‼ CVE-2023-33544 ‼
📖 Read
via "National Vulnerability Database".
hawtio 2.17.2 is vulnerable to Path Traversal. it is possible to input malicious zip files, which can result in the high-risk files after decompression being stored in any location, even leading to file overwrite.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-43760 ‼
📖 Read
via "National Vulnerability Database".
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SUSE Rancher allows users in some higher-privileged groups to to inject code that is executed within another user's browser, allowing the attacker to steal sensitive information, manipulate web content, or perform other malicious activities on behalf of the victims. This could result in a user with write access to the affected areas being able to act on behalf of an administrator, once an administrator opens the affected web page.This issue affects Rancher: from >= 2.6.0 before < 2.6.13, from >= 2.7.0 before < 2.7.4.📖 Read
via "National Vulnerability Database".
🛠 AIEngine 2.4.0 🛠
📖 Read
via "Packet Storm Security".
AIEngine is a next generation interactive/programmable Python/Ruby/Java/Lua and Go network intrusion detection system engine. AIEngine also helps network/security professionals to identify traffic and develop signatures for use them on NIDS, Firewalls, Traffic classifiers and so on.📖 Read
via "Packet Storm Security".
Packetstormsecurity
AIEngine 2.4.0 ≈ Packet Storm
Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers
⚠ Serious Security: That KeePass “master password crack”, and what we can learn from it ⚠
📖 Read
via "Naked Security".
Here, in an admittedly discursive nutshell, is the fascinating story of CVE-2023-32784. (Short version: Don't panic.)📖 Read
via "Naked Security".
Sophos News
Naked Security – Sophos News
❤1
🕴 Biometric Bypass: BrutePrint Makes Short Work of Fingerprint Security 🕴
📖 Read
via "Dark Reading".
Bugs in the biometric protections on Android phones and iPhones allow the limit on the number of tries to unlock the devices with a fingerprint can be bypassed, allowing automated brute-force attacks.📖 Read
via "Dark Reading".
Dark Reading
Biometric Bypass: BrutePrint Makes Short Work of Fingerprint Security
Bugs in the biometric protections on Android phones and iPhones allow the limit on the number of tries to unlock the devices with a fingerprint can be bypassed, allowing automated brute-force attacks.
‼ CVE-2023-33965 ‼
📖 Read
via "National Vulnerability Database".
Brook is a cross-platform programmable network tool. The `tproxy` server is vulnerable to a drive-by command injection. An attacker may fool a victim into visiting a malicious web page which will trigger requests to the local `tproxy` service leading to remote code execution. A patch is available in version 20230606.📖 Read
via "National Vulnerability Database".
♟️ Ask Fitis, the Bear: Real Crooks Sign Their Malware ♟️
📖 Read
via "Krebs on Security".
Code-signing certificates are supposed to help authenticate the identity of software publishers, and provide cryptographic assurance that a signed piece of software has not been altered or tampered with. Both of these qualities make stolen or ill-gotten code-signing certificates attractive to cybercriminal groups, who prize their ability to add stealth and longevity to malicious software. This post is a deep dive on "Megatraffer," a veteran Russian hacker who has practically cornered the underground market for malware focused code-signing certificates since 2015.📖 Read
via "Krebs on Security".
Krebs on Security
Ask Fitis, the Bear: Real Crooks Sign Their Malware
Code-signing certificates are supposed to help authenticate the identity of software publishers, and provide cryptographic assurance that a signed piece of software has not been altered or tampered with. Both of these qualities make stolen or ill-gotten code…
📢 Warning issued over ‘widespread’ exploitation of Zyxel NAS devices 📢
📖 Read
via "ITPro".
Zyxel has been forced to issue patches for several vulnerabilities affecting NAS devices 📖 Read
via "ITPro".
Cloud Pro
Warning issued over ‘widespread’ exploitation of Zyxel NAS devices
Zyxel has been forced to issue patches for several vulnerabilities affecting NAS devices
⚠ S3 Ep137: 16th century crypto skullduggery ⚠
📖 Read
via "Naked Security".
Lots to learn, clearly explained in plain English... listen now! (Full transcript inside.)📖 Read
via "Naked Security".
Naked Security
S3 Ep137: 16th century crypto skullduggery
Lots to learn, clearly explained in plain English… listen now! (Full transcript inside.)
⚠ Serious Security: That KeePass “master password crack”, and what we can learn from it ⚠
📖 Read
via "Naked Security".
Here, in an admittedly discursive nutshell, is the fascinating story of CVE-2023-32784. (Short version: Don't panic.)📖 Read
via "Naked Security".
Sophos News
Naked Security – Sophos News
🕴 Where SBOMs Stand Today 🕴
📖 Read
via "Dark Reading".
It's been two years since Executive Order 14028. By using SBOMs as a standard, organizations can manage software risks, protect their reputation, and improve their cybersecurity posture.📖 Read
via "Dark Reading".
