πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
25.8K subscribers
89.2K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
β€Ό CVE-2023-22572 β€Ό

Dell PowerScale OneFS 9.1.0.x-9.4.0.x contain an insertion of sensitive information into log file vulnerability in change password api. A low privilege local attacker could potentially exploit this vulnerability, leading to system takeover.

πŸ“– Read

via "National Vulnerability Database".
πŸ•΄ ManageEngine Study Finds United States Enterprises Hit by Short-Staffed Security Operations Centers πŸ•΄

Study also reveals enterprises rely on multiple tools to ensure cloud security.

πŸ“– Read

via "Dark Reading".
πŸ•΄ KnowBe4 to Offer $10,000 to Black Americans in Cybersecurity Scholarship πŸ•΄

KnowBe4 partners with the Center for Cyber Safety and Education to support Black Americans in recognition of Black History Month to help further education.

πŸ“– Read

via "Dark Reading".
πŸ•΄ Application Security Must Be Nonnegotiable πŸ•΄

Companies need to keep security priorities top of mind during economic downturns so all-important revenue generation doesn't come with a heaping side order of security problems.

πŸ“– Read

via "Dark Reading".
πŸ•΄ Fortra's Terranova Security 2022 Gone Phishing Tournament Results Reveal Large Organizations at Highest Risk of Compromising Data πŸ•΄

Findings underscore security awareness training that leverages practical, hands-on exercises is essential to creating a security-aware culture.

πŸ“– Read

via "Dark Reading".
β€Ό CVE-2022-47003 β€Ό

A vulnerability in the Remember Me function of Mura CMS before v10.0.580 allows attackers to bypass authentication via a crafted web request.

πŸ“– Read

via "National Vulnerability Database".
πŸ•΄ Contrast Security Launches Alliance Program to Change the Way Customers Scale Their Security Solutions πŸ•΄

The Security Innovation Alliance (SIA) empowers customers to create holistic security programs by leveraging robust end-to-end integration partnerships.

πŸ“– Read

via "Dark Reading".
πŸ•΄ Gem Security Emerges From Stealth With $11M, Unveils Cloud TDIR Platform for Faster Response to Cloud Threats πŸ•΄

Gem Security provides the world's first holistic approach for Cloud TDIR, bridging the gap between cloud complexity and security operations.

πŸ“– Read

via "Dark Reading".
πŸ•΄ Command-Injection Bug in Cisco Industrial Gear Opens Devices to Complete Takeover πŸ•΄

Two security holes β€” one particularly gnarly β€” could allow hackers the freedom to do as they wish with the popular edge equipment.

πŸ“– Read

via "Dark Reading".
⚠ GitHub code-signing certificates stolen (but will be revoked this week) ⚠

There was a breach, so the bad news isn't great, but the good news isn't too bad...

πŸ“– Read

via "Naked Security".
πŸ‘1πŸ”₯1
β€Ό CVE-2023-23135 β€Ό

An arbitrary file upload vulnerability in Ftdms v3.1.6 allows attackers to execute arbitrary code via uploading a crafted JPG file.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-48093 β€Ό

Seacms v12.7 was discovered to contain a remote code execution (RCE) vulnerability via the ip parameter at admin_ ip.php.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-23136 β€Ό

lmxcms v1.41 was discovered to contain an arbitrary file deletion vulnerability via BackdbAction.class.php.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-24997 β€Ό

Deserialization of Untrusted Data vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.1.0 through 1.5.0. Users are advised to upgrade to Apache InLong's latest version or cherry-pick https://github.com/apache/inlong/pull/7223 https://github.com/apache/inlong/pull/7223 to solve it.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-48094 β€Ό

lmxcms v1.41 was discovered to contain an arbitrary file read vulnerability via TemplateAction.class.php.

πŸ“– Read

via "National Vulnerability Database".
πŸ•΄ Beating the Odds: 3 Challenges Women Face in the Cybersecurity Industry πŸ•΄

Companies need to be aware of the work culture they foster. Diversity and inclusion aren't just buzzwords. Increasing female visibility and improving female mentoring to help women enter and advance within the cybersecurity industry are key steps forward.

πŸ“– Read

via "Dark Reading".
β€Ό CVE-2023-0617 β€Ό

A vulnerability was found in TRENDNet TEW-811DRU 1.0.10.0. It has been classified as critical. This affects an unknown part of the file /wireless/guestnetwork.asp of the component httpd. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-219957 was assigned to this vulnerability.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2022-47983 β€Ό

IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 243161.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-0618 β€Ό

A vulnerability was found in TRENDnet TEW-652BRP 3.04B01. It has been declared as critical. This vulnerability affects unknown code of the file cfg_op.ccp of the component Web Service. The manipulation leads to memory corruption. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-219958 is the identifier assigned to this vulnerability.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-22326 β€Ό

In BIG-IP versions 17.0.x before 17.0.0.2, 16.1.x before 16.1.3.3, 15.1.x before 15.1.8.1, 14.1.x before 14.1.5.3, and all versions of 13.1.x, and all versions of BIG-IQ 8.x and 7.1.x, incorrect permission assignment vulnerabilities exist in the iControl REST and TMOS shell (tmsh) dig command which may allow an authenticated attacker with resource administrator or administrator role privileges to view sensitive information. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-23555 β€Ό

On BIG-IP Virtual Edition versions 15.1x beginning in 15.1.4 to before 15.1.8 and 14.1.x beginning in 14.1.5 to before 14.1.5.3, and BIG-IP SPK beginning in 1.5.0 to before 1.6.0, when FastL4 profile is configured on a virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

πŸ“– Read

via "National Vulnerability Database".