‼ CVE-2022-38707 ‼
📖 Read
via "National Vulnerability Database".
IBM Cognos Command Center 10.2.4.1 could allow a local attacker to obtain sensitive information due to insufficient session expiration. IBM X-Force ID: 234179.📖 Read
via "National Vulnerability Database".
⚠ S3 Ep133: Apple takes “tight-lipped” to a whole new level ⚠
📖 Read
via "Naked Security".
Entertaining, educational, and all in plain English 🎧📖📖 Read
via "Naked Security".
Naked Security
S3 Ep133: Apple takes “tight-lipped” to a whole new level
Entertaining, educational, and all in plain English 🎧📖
⚠ World Password Day: 2 + 2 = 4 ⚠
📖 Read
via "Naked Security".
We've kept it short and simple, with no sermons, no judgmentalism, no tubthumping... and no BUY NOW buttons. Have a nice day!📖 Read
via "Naked Security".
Naked Security
World Password Day: 2 + 2 = 4
We’ve kept it short and simple, with no sermons, no judgmentalism, no tubthumping… and no BUY NOW buttons. Have a nice day!
⚠ PHP Packagist supply chain poisoned by hacker “looking for a job” ⚠
📖 Read
via "Naked Security".
I pwned you! Gizza job! You know it makes sense!📖 Read
via "Naked Security".
Sophos News
Naked Security – Sophos News
🕴 Attackers Route Malware Activity Over Popular CDNs 🕴
📖 Read
via "Dark Reading".
One way to hide malicious activity is to make it look benign by blending in with regular traffic passing through content delivery networks (CDNs) and cloud service providers, according to a Netskope report.📖 Read
via "Dark Reading".
Dark Reading
Attackers Route Malware Activity Over Popular CDNs
One way to hide malicious activity is to make it look benign by blending in with regular traffic passing through content delivery networks (CDNs) and cloud service providers, according to a Netskope report.
‼ CVE-2023-29659 ‼
📖 Read
via "National Vulnerability Database".
A Segmentation fault caused by a floating point exception exists in libheif 1.15.1 using crafted heif images via the heif::Fraction::round() function in box.cc, which causes a denial of service.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-26285 ‼
📖 Read
via "National Vulnerability Database".
IBM MQ 9.2 CD, 9.2 LTS, 9.3 CD, and 9.3 LTS could allow a remote attacker to cause a denial of service due to an error processing invalid data. IBM X-Force ID: 248418.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-32269 ‼
📖 Read
via "National Vulnerability Database".
An issue was discovered in the Linux kernel before 6.1.11. In net/netrom/af_netrom.c, there is a use-after-free because accept is also allowed for a successfully connected AF_NETROM socket. However, in order for an attacker to exploit this, the system must have netrom routing configured or the attacker must have the CAP_NET_ADMIN capability.📖 Read
via "National Vulnerability Database".
🕴 Apple Patches Bluetooth Flaw in AirPods, Beats 🕴
📖 Read
via "Dark Reading".
Users can check for the updated firmware version of their wireless headphones in the Bluetooth settings of their iPhone, iPad, or Mac devices.📖 Read
via "Dark Reading".
Dark Reading
Apple Patches Bluetooth Flaw in AirPods, Beats
Users can check for the updated firmware version of their wireless headphones in the Bluetooth settings of their iPhone, iPad, or Mac devices.
🕴 Judge Spares Former Uber CISO Jail Time Over 2016 Data Breach Charges 🕴
📖 Read
via "Dark Reading".
Tell other CISO's "you got a break," judge says in handing down a three-year probation sentence to Joseph Sullivan.📖 Read
via "Dark Reading".
Dark Reading
Judge Spares Former Uber CISO Jail Time Over 2016 Data Breach Charges
Tell other CISOs "you got a break," judge says in handing down a three-year probation sentence to Joseph Sullivan.
‼ CVE-2023-2427 ‼
📖 Read
via "National Vulnerability Database".
Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1.13.📖 Read
via "National Vulnerability Database".
‼ CVE-2020-4914 ‼
📖 Read
via "National Vulnerability Database".
IBM Cloud Pak System Suite 2.3.3.0 through 2.3.3.5 does not invalidate session after logout which could allow a local user to impersonate another user on the system. IBM X-Force ID: 191290.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-43866 ‼
📖 Read
via "National Vulnerability Database".
IBM Maximo Asset Management 7.6.1.2 and 7.6.1.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 239436.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-2516 ‼
📖 Read
via "National Vulnerability Database".
Cross-site Scripting (XSS) - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.7.📖 Read
via "National Vulnerability Database".
🕴 Browser Isolation Adapts to Remote Work, Greater Cloud Usage 🕴
📖 Read
via "Dark Reading".
As browsers become the center of many workers' days, isolation technologies shift to protecting the extended enterprise.📖 Read
via "Dark Reading".
Dark Reading
Browser Isolation Adapts to Remote Work, Greater Cloud Usage
As browsers become the center of many workers' days, isolation technologies shift to protecting the extended enterprise.
🕴 Satori Unveils Universal Data Permissions Scanner, A Free Open-Source Tool that Sheds Light on Data Access Authorization 🕴
📖 Read
via "Dark Reading".
Addressing data access blindspots commonly faced by enterprises, data security leader launches the first open-source authorization analysis tool to provide universal visibility into data access permissions across multiple data stores.📖 Read
via "Dark Reading".
Dark Reading
Satori Unveils Universal Data Permissions Scanner, a Free Open Source Tool that Sheds Light on Data Access Authorization
Addressing data access blindspots commonly faced by enterprises, data security leader launches the first open-source authorization analysis tool to provide universal visibility into data access permissions across multiple data stores.
🕴 KnowBe4 Launches Password Kit to Celebrate World Password Day 🕴
📖 Read
via "Dark Reading".
KnowBe4 is offering a no-cost password kit to help end users practice good password hygiene and strengthen their defenses against social engineering.📖 Read
via "Dark Reading".
Dark Reading
KnowBe4 Launches Password Kit to Celebrate World Password Day
KnowBe4 is offering a no-cost password kit to help end users practice good password hygiene and strengthen their defenses against social engineering.
‼ CVE-2023-2553 ‼
📖 Read
via "National Vulnerability Database".
Cross-site Scripting (XSS) - Stored in GitHub repository unilogies/bumsys prior to 2.2.0.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-2551 ‼
📖 Read
via "National Vulnerability Database".
PHP Remote File Inclusion in GitHub repository unilogies/bumsys prior to 2.1.1.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-2554 ‼
📖 Read
via "National Vulnerability Database".
External Control of File Name or Path in GitHub repository unilogies/bumsys prior to 2.2.0.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-2552 ‼
📖 Read
via "National Vulnerability Database".
Cross-Site Request Forgery (CSRF) in GitHub repository unilogies/bumsys prior to 2.1.1.📖 Read
via "National Vulnerability Database".