Dark Reading
Where SBOMs Stand Today
It's been two years since Executive Order 14028. By using SBOMs as a standard, organizations can manage software risks, protect their reputation, and improve their cybersecurity posture.
🕴 Novel PyPI Malware Uses Compiled Python Bytecode to Evade Detection 🕴
📖 Read
via "Dark Reading".
In an already fraught environment surrounding the popular Python programming language software package manager, hackers are coming up with new ways to sneak malicious goodies past cybersecurity buffers.📖 Read
via "Dark Reading".
Dark Reading
Novel PyPI Malware Uses Compiled Python Bytecode to Evade Detection
In an already fraught environment surrounding the popular Python programming language software package manager, hackers are coming up with new ways to sneak malicious goodies past cybersecurity buffers.
🕴 Google Drive Deficiency Allows Attackers to Exfiltrate Workspace Data Without a Trace 🕴
📖 Read
via "Dark Reading".
No activity logging in the free subscription for Google's Web-based productivity suite exposes enterprises to insider and other threats, researchers say.📖 Read
via "Dark Reading".
Dark Reading
Google Drive Deficiency Allows Attackers to Exfiltrate Workspace Data Without a Trace
No activity logging in the free subscription for Google's Web-based productivity suite exposes enterprises to insider and other threats, researchers say.
🕴 Sustained 'Red Deer' Phishing Attacks Impersonate Israel Post, Drop RATs 🕴
📖 Read
via "Dark Reading".
The "missed package" phishing messages, likely the work of a hacking-for-hire group, bounds into inboxes, bearing ASyncRAT.📖 Read
via "Dark Reading".
Dark Reading
Sustained 'Red Deer' Phishing Attacks Impersonate Israel Post, Drop RATs
The "missed package" phishing messages, likely the work of a hacking-for-hire group, bounds into inboxes, bearing ASyncRAT.
‼ CVE-2023-32310 ‼
📖 Read
via "National Vulnerability Database".
DataEase is an open source data visualization and analysis tool. The API interface for DataEase delete dashboard and delete system messages is vulnerable to insecure direct object references (IDOR). This could result in a user deleting another user's dashboard or messages or interfering with the interface for marking messages read. The vulnerability has been fixed in v1.18.7. There are no known workarounds aside from upgrading.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-32713 ‼
📖 Read
via "National Vulnerability Database".
In Splunk App for Stream versions below 8.1.1, a low-privileged user could use a vulnerability in the streamfwd process within the Splunk App for Stream to escalate their privileges on the machine that runs the Splunk Enterprise instance, up to and including the root user.📖 Read
via "National Vulnerability Database".
🕴 How Do I Reduce Security Tool Sprawl in My Environment? 🕴
📖 Read
via "Dark Reading".
When it comes to tool consolidation, focus on platforms over products.📖 Read
via "Dark Reading".
Dark Reading
How Do I Reduce Security Tool Sprawl in My Environment?
When it comes to tool consolidation, focus on platforms over products.
🕴 Jetpack WordPress Plug-in API Bug Triggers Mass Updates 🕴
📖 Read
via "Dark Reading".
An audit uncovers an API-related security vulnerability dating back to Jetpack version 2.0 released in 2012 — and it affects millions of websites.📖 Read
via "Dark Reading".
Dark Reading
Jetpack WordPress Plug-in API Bug Triggers Mass Updates
An audit uncovers an API-related security vulnerability dating back to Jetpack version 2.0 released in 2012 — and it affects millions of websites.
❤1
‼ CVE-2023-34339 ‼
📖 Read
via "National Vulnerability Database".
In JetBrains Ktor before 2.3.1 headers containing authentication data could be added to the exception's message📖 Read
via "National Vulnerability Database".
🕴 Amazon Pays $30.8M to Settle Ring Spying & Alexa Privacy Lawsuits 🕴
📖 Read
via "Dark Reading".
The global e-commerce company will pay millions of dollars in two separate lawsuits because of privacy and security violations, the FTC says.📖 Read
via "Dark Reading".
Dark Reading
Amazon Pays $30.8M to Settle Ring Spying & Alexa Privacy Lawsuits
The global e-commerce company will pay millions of dollars in two separate lawsuits because of privacy and security violations, the FTC says.
🕴 Tel Aviv Stock Exchange Selects CardinalOps to Reduce Risk of Breaches Due to Undetected Attacks 🕴
📖 Read
via "Dark Reading".
Enables financial services firm to operationalize MITRE ATT&CK with Splunk and eliminate detection coverage gaps based on organizational risk and priorities.📖 Read
via "Dark Reading".
Dark Reading
Tel Aviv Stock Exchange Selects CardinalOps to Reduce Risk of Breaches Due to Undetected Attacks
Enables financial services firm to operationalize MITRE ATT&CK with Splunk and eliminate detection coverage gaps based on organizational risk and priorities.