‼ CVE-2022-3364 ‼
📖 Read
via "National Vulnerability Database".
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0a3.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-40472 ‼
📖 Read
via "National Vulnerability Database".
ZKTeco Xiamen Information Technology ZKBio Time 8.0.7 Build: 20220721.14829 was discovered to contain a CSV injection vulnerability. This vulnerability allows attackers to execute arbitrary code via a crafted payload injected into the Content text field of the Add New Message module.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-39232 ‼
📖 Read
via "National Vulnerability Database".
Discourse is an open source discussion platform. Starting with version 2.9.0.beta5 and prior to version 2.9.0.beta10, an incomplete quote can generate a JavaScript error which will crash the current page in the browser in some cases. Version 2.9.0.beta10 added a fix and tests to ensure incomplete quotes won't break the app. As a workaround, the quote can be fixed via the rails console.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-41828 ‼
📖 Read
via "National Vulnerability Database".
In Amazon AWS Redshift JDBC Driver (aka amazon-redshift-jdbc-driver or redshift-jdbc42) before 2.1.0.8, the Object Factory does not check the class type when instantiating an object from a class name.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-36068 ‼
📖 Read
via "National Vulnerability Database".
Discourse is an open source discussion platform. In versions prior to 2.8.9 on the `stable` branch and prior to 2.9.0.beta10 on the `beta` and `tests-passed` branches, a moderator can create new and edit existing themes by using the API when they should not be able to do so. The problem is patched in version 2.8.9 on the `stable` branch and version 2.9.0.beta10 on the `beta` and `tests-passed` branches. There are no known workarounds.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-39226 ‼
📖 Read
via "National Vulnerability Database".
Discourse is an open source discussion platform. In versions prior to 2.8.9 on the `stable` branch and prior to 2.9.0.beta10 on the `beta` and `tests-passed` branches, a malicious actor can add large payloads of text into the Location and Website fields of a user profile, which causes issues for other users when loading that profile. A fix to limit the length of user input for these fields is included in version 2.8.9 on the `stable` branch and version 2.9.0.beta10 on the `beta` and `tests-passed` branches. There are no known workarounds.📖 Read
via "National Vulnerability Database".
🕴 Ransomware Attacks Continue Increasing: 20% of All Reported Attacks Occurred in the Last 12 Months - New Survey 🕴
📖 Read
via "Dark Reading".
Survey of over 2,000 IT pros revealed that a quarter either don't know or don't think Microsoft 365 data can be affected by ransomware.📖 Read
via "Dark Reading".
Darkreading
Ransomware Attacks Continue Increasing: 20% of All Reported Attacks Occurred in the Last 12 Months - New Survey
Survey of over 2,000 IT pros revealed that a quarter either don't know or don't think Microsoft 365 data can be affected by ransomware.
🕴 Intel Hardens Confidential Computing With Project Amber Updates 🕴
📖 Read
via "Dark Reading".
The chip giant has developed new features and services to make it more difficult for malicious hackers and insiders to access sensitive data from applications in the cloud.📖 Read
via "Dark Reading".
Dark Reading
Intel Hardens Confidential Computing With Project Amber Updates
The chip giant has developed new features and services to make it tougher for malicious hackers and insiders to access sensitive data from applications in the cloud.
🕴 KnowBe4 Simplifies Compliance Requirements for Healthcare Privacy 🕴
📖 Read
via "Dark Reading".
KnowBe4's Compliance Audit Readiness Assessment (CARA) now addresses select requirements from HIPAA Security Rule.📖 Read
via "Dark Reading".
Darkreading
KnowBe4 Simplifies Compliance Requirements for Healthcare Privacy
KnowBe4's Compliance Audit Readiness Assessment (CARA) now addresses select requirements from HIPAA Security Rule.
🕴 Pathlock Expands SAP Capabilities with Acquisition of Grey Monarch 🕴
📖 Read
via "Dark Reading".
Combination of two companies to help SAP customers streamline audit, compliance and control processes.📖 Read
via "Dark Reading".
Darkreading
Pathlock Expands SAP Capabilities with Acquisition of Grey Monarch
Combination of two companies to help SAP customers streamline audit, compliance and control processes.
🕴 Organizations Finding the Need for New Approaches on the Cybersecurity Front, CompTIA research reveals 🕴
📖 Read
via "Dark Reading".
Settling for 'satisfactory' level of readiness may underestimate growing levels of risk.📖 Read
via "Dark Reading".
