📢 Business customer identity for SaaS apps - simplified 📢
📖 Read
via "ITPro".
Accelerate business growth with a scalable enterprise identity solution purpose-build for SaaS apps📖 Read
via "ITPro".
ITPro
Business customer identity for SaaS apps - simplified
Accelerate business growth with a scalable enterprise identity solution purpose-built for SaaS apps
🕴 APT41 Taps Google Red Teaming Tool in Targeted Info-Stealing Attacks 🕴
📖 Read
via "Dark Reading".
China-linked APT41 group targeted a Taiwanese media organization and an Italian job agency with standard, open source penetration test tools, in a change in strategy.📖 Read
via "Dark Reading".
Dark Reading
APT41 Taps Google Red-Teaming Tool in Targeted Info-Stealing Attacks
China-linked APT41 group targeted a Taiwanese media organization and an Italian job agency with standard, open source penetration test tools, in a change in strategy.
‼ CVE-2023-2160 ‼
📖 Read
via "National Vulnerability Database".
Weak Password Requirements in GitHub repository modoboa/modoboa prior to 2.1.0.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-1548 ‼
📖 Read
via "National Vulnerability Database".
A CWE-269: Improper Privilege Management vulnerability exists that could cause a local user to perform a denial of service through the console server service that is part of EcoStruxure Control Expert. Affected Products:Â EcoStruxure Control Expert (V15.1 and above)📖 Read
via "National Vulnerability Database".
‼ CVE-2023-27976 ‼
📖 Read
via "National Vulnerability Database".
A CWE-668: Exposure of Resource to Wrong Sphere vulnerability exists that could cause remote code execution when a valid user visits a malicious link provided through the web endpoints. Affected Products:Â EcoStruxure Control Expert (V15.1 and above)📖 Read
via "National Vulnerability Database".
‼ CVE-2023-28141 ‼
📖 Read
via "National Vulnerability Database".
An NTFS Junction condition exists in the Qualys Cloud Agent for Windows platform in versions before 4.5.3.1. Attackers may write files to arbitrary locations via a local attack vector. This allows attackers to assume the privileges of the process, and they may delete or otherwise on unauthorized files, allowing for the potential modification or deletion of sensitive files limited only to that specific directory/file object. This vulnerability is bounded only to the time of uninstallation and can only be exploited locally. At the time of this disclosure, versions before 4.0 are classified as End of Life.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-28142 ‼
📖 Read
via "National Vulnerability Database".
A Race Condition exists in the Qualys Cloud Agent for Windows platform in versions from 3.1.3.34 and before 4.5.3.1. This allows attackers to escalate privileges limited on the local machine during uninstallation of the Qualys Cloud Agent for Windows. Attackers may gain SYSTEM level privileges on that asset to run arbitrary commands. At the time of this disclosure, versions before 4.0 are classified as End of Life.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-28140 ‼
📖 Read
via "National Vulnerability Database".
An Executable Hijacking condition exists in the Qualys Cloud Agent for Windows platform in versions before 4.5.3.1. Attackers may load a malicious copy of a Dependency Link Library (DLL) via a local attack vector instead of the DLL that the application was expecting, when processes are running with escalated privileges. This vulnerability is bounded only to the time of uninstallation and can only be exploited locally. At the time of this disclosure, versions before 4.0 are classified as End of Life.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-28143 ‼
📖 Read
via "National Vulnerability Database".
Qualys Cloud Agent for macOS (versions 2.5.1-75 before 3.7) installer allows a local escalation of privilege bounded only to the time of installation and only on older macOSX (macOS 10.15 and older) versions. Attackers may exploit incorrect file permissions to give them ROOT command execution privileges on the host. During the install of the PKG, a step in the process involves extracting the package and copying files to several directories. Attackers may gain writable access to files during the install of PKG when extraction of the package and copying files to several directories, enabling a local escalation of privilege.📖 Read
via "National Vulnerability Database".
🕴 Where There's No Code, There's No SDLC 🕴
📖 Read
via "Dark Reading".
