‼ CVE-2023-29708 ‼
📖 Read
via "National Vulnerability Database".
An issue was discovered in /cgi-bin/adm.cgi in WavLink WavRouter version RPT70HA1.x, allows attackers to force a factory reset via crafted payload.📖 Read
via "National Vulnerability Database".
❤1
🕴 2 More Apple Zero-Days Exploited in Ongoing iOS Spy Campaign 🕴
📖 Read
via "Dark Reading".
The zero-day security bugs are being used to deploy the sophisticated but "odd" TriangleDB spying implant on targeted iOS devices.📖 Read
via "Dark Reading".
Dark Reading
2 More Apple Zero-Days Exploited in Ongoing iOS Spy Campaign
The zero-day security bugs are being used to deploy the sophisticated but "odd" TriangleDB spying implant on targeted iOS devices.
🕴 Lessons From a Pen Tester: 3 Steps to Stay Safer 🕴
📖 Read
via "Dark Reading".
From hardening Windows systems to adding access control and segmenting the network, there are steps organizations can take to better secure corporate data.📖 Read
via "Dark Reading".
Dark Reading
Lessons From a Pen Tester: 3 Steps to Stay Safer
From hardening Windows systems to adding access control and segmenting the network, there are steps organizations can take to better secure corporate data.
‼ CVE-2023-27452 ‼
📖 Read
via "National Vulnerability Database".
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Wow-Company Button Generator – easily Button Builder plugin <= 2.3.3 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-35093 ‼
📖 Read
via "National Vulnerability Database".
Broken Access Control vulnerability in StylemixThemes MasterStudy LMS WordPress Plugin – for Online Courses and Education plugin <= 3.0.8 versions allows any logged-in users, such as subscribers to view the "Orders" of the plugin and get the data related to the order like email, username, and more.📖 Read
via "National Vulnerability Database".
❤1
🕴 IT Staff Increasingly Saddled With Data Protection Compliance 🕴
📖 Read
via "Dark Reading".
Compliance, seen as a burden for businesses, is being passed to overloaded IT departments — leaving organizations unsure if they're compliant at all.📖 Read
via "Dark Reading".
Dark Reading
IT Staff Increasingly Saddled With Data Protection Compliance
Compliance, seen as a burden for businesses, is being passed to overloaded IT departments — leaving organizations unsure if they're compliant at all.
🕴 6 Attack Surfaces You Must Protect 🕴
📖 Read
via "Dark Reading".
More connectivity means more potential ways into your enterprise, so securing every main attack surface is imperative.📖 Read
via "Dark Reading".
Dark Reading
6 Attack Surfaces You Must Protect
More connectivity means more potential ways into your enterprise, so securing every main attack surface is imperative.
🕴 Patch Now: Cisco AnyConnect Bug Exploit Released in the Wild 🕴
📖 Read
via "Dark Reading".
A ready-made, low-complexity path to pwning the popular enterprise VPN clients for remote workers is now circulating in the wild.📖 Read
via "Dark Reading".
Dark Reading
Patch Now: Cisco AnyConnect Bug Exploit Released in the Wild
A ready-made, low-complexity path to pwning the popular enterprise VPN clients for remote workers is now circulating in the wild.
‼ CVE-2023-36362 ‼
📖 Read
via "National Vulnerability Database".
An issue in the rel_sequences component of MonetDB Server v11.45.17 and v11.46.0 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-36370 ‼
📖 Read
via "National Vulnerability Database".
An issue in the gc_col component of MonetDB Server v11.45.17 and v11.46.0 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.📖 Read
via "National Vulnerability Database".
⚠ S3 Ep140: So you think you know ransomware? ⚠
📖 Read
via "Naked Security".
Lots to learn this week - listen now! (Full transcript inside.)📖 Read
via "Naked Security".
Sophos News
Naked Security – Sophos News
🕴 5 Steps for Minimizing Dark Data Risk 🕴
📖 Read
via "Dark Reading".
Dark data may be your most elusive asset, but it can also be your most costly if you don't protect it.📖 Read
via "Dark Reading".