Darkreading
Organizations Finding the Need for New Approaches on the Cybersecurity Front, CompTIA research reveals
Settling for 'satisfactory' level of readiness may underestimate growing levels of risk.
🕴 Veristor Partners with SANS Security Awareness to Deliver Employee Security Awareness Training 🕴
📖 Read
via "Dark Reading".
Companies collaborate to strengthen organizations' first line of security defense – end users.📖 Read
via "Dark Reading".
Dark Reading
Veristor Partners with SANS Security Awareness to Deliver Employee Security Awareness Training
Companies collaborate to strengthen organizations' first line of security defense – end users.
🕴 YouMail, Inc. and WMC Global Partner to Deliver Voice and SMS Phishing Disruption Services 🕴
📖 Read
via "Dark Reading".
Joint phishing intelligence solution provides 360-degree mobile communication defense.📖 Read
via "Dark Reading".
Darkreading
YouMail, Inc. and WMC Global Partner to Deliver Voice and SMS Phishing Disruption Services
Joint phishing intelligence solution provides 360-degree mobile communication defense.
🕴 Aunalytics Launches Security Patching Platform as a Service 🕴
📖 Read
via "Dark Reading".
Expedited software patching and updating recognized as one of the most important processes to protect against system compromise from cyberattacks.📖 Read
via "Dark Reading".
Darkreading
Aunalytics Launches Security Patching Platform as a Service
Expedited software patching and updating recognized as one of the most important processes to protect against system compromise from cyberattacks.
🕴 Cyera Survey Finds One in Three Respondents Want to Minimize Cloud Data Risk 🕴
📖 Read
via "Dark Reading".
Multiple providers say 'cloud data sprawl' makes managing cloud data risk a priority initiative within the next 12 months.📖 Read
via "Dark Reading".
Darkreading
Cyera Survey Finds One in Three Respondents Want to Minimize Cloud Data Risk
Multiple providers say 'cloud data sprawl' makes managing cloud data risk a priority initiative within the next 12 months.
🕴 Israel Cybersecurity Enterprise (ICE) Teams with CybeReady to Deliver World-Class Security Training 🕴
📖 Read
via "Dark Reading".
Security service provider selects cybersecurity training platform to safeguard enterprises in LATAM.📖 Read
via "Dark Reading".
Darkreading
Israel Cybersecurity Enterprise (ICE) Teams with CybeReady to Deliver World-Class Security Training
Security service provider selects cybersecurity training platform to safeguard enterprises in LATAM.
🕴 Safous Adds Browser Isolation to Its Zero-Trust Network Access Service 🕴
📖 Read
via "Dark Reading".
This new function offers secure access to corporate applications and external SaaS through a virtual browser.📖 Read
via "Dark Reading".
Darkreading
Safous Adds Browser Isolation to Its Zero-Trust Network Access Service
This new function offers secure access to corporate applications and external SaaS through a virtual browser.
‼ CVE-2022-2529 ‼
📖 Read
via "National Vulnerability Database".
sflow decode package does not employ sufficient packet sanitisation which can lead to a denial of service attack. Attackers can craft malformed packets causing the process to consume large amounts of memory resulting in a denial of service.📖 Read
via "National Vulnerability Database".
⚠ S3 Ep102: How to avoid a data breach [Audio + Transcript] ⚠
📖 Read
via "Naked Security".
Latest episode - listen now! Tell fact from fiction in hyped-up cybersecurity news...📖 Read
via "Naked Security".
Naked Security
S3 Ep102: How to avoid a data breach [Audio + Transcript]
Latest episode – listen now! Tell fact from fiction in hyped-up cybersecurity news…
🕴 Onyxia Raises $5M to Help Companies Proactively Manage Cybersecurity Risks Using AI 🕴
📖 Read
via "Dark Reading".
Onyxia, an AI-powered cybersecurity strategy and performance platform providing a centralized way for security teams to monitor and manage cybersecurity efforts in real time, has raised $5 million in seed fundraising led by World Trade Ventures with participation by Silvertech Ventures and angel investors.📖 Read
via "Dark Reading".
Darkreading
Onyxia Raises $5M to Help Companies Proactively Manage Cybersecurity Risks Using AI
Onyxia, an AI-powered cybersecurity strategy and performance platform providing a centralized way for security teams to monitor and manage cybersecurity efforts in real time, has raised $5 million in seed fundraising led by World Trade Ventures with participation…