⚠ Apple megaupdate: Ventura out, iOS and iPad kernel zero-day – act now! ⚠
📖 Read
via "Naked Security".
Ventura hits the market with 112 patches, Catalina's gone missing, and iPhones and iPads get a critical kernel-level zero-day patch...📖 Read
via "Naked Security".
Sophos News
Naked Security – Sophos News
⚠ Clearview AI image-scraping face recognition service hit with €20m fine in France ⚠
📖 Read
via "Naked Security".
"We told you to stop but you ignored us," said the French regulator, "so now we're coming after you again."📖 Read
via "Naked Security".
Naked Security
Clearview AI image-scraping face recognition service hit with €20m fine in France
“We told you to stop but you ignored us,” said the French regulator, “so now we’re coming after you again.”
‼ CVE-2022-43750 ‼
📖 Read
via "National Vulnerability Database".
drivers/usb/mon/mon_bin.c in usbmon in the Linux kernel before 5.19.15 and 6.x before 6.0.1 allows a user-space client to corrupt the monitor's internal memory.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-43747 ‼
📖 Read
via "National Vulnerability Database".
baramundi Management Agent (bMA) in baramundi Management Suite (bMS) 2021 R1 and R2 and 2022 R1 allows remote code execution. This is fixed in 2022 R2.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-31256 ‼
📖 Read
via "National Vulnerability Database".
A Improper Link Resolution Before File Access ('Link Following') vulnerability in a script called by the sendmail systemd service of openSUSE Factory allows local attackers to escalate from user mail to root. This issue affects: SUSE openSUSE Factory sendmail versions prior to 8.17.1-1.1.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-25849 ‼
📖 Read
via "National Vulnerability Database".
The package joyqi/hyper-down from 0.0.0 are vulnerable to Cross-site Scripting (XSS) because the module of parse markdown does not filter the href attribute very well.📖 Read
via "National Vulnerability Database".
🕴 Dark Reading Launches New Section Dedicated to ICS/OT Security 🕴
📖 Read
via "Dark Reading".
ICS/OT Security joins the lineup of 14 cybersecurity topic sections on the media site.📖 Read
via "Dark Reading".
Dark Reading
Dark Reading Launches New Section Dedicated to ICS/OT Security
ICS/OT Security joins the lineup of 14 cybersecurity topic sections on the media site.
🕴 Top 10 Kubernetes Security Risks Every DevSecOps Pro Should Know 🕴
📖 Read
via "Dark Reading".
The mission to run any containerized application on any infrastructure makes security a challenge on Kubernetes.📖 Read
via "Dark Reading".
Dark Reading
Top 10 Kubernetes Security Risks Every DevSecOps Pro Should Know
The mission to run any containerized application on any infrastructure makes security a challenge on Kubernetes.
🕴 Baltimore/Washington International Thurgood Marshall Airport Selects Telos to Process Background Checks for Aviation Workers 🕴
📖 Read
via "Dark Reading".
Telos' aviation channeling service offers increased efficiency and flexibility in credentialing operations at the busiest airport in the Washington-Baltimore region.📖 Read
via "Dark Reading".
Dark Reading
Baltimore/Washington International Thurgood Marshall Airport Selects Telos to Process Background Checks for Aviation Workers
Telos' aviation channeling service offers increased efficiency and flexibility in credentialing operations at the busiest airport in the Washington-Baltimore region.
🛠 nfstream 6.5.3 🛠
📖 Read
via "Packet Storm Security".
nfstream is a Python package providing fast, flexible, and expressive data structures designed to make working with online or offline network data both easy and intuitive. It aims to be the fundamental high-level building block for doing practical, real world network data analysis in Python. Additionally, it has the broader goal of becoming a common network data processing framework for researchers providing data reproducibility across experiments.📖 Read
via "Packet Storm Security".
Packetstormsecurity
nfstream 6.5.3 ≈ Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers
🕴 Rezilion Vulnerability Scanner Benchmark Report Finds Top Scanners Only 73% Accurate 🕴
📖 Read
via "Dark Reading".
Majority of vulnerability scanner tools overwhelming teams with false positives and missing exploitable vulnerabilities.📖 Read
via "Dark Reading".
Dark Reading
Rezilion Vulnerability Scanner Benchmark Report Finds Top Scanners Only 73% Accurate
Majority of vulnerability scanner tools overwhelming teams with false positives and missing exploitable vulnerabilities.
🕴 Open Source Is Just the Tip of the Iceberg in Software Supply Chain Security 🕴
📖 Read
via "Dark Reading".
As more of the software stack consists of third-party code, it's time for a more-advanced open source vetting system.📖 Read
via "Dark Reading".
Dark Reading
Open Source Is Just the Tip of the Iceberg in Software Supply Chain Security
As more of the software stack consists of third-party code, it's time for a more-advanced open source vetting system.
