🕴 2 Years After Colonial Pipeline, US Critical Infrastructure Still Not Ready for Ransomware 🕴
📖 Read
via "Dark Reading".
Sweeping changes implemented since the May 2021 cyberattack are helping -- but more work remains to be done, security experts say.📖 Read
via "Dark Reading".
Dark Reading
2 Years After Colonial Pipeline, US Critical Infrastructure Still Not Ready for Ransomware
Sweeping changes implemented since the May 2021 cyberattack are helping — but more work remains to be done, security experts say.
👍1
‼ CVE-2023-30242 ‼
📖 Read
via "National Vulnerability Database".
NS-ASG v6.3 was discovered to contain a SQL injection vulnerability via the component /admin/add_ikev2.php.📖 Read
via "National Vulnerability Database".
🕴 New White House AI Initiatives Include AI Software-Vetting Event at DEF CON 🕴
📖 Read
via "Dark Reading".
The Biden administration outlined its plans to ensure responsible AI development — cyber-risk is a core element.📖 Read
via "Dark Reading".
Dark Reading
New White House AI Initiatives Include AI Software-Vetting Event at DEF CON
The Biden administration outlined its plans to ensure responsible AI development — cyber-risk is a core element.
‼ CVE-2022-43919 ‼
📖 Read
via "National Vulnerability Database".
IBM MQ 9.2 CD, 9.2 LTS, 9.3 CD, and 9.3 LTS could allow an authenticated attacker with authorization to craft messages to cause a denial of service. IBM X-Force ID: 241354.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-29935 ‼
📖 Read
via "National Vulnerability Database".
llvm-project commit a0138390 was discovered to contain an assertion failure at !replacements.count(op) && "operation was already replaced.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-29932 ‼
📖 Read
via "National Vulnerability Database".
llvm-project commit fdbc55a5 was discovered to contain a segmentation fault via the component mlir::IROperand<mlir::OpOperand.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-22874 ‼
📖 Read
via "National Vulnerability Database".
IBM MQ Clients 9.2 CD, 9.3 CD, and 9.3 LTS are vulnerable to a denial of service attack when processing configuration files. IBM X-Force ID: 244216.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-29934 ‼
📖 Read
via "National Vulnerability Database".
llvm-project commit 6c01b5c was discovered to contain a segmentation fault via the component mlir::Type::getDialect().📖 Read
via "National Vulnerability Database".
‼ CVE-2023-30053 ‼
📖 Read
via "National Vulnerability Database".
TOTOLINK A7100RU V7.4cu.2313_B20191024 is vulnerable to Command Injection.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-29939 ‼
📖 Read
via "National Vulnerability Database".
llvm-project commit a0138390 was discovered to contain a segmentation fault via the component mlir::spirv::TargetEnv::TargetEnv(mlir::spirv::TargetEnvAttr).📖 Read
via "National Vulnerability Database".
‼ CVE-2023-29941 ‼
📖 Read
via "National Vulnerability Database".
llvm-project commit a0138390 was discovered to contain a segmentation fault via the component matchAndRewriteSortOp<mlir::sparse_tensor::SortOp>(mlir::sparse_tensor::SortOp.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-29933 ‼
📖 Read
via "National Vulnerability Database".
llvm-project commit bd456297 was discovered to contain a segmentation fault via the component mlir::Block::getArgument.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-30243 ‼
📖 Read
via "National Vulnerability Database".
Beijing Netcon NS-ASG Application Security Gateway v6.3 is vulnerable to SQL Injection via TunnelId that allows access to sensitive information.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-30434 ‼
📖 Read
via "National Vulnerability Database".
IBM Storage Scale (IBM Spectrum Scale 5.1.0.0 through 5.1.2.9, 5.1.3.0 through 5.1.6.1 and IBM Elastic Storage Systems 6.1.0.0 through 6.1.2.5, 6.1.3.0 through 6.1.6.0) could allow a local user to cause a kernel panic. IBM X-Force ID: 252187.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-29942 ‼
📖 Read
via "National Vulnerability Database".
llvm-project commit a0138390 was discovered to contain a segmentation fault via the component mlir::Type::isa<mlir::LLVM::LLVMVoidType.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-30013 ‼
📖 Read
via "National Vulnerability Database".
TOTOLINK X5000R V9.1.0u.6118_B20201102 and V9.1.0u.6369_B20230113 contain a command insertion vulnerability in setting/setTracerouteCfg. This vulnerability allows an attacker to execute arbitrary commands through the "command" parameter.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-30054 ‼
📖 Read
via "National Vulnerability Database".
TOTOLINK A7100RU V7.4cu.2313_B20191024 has a Command Injection vulnerability. An attacker can obtain a stable root shell through a specially constructed payload.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-38707 ‼
📖 Read
via "National Vulnerability Database".
IBM Cognos Command Center 10.2.4.1 could allow a local attacker to obtain sensitive information due to insufficient session expiration. IBM X-Force ID: 234179.📖 Read
via "National Vulnerability Database".
⚠ S3 Ep133: Apple takes “tight-lipped” to a whole new level ⚠
📖 Read
via "Naked Security".
Entertaining, educational, and all in plain English 🎧📖📖 Read
via "Naked Security".
Naked Security
S3 Ep133: Apple takes “tight-lipped” to a whole new level
Entertaining, educational, and all in plain English 🎧📖
⚠ World Password Day: 2 + 2 = 4 ⚠
📖 Read
via "Naked Security".
We've kept it short and simple, with no sermons, no judgmentalism, no tubthumping... and no BUY NOW buttons. Have a nice day!📖 Read
via "Naked Security".
Naked Security
World Password Day: 2 + 2 = 4
We’ve kept it short and simple, with no sermons, no judgmentalism, no tubthumping… and no BUY NOW buttons. Have a nice day!
⚠ PHP Packagist supply chain poisoned by hacker “looking for a job” ⚠
📖 Read
via "Naked Security".
I pwned you! Gizza job! You know it makes sense!📖 Read
via "Naked Security".
Sophos News
Naked Security – Sophos News