📢 Microsoft Authenticator mandates number matching to counter MFA fatigue attacks 📢
📖 Read
via "ITPro".
The added layer of complexity aims to keep social engineering at bay 📖 Read
via "ITPro".
ITPro
Microsoft Authenticator mandates number matching to counter MFA fatigue attacks
The added layer of complexity aims to keep social engineering at bay
‼ CVE-2023-2590 ‼
📖 Read
via "National Vulnerability Database".
Missing Authorization in GitHub repository answerdev/answer prior to 1.0.9.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-23863 ‼
📖 Read
via "National Vulnerability Database".
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Black and White Digital Ltd TreePress – Easy Family Trees & Ancestor Profiles plugin <= 2.0.22 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-24372 ‼
📖 Read
via "National Vulnerability Database".
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in USB Memory Direct Simple Custom Author Profiles plugin <=Â 1.0.0 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-23884 ‼
📖 Read
via "National Vulnerability Database".
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Kanban for WordPress Kanban Boards for WordPress plugin <=Â 2.5.20 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-2591 ‼
📖 Read
via "National Vulnerability Database".
Code Injection in GitHub repository nilsteampassnet/teampass prior to 3.0.7.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-23664 ‼
📖 Read
via "National Vulnerability Database".
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in ConvertBox ConvertBox Auto Embed WordPress plugin <=Â 1.0.19 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-23883 ‼
📖 Read
via "National Vulnerability Database".
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in David Gwyer WP Content Filter plugin <= 3.0.1 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-23733 ‼
📖 Read
via "National Vulnerability Database".
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Joel James Lazy Social Comments plugin <=Â 2.0.4 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-41640 ‼
📖 Read
via "National Vulnerability Database".
Auth. (subscriber+) Stored Cross-Site Scripting (XSS) vulnerability in Rymera Web Co Wholesale Suite plugin <=Â 2.1.5 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-23732 ‼
📖 Read
via "National Vulnerability Database".
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Joel James Disqus Conditional Load plugin <=Â 11.0.6 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-23734 ‼
📖 Read
via "National Vulnerability Database".
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in David Voswinkel Userlike – WordPress Live Chat plugin <= 2.2 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-23862 ‼
📖 Read
via "National Vulnerability Database".
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Gopi Ramasamy Vertical scroll recent post plugin <=Â 14.0 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-23793 ‼
📖 Read
via "National Vulnerability Database".
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Eightweb Interactive Read More Without Refresh plugin <=Â 3.1 versions.📖 Read
via "National Vulnerability Database".
🕴 Half of npm Packages Vulnerable to Old-School Weapon: the 'Shift' Key 🕴
📖 Read
via "Dark Reading".
For years, hackers could have tricked enterprises into downloading malware by simply de-capitalizing letters.📖 Read
via "Dark Reading".
Dark Reading
Npm Packages Vulnerable to Old-School Weapon: the 'Shift' Key
For years, hackers could have tricked enterprises into downloading malware by simply de-capitalizing letters in uppercase-named npm packages.
🕴 Royal Ransomware Expands to Target Linux, VMware ESXi 🕴
📖 Read
via "Dark Reading".
The ransomware gang has also started using the BatLoader dropper and SEO poisoning for initial access.📖 Read
via "Dark Reading".
Dark Reading
Royal Ransomware Expands to Target Linux, VMware ESXi
The ransomware gang has also started using the BatLoader dropper and SEO poisoning for initial access.
♟️ Feds Take Down 13 More DDoS-for-Hire Services ♟️
📖 Read
via "Krebs on Security".
The U.S. Federal Bureau of Investigation (FBI) this week seized 13 domain names connected to “booter” services that let paying customers launch crippling distributed denial-of-service (DDoS) attacks. Ten of the domains are reincarnations of DDoS-for-hire services the FBI seized in December 2022, when it charged six U.S. men with computer crimes for allegedly operating booters.📖 Read
via "Krebs on Security".
Krebs on Security
Feds Take Down 13 More DDoS-for-Hire Services
The U.S. Federal Bureau of Investigation (FBI) this week seized 13 domain names connected to “booter” services that let paying customers launch crippling distributed denial-of-service (DDoS) attacks. Ten of the domains are reincarnations of DDoS-for-hire…
🕴 Keep Your Company Cyber Competent Without Adding Cyber Anxiety 🕴
📖 Read
via "Dark Reading".
With the right attitude, businesses can maximize employee satisfaction and protection, without sacrificing productivity.📖 Read
via "Dark Reading".
Dark Reading
Keep Your Company Cyber Competent Without Adding Cyber Anxiety
With the right attitude, businesses can maximize employee satisfaction and protection, without sacrificing productivity.
‼ CVE-2023-31974 ‼
📖 Read
via "National Vulnerability Database".
yasm v1.3.0 was discovered to contain a use after free via the function error at /nasm/nasm-pp.c.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-29104 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 < V2.1), SIMATIC Cloud Connect 7 CC716 (All versions >= V2.0 < V2.1). The filename in the upload feature of the web based management of the affected device is susceptible to a path traversal vulnerability. This could allow an authenticated privileged remote attacker to overwrite any file the Linux user `ccuser` has write access to, or to download any file the Linux user `ccuser` has read-only access to.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-30985 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability has been identified in Solid Edge SE2023 (All versions < VX.223.0 Update 3), Solid Edge SE2023 (All versions < VX.223.0 Update 2). Affected applications contain an out of bounds read past the end of an allocated buffer while parsing a specially crafted OBJ file. This vulnerability could allow an attacker to disclose sensitive information. (ZDI-CAN-19426)📖 Read
via "National Vulnerability Database".