🕴 BlackBerry Launches Cyber Threat Intelligence Service to Strengthen Cyber Defenses 🕴
📖 Read
via "Dark Reading".
New service from BlackBerry's Threat Research and Intelligence Team reduces unknowns to enhance detection and response.📖 Read
via "Dark Reading".
Dark Reading
BlackBerry Launches Cyber Threat Intelligence Service to Strengthen Cyber Defenses
New service from BlackBerry's Threat Research and Intelligence Team reduces unknowns to enhance detection and response.
🕴 Valence Security Announces $25M Series A to Scale Delivery of Collaborative SaaS Security Remediation Solutions to Customers 🕴
📖 Read
via "Dark Reading".
Led by Microsoft's M12 venture fund, Valence's Series A round accelerates the company's ability to help customers secure their SaaS mesh from risk created by democratized end-user adoption, third-party integrations, unmanaged identities, and external data sharing.📖 Read
via "Dark Reading".
Dark Reading
Valence Security Announces $25M Series A to Scale Delivery of Collaborative SaaS Security Remediation Solutions to Customers
Led by Microsoft's M12 venture fund, Valence's Series A round accelerates the company's ability to help customers secure their SaaS mesh from risk created by democratized end-user adoption, third-party integrations, unmanaged identities, and external data…
🕴 Google Enters Into Stipulated Agreement to Improve Legal Process Compliance Program 🕴
📖 Read
via "Dark Reading".
Google admitted to loss of data responsive to 2016 search warrant and agreed to program enhancements, reporting obligations, and a first-of-its-kind Independent Compliance Professional.📖 Read
via "Dark Reading".
Dark Reading
Google Enters Into Stipulated Agreement to Improve Legal Process Compliance Program
Google admitted to loss of data responsive to 2016 search warrant and agreed to program enhancements, reporting obligations, and a first-of-its-kind Independent Compliance Professional.
🕴 54% of Staff Would Reconsider Working for a Firm That Had Experienced a Cyber Breach, Research Finds 🕴
📖 Read
via "Dark Reading".
Independent research from Encore uncovers hidden costs of cyber attacks.📖 Read
via "Dark Reading".
Dark Reading
54% of Staff Would Reconsider Working for a Firm That Had Experienced a Cyber Breach, Research Finds
Independent research from Encore uncovers hidden costs of cyber attacks.
🕴 Content Security Market Worth $2.2 Million by 2027 - Exclusive Study by MarketsandMarkets(TM) 🕴
📖 Read
via "Dark Reading".
Concerns about breaches of sensitive information due to execution of malware scripts and growing adoption of cloud-based services are fueling growth of the content security market.📖 Read
via "Dark Reading".
Dark Reading
Content Security Market Worth $2.2 Million by 2027 - Exclusive Study by MarketsandMarkets(TM)
Concerns about breaches of sensitive information due to execution of malware scripts and growing adoption of cloud-based services are fueling growth of the content security market.
🕴 Cisco Warns AnyConnect VPNs Under Active Cyberattack 🕴
📖 Read
via "Dark Reading".
Older bugs in the AnyConnect Secure Mobility Client are being targeted in the wild, showcasing patch-management failures.📖 Read
via "Dark Reading".
Dark Reading
Cisco Warns AnyConnect VPNs Under Active Cyberattack
Older bugs in the AnyConnect Secure Mobility Client are being targeted in the wild, showcasing patch-management failures.
🕴 4 Reasons Open Source Matters for Cloud Security 🕴
📖 Read
via "Dark Reading".
When we depend on an open commons as our computing foundation, we need it to be secure, and the most effective way to do that is through open solutions.📖 Read
via "Dark Reading".
Dark Reading
4 Reasons Open Source Matters for Cloud Security
When we depend on an open commons as our computing foundation, we need it to be secure, and the most effective way to do that is through open solutions.
🗓️ Jira Align flaws enabled malicious users to gain super admin privileges – and potentially worse 🗓️
📖 Read
via "The Daily Swig".
Lateral or upwards movement beyond the instance was theoretically possible, concludes researcher📖 Read
via "The Daily Swig".
The Daily Swig | Cybersecurity news and views
Jira Align flaws enabled malicious users to gain super admin privileges
Super admins can, among other things, modify Jira connections, reset user accounts, and modify security settings
‼ CVE-2022-39357 ‼
📖 Read
via "National Vulnerability Database".
Winter is a free, open-source content management system based on the Laravel PHP framework. The Snowboard framework in versions 1.1.8, 1.1.9, and 1.2.0 is vulnerable to prototype pollution in the main Snowboard class as well as its plugin loader. The 1.0 branch of Winter is not affected, as it does not contain the Snowboard framework. This issue has been patched in v1.1.10 and v1.2.1. As a workaround, one may avoid this issue by following some common security practices for JavaScript, including implementing a content security policy and auditing scripts.📖 Read
via "National Vulnerability Database".