How can we build security back into software development in a low-code/no-code environment?📖 Read
via "Dark Reading".
Dark Reading
Where There's No Code, There's No SDLC
How can we build security back into software development in a low-code/no-code environment?
🕴 Researchers Discover First Ever Major Ransomware Targeting macOS 🕴
📖 Read
via "Dark Reading".
In targeting Apple users, LockBit is going where no major ransomware gang has gone before. But it's a warning shot, and Mac users need not worry yet.📖 Read
via "Dark Reading".
Dark Reading
Researchers Discover First-Ever Major Ransomware Targeting macOS
In targeting Apple users, LockBit is going where no major ransomware gang has gone before. But it's a warning shot, and Mac users need not worry yet.
👍3
🕴 QBot Expands Initial Access Malware Strategy With PDF-WSF Combo 🕴
📖 Read
via "Dark Reading".
The infamous Trojan's operators are switching up tactics with the use of simulated business correspondence, which helps instill trust with intended victims, and a stealthier payload.📖 Read
via "Dark Reading".
Dark Reading
QBot Expands Initial Access Malware Strategy With PDF-WSF Combo
The infamous Trojan's operators are switching up tactics with the use of simulated business correspondence, which helps instill trust with intended victims, and a stealthier payload.
‼ CVE-2023-25556 ‼
📖 Read
via "National Vulnerability Database".
A CWE-287: Improper Authentication vulnerability exists that could allow a device to be compromised when a key of less than seven digits is entered and the attacker has access to the KNX installation.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-22294 ‼
📖 Read
via "National Vulnerability Database".
Privilege escalation in Tribe29 Checkmk Appliance before 1.6.4 allows authenticated site users to escalate privileges via incorrectly set permissions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-29854 ‼
📖 Read
via "National Vulnerability Database".
DirCMS 6.0.0 has a Cross Site Scripting (XSS) vulnerability in the foreground.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-22307 ‼
📖 Read
via "National Vulnerability Database".
Sensitive data exposure in Webconf in Tribe29 Checkmk Appliance before 1.6.4 allows local attacker to retrieve passwords via reading log files.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-29855 ‼
📖 Read
via "National Vulnerability Database".
WBCE CMS 1.5.3 has a command execution vulnerability via admin/languages/install.php.📖 Read
via "National Vulnerability Database".
🕴 NSO Group is Back in Business With 3 New iOS Zero-Click Exploits 🕴
📖 Read
via "Dark Reading".
An investigation concludes that NSO Group was hired in 2022 to deploy Pegasus spyware against human rights workers in Mexico and other targets.📖 Read
via "Dark Reading".
Dark Reading
NSO Group Is Back in Business With 3 New iOS Zero-Click Exploits
An investigation concludes that NSO Group was hired in 2022 to deploy Pegasus spyware against human rights workers in Mexico and other targets.
♟️ Giving a Face to the Malware Proxy Service ‘Faceless’ ♟️
📖 Read
via "Krebs on Security".
For the past seven years, a malware-based proxy service known as "Faceless" has sold anonymity to countless cybercriminals. For less than a dollar per day, Faceless customers can route their malicious traffic through tens of thousands of compromised systems advertised on the service. In this post we'll examine clues left behind over the past decade by the proprietor of Faceless, including some that may help put a face to the name.📖 Read
via "Krebs on Security".
Krebs on Security
Giving a Face to the Malware Proxy Service ‘Faceless’
For the past seven years, a malware-based proxy service known as "Faceless" has sold anonymity to countless cybercriminals. For less than a dollar per day, Faceless customers can route their malicious traffic through tens of thousands of compromised systems…
🕴 Report: Over Half of North American Consumers Are Open to Passwordless 🕴
📖 Read
via "Dark Reading".
1Password research reveals consumers are fed up with passwords; education, access, and validation will drive passwordless adoption.📖 Read
via "Dark Reading".
Dark Reading
Report: Over Half of North American Consumers Are Open to Passwordless
1Password research reveals consumers are fed up with passwords; education, access, and validation will drive passwordless adoption.