‼ CVE-2018-14520 ‼
📖 Read
via "National Vulnerability Database".
An issue was discovered in Kirby 2.5.12. The application allows malicious HTTP requests to be sent in order to trick a user into adding web pages.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-32813 ‼
📖 Read
via "National Vulnerability Database".
The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.5, macOS Big Sur 11.6.8, Security Update 2022-005 Catalina, iOS 15.6 and iPadOS 15.6, tvOS 15.6, watchOS 8.7. An app with root privileges may be able to execute arbitrary code with kernel privileges.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-32838 ‼
📖 Read
via "National Vulnerability Database".
A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.5, macOS Big Sur 11.6.8, Security Update 2022-005 Catalina, iOS 15.6 and iPadOS 15.6. An app may be able to read arbitrary files.📖 Read
via "National Vulnerability Database".
📢 IT Pro News In Review: Global south fights ransomware while Alphabet splurges on blockchain 📢
📖 Read
via "ITPro".
Catch up on the biggest headlines of the week in just two minutes📖 Read
via "ITPro".
IT PRO
IT Pro News In Review: Global south fights ransomware while Alphabet splurges on blockchain
Catch up on the biggest headlines of the week in just two minutes
📢 Record for the largest ever HTTPS DDoS attack smashed once again 📢
📖 Read
via "ITPro".
The DDoS attack lasted 69 minutes and surpassed the previous record of 26 million RPS📖 Read
via "ITPro".
IT PRO
Record for the largest ever HTTPS DDoS attack smashed once again | IT PRO
The DDoS attack lasted 69 minutes and surpassed the previous record of 26 million RPS
📢 Escape the ransomware maze 📢
📖 Read
via "ITPro".
Conventional endpoint protection tools just aren’t the best defence anymore📖 Read
via "ITPro".
IT PRO
Escape the ransomware maze
Conventional endpoint protection tools just aren’t the best defence anymore
‼ CVE-2022-34960 ‼
📖 Read
via "National Vulnerability Database".
The container package in MikroTik RouterOS 7.4beta4 allows an attacker to create mount points pointing to symbolic links, which resolve to locations on the host device. This allows the attacker to mount any arbitrary file to any location on the host.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-32427 ‼
📖 Read
via "National Vulnerability Database".
PrinterLogic Windows Client through 25.0.0.676 allows attackers to execute directory traversal. Authenticated users with prior knowledge of the driver filename could exploit this to escalate privileges or distribute malicious content.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-2957 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability classified as critical was found in SourceCodester Simple and Nice Shopping Cart Script. Affected by this vulnerability is an unknown functionality of the file /mkshop/Men/profile.php. The manipulation of the argument mem_id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-207001 was assigned to this vulnerability.📖 Read
via "National Vulnerability Database".
🕴 New Exterro FTK Update Accelerates Mobile Digital Forensics 🕴
📖 Read
via "Dark Reading".
The FTK 7.6 portfolio promises better integration with other security and network resources, as well as unified analysis of mobile and computer evidence.📖 Read
via "Dark Reading".
Dark Reading
New Exterro FTK Update Accelerates Mobile Digital Forensics
The FTK 7.6 portfolio promises better integration with other security and network resources, as well as unified analysis of mobile and computer evidence.
🕴 Thousands of Organizations Remain at Risk From Critical Zero-Click IP Camera Bug 🕴
📖 Read
via "Dark Reading".
The US Cybersecurity and Infrastructure Security Agency had wanted federal agencies to implement the fix for the RCE flaw in Hikvision cameras by Jan. 24, 2022.📖 Read
via "Dark Reading".
Dark Reading
Thousands of Organizations Remain at Risk From Critical Zero-Click IP Camera Bug
The US Cybersecurity and Infrastructure Security Agency had wanted federal agencies to implement the fix for the RCE flaw in Hikvision cameras by Jan. 24, 2022.
🗓️ Ethereum Foundation offers $1m bug bounty payouts with proof-of-stake migration multiplier 🗓️
📖 Read
via "The Daily Swig".
Eco-friendly upgrade sends bounties soaring as computational demands plummet📖 Read
via "The Daily Swig".
The Daily Swig | Cybersecurity news and views
Ethereum Foundation offers $1m bug bounty payouts with proof-of-stake migration multiplier
Eco-friendly upgrade sends bounties soaring as computational demands plummet
🕴 Optiv's Annual $40K Scholarship for Black, African-American-Identifying STEM Students Now Open for Applicants 🕴
📖 Read
via "Dark Reading".