Dark Reading
5 Steps for Minimizing Dark Data Risk
Dark data may be your most elusive asset, but it can also be your most costly if you don't protect it.
‼ CVE-2023-2611 ‼
📖 Read
via "National Vulnerability Database".
Advantech R-SeeNet versions 2.4.22 is installed with a hidden root-level user that is not available in the users list. This hidden user has a password that cannot be changed by users.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-3256 ‼
📖 Read
via "National Vulnerability Database".
Advantech R-SeeNet versions 2.4.22 allows low-level users to access and load the content of local files.📖 Read
via "National Vulnerability Database".
🕴 Azure AD 'Log in With Microsoft' Authentication Bypass Affects Thousands 🕴
📖 Read
via "Dark Reading".
The "nOAuth" attack allows cross-platform spoofing and full account takeovers, and enterprises need to remediate the issue immediately, researchers warn.📖 Read
via "Dark Reading".
Dark Reading
Azure AD 'Log in With Microsoft' Authentication Bypass Affects Thousands
The "nOAuth" attack allows cross-platform spoofing and full account takeovers, and enterprises need to remediate the issue immediately, researchers warn.
♟️ SMS Phishers Harvested Phone Numbers, Shipment Data from UPS Tracking Tool ♟️
📖 Read
via "Krebs on Security".
The United Parcel Service (UPS) says fraudsters have been harvesting phone numbers and other information from its online shipment tracking tool in Canada to send highly targeted SMS phishing (a.k.a. "smishing") messages that spoofed UPS and other top brands. The missives addressed recipients by name, included details about recent orders, and warned that those orders wouldn't be shipped unless the customer paid an added delivery fee.📖 Read
via "Krebs on Security".
Krebs on Security
SMS Phishers Harvested Phone Numbers, Shipment Data from UPS Tracking Tool
The United Parcel Service (UPS) says fraudsters have been harvesting phone numbers and other information from its online shipment tracking tool in Canada to send highly targeted SMS phishing (a.k.a. "smishing") messages that spoofed UPS and other top brands.…
🕴 Even With No Recession, Smaller Firms Aim to Consolidate Security Tools 🕴
📖 Read
via "Dark Reading".
Small and midsized companies work to jettison some security tools to simplify operations and reduce cost, even as any economic downturn continues to remain at bay.📖 Read
via "Dark Reading".
Dark Reading
Even With No Recession, Smaller Firms Aim to Consolidate Security Tools
Small and midsized companies work to jettison some security tools to simplify operations and reduce cost, even as any economic downturn continues to remain at bay.
🕴 Tanium Platform Advances Threat Identification Capabilities and Enhances Endpoint Reach 🕴
📖 Read
via "Dark Reading".
Award-winning XEM platform introduces advanced SBOM capabilities, expanded ARM support, and additional Risk & Compliance improvements.📖 Read
via "Dark Reading".
Dark Reading
Tanium Platform Advances Threat Identification Capabilities and Enhances Endpoint Reach
Award-winning XEM platform introduces advanced SBOM capabilities, expanded ARM support, and additional Risk & Compliance improvements.
‼ CVE-2023-36243 ‼
📖 Read
via "National Vulnerability Database".
FLVMeta v1.2.1 was discovered to contain a buffer overflow via the xml_on_metadata_tag_only function at dump_xml.c.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-34923 ‼
📖 Read
via "National Vulnerability Database".
XML Signature Wrapping (XSW) in SAML-based Single Sign-on feature in TOPdesk v12.10.12 allows bad actors with credentials to authenticate with the Identity Provider (IP) to impersonate any TOPdesk user via SAML Response manipulation.📖 Read
via "National Vulnerability Database".
🕴 Former Duo Security Co-Founder Jon Oberheide Joins DNSFilter Board of Directors 🕴
📖 Read
via "Dark Reading".
Cybersecurity expert and proven entrepreneur to help protective DNS leader drive vision and scale through hypergrowth.📖 Read
via "Dark Reading".
Dark Reading
Former Duo Security Co-Founder Jon Oberheide Joins DNSFilter Board of Directors
Cybersecurity expert and proven entrepreneur to help protective DNS leader drive vision and scale through hypergrowth.