400 RPM OEM hard drive, as shipped with laptop PCs in approximately 2005, allows physically proximate attackers to cause a denial of service (device malfunction and system crash) via a resonant-frequency attack with the audio signal from the Rhythm Nation music video.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-35117 ‼
📖 Read
via "National Vulnerability Database".
Clinic's Patient Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via update_medicine_details.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Packing text box under the Update Medical Details module.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-2870 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability was found in laravel 5.1 and classified as problematic. This issue affects some unknown processing. The manipulation leads to deserialization. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-206501 was assigned to this vulnerability.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-2849 ‼
📖 Read
via "National Vulnerability Database".
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0219.📖 Read
via "National Vulnerability Database".