Optiv's Black Employee Network offers the scholarship, paid out over 4 years, for students seeking a career in the cybersecurity/information security industry.📖 Read
via "Dark Reading".
Dark Reading
Optiv's Annual $40K Scholarship for Black, African-American-Identifying STEM Students Now Open for Applicants
Optiv's Black Employee Network offers the scholarship, paid out over 4 years, for students seeking a career in the cybersecurity/information security industry.
🕴 Penetration Testing Market Worth $2.7B By 2027: MarketsandMarkets(TM) Report 🕴
📖 Read
via "Dark Reading".
Increase driven by increasingly sophisticated cyberattacks as well as increase in mobile-based business-critical applications, according to report.📖 Read
via "Dark Reading".
Dark Reading
Penetration Testing Market Worth $2.7B By 2027: MarketsandMarkets(TM) Report
Increase driven by increasingly sophisticated cyberattacks as well as increase in mobile-based business-critical applications, according to report.
🕴 What You Need to Know About the Psychology Behind Cyber Resilience 🕴
📖 Read
via "Dark Reading".
Understanding how and why people respond to cyber threats is key to building cyber workforce resilience.📖 Read
via "Dark Reading".
Dark Reading
What You Need to Know About the Psychology Behind Cyber Resilience
Understanding how and why people respond to cyber threats is key to building cyber-workforce resilience.
⚠ Breaching airgap security: using your phone’s compass as a microphone! ⚠
📖 Read
via "Naked Security".
One bit per second makes the Voyager probe data rate seem blindingly fast. But it's enough to break your security assumptions...📖 Read
via "Naked Security".
Naked Security
Breaching airgap security: using your phone’s gyroscope as a microphone
One bit per second makes the Voyager probe data rate seem blindingly fast. But it’s enough to break your security assumptions…
🕴 Cyberstarts Closes $60M in Seed Fund III 🕴
📖 Read
via "Dark Reading".
Venture firm hires former Splunk CEO to spearhead new GTM advisory board and help portfolio companies scale up.📖 Read
via "Dark Reading".
Dark Reading
Cyberstarts Closes $60M in Seed Fund III
Venture firm hires former Splunk CEO to spearhead new GTM advisory board and help portfolio companies scale up.
🕴 The (Nation) State of Cyber: 64% of Businesses Suspect They've Been Targeted or Impacted by Nation-State Attacks 🕴
📖 Read
via "Dark Reading".
According to new Venafi research, two-thirds of organizations have changed cyber strategy in response to war in Ukraine.📖 Read
via "Dark Reading".
Dark Reading
The (Nation) State of Cyber: 64% of Businesses Suspect They've Been Targeted or Impacted by Nation-State Attacks
According to new Venafi research, two-thirds of organizations have changed cyber strategy in response to war in Ukraine.
🕴 Wyden Renews Call to Encrypt Twitter DMs, Secure Americans' Data From Unfriendly Foreign Governments 🕴
📖 Read
via "Dark Reading".
Following whistleblower complaint, Oregon senator renews commitment to passing bipartisan legislation to address the national security risks.📖 Read
via "Dark Reading".
Dark Reading
Wyden Renews Call to Encrypt Twitter DMs, Secure Americans' Data From Unfriendly Foreign Governments
Following whistleblower complaint, Oregon senator renews commitment to passing bipartisan legislation to address the national security risks.
🔏 How to Form a Data Recovery Plan: Your Five Step Guide 🔏
📖 Read
via "".
Creating a detailed disaster recovery plan (DRP) can be a daunting and complicated task. Begin forming your plan by including the following five essential steps.
📖 Read
via "".
Digital Guardian
How to Form a Data Recovery Plan: Your Five Step Guide
Creating a detailed disaster recovery plan (DRP) can be a daunting and complicated task. Begin forming your plan by including the following five essential steps.
🛠 GNU Privacy Guard 2.2.37 🛠
📖 Read
via "Packet Storm Security".
GnuPG (the GNU Privacy Guard or GPG) is GNU's tool for secure communication and data storage. It can be used to encrypt data and to create digital signatures. It includes an advanced key management facility and is compliant with the proposed OpenPGP Internet standard as described in RFC2440. As such, it is meant to be compatible with PGP from NAI, Inc. Because it does not use any patented algorithms, it can be used without any restrictions. This is the LTS release.📖 Read
via "Packet Storm Security".
Packetstormsecurity
GNU Privacy Guard 2.2.37 ≈ Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers