🕴 US Patent Office Hacked, Trademark Apps Accessed 🕴
📖 Read
via "Dark Reading".
Misconfiguration exposed the physical addresses of 60,000 patent filers over three years.📖 Read
via "Dark Reading".
Dark Reading
US Patent Office Data Spill Exposes Trademark Applications
Misconfiguration exposed the physical addresses of 60,000 patent filers over three years.
🕴 Cybersecurity Is the Healthcare Your Organization Needs 🕴
📖 Read
via "Dark Reading".
Organizations should consider their security practices the same way people think about their well-being. Focus on staying healthy instead of finding a new pill for every security symptom you see.📖 Read
via "Dark Reading".
Dark Reading
Cybersecurity Is the Healthcare Your Organization Needs
Organizations should consider their security practices the same way people think about their well-being. Focus on staying healthy instead of finding a new pill for every security symptom you see.
⚠ S3 Ep141: What was Steve Jobs’s first job? ⚠
📖 Read
via "Naked Security".
Latest episode - listen now! (Full transcript inside.)📖 Read
via "Naked Security".
Naked Security
S3 Ep141: What was Steve Jobs’s first job?
Latest episode – listen now! (Full transcript inside.)
‼ CVE-2023-34658 ‼
📖 Read
via "National Vulnerability Database".
Telegram v9.6.3 on iOS allows attackers to hide critical information on the User Interface via calling the function SFSafariViewController.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-26612 ‼
📖 Read
via "National Vulnerability Database".
D-Link DIR-823G firmware version 1.02B05 has a buffer overflow vulnerability, which originates from the HostName field in SetParentsControlInfo.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-36487 ‼
📖 Read
via "National Vulnerability Database".
The password reset function in ILIAS 7.0_beta1 through 7.20 and 8.0_beta1 through 8.1 allows remote attackers to take over the account.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-37255 ‼
📖 Read
via "National Vulnerability Database".
An issue was discovered in the CheckUser extension for MediaWiki through 1.39.3. In Special:CheckUser, a check of the "get edits" type is vulnerable to HTML injection through the User-Agent HTTP request header.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-33277 ‼
📖 Read
via "National Vulnerability Database".
The web interface of Gira Giersiepen Gira KNX/IP-Router 3.1.3683.0 and 3.3.8.0 allows a remote attacker to read sensitive files via directory-traversal sequences in the URL.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-26085 ‼
📖 Read
via "National Vulnerability Database".
A possible out-of-bounds read and write (due to an improper length check of shared memory) was discovered in Arm NN Android-NN-Driver before 23.02.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-37251 ‼
📖 Read
via "National Vulnerability Database".
An issue was discovered in the GoogleAnalyticsMetrics extension for MediaWiki through 1.39.3. The googleanalyticstrackurl parser function does not properly escape JavaScript in the onclick handler and does not prevent use of javascript: URLs.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-35830 ‼
📖 Read
via "National Vulnerability Database".
STW (aka Sensor-Technik Wiedemann) TCG-4 Connectivity Module DeploymentPackage_v3.03r0-Impala and DeploymentPackage_v3.04r2-Jellyfish and TCG-4lite Connectivity Module DeploymentPackage_v3.04r2-Jellyfish allow an attacker to gain full remote access with root privileges without the need for authentication, giving an attacker arbitrary remote code execution over LTE / 4G network via SMS.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-26613 ‼
📖 Read
via "National Vulnerability Database".
An OS command injection vulnerability in D-Link DIR-823G firmware version 1.02B05 allows unauthorized attackers to execute arbitrary operating system commands via a crafted get request to excu_shel.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-36488 ‼
📖 Read
via "National Vulnerability Database".
ILIAS 7.21 allows stored Cross Site Scripting (XSS).📖 Read
via "National Vulnerability Database".
‼ CVE-2023-37254 ‼
📖 Read
via "National Vulnerability Database".
An issue was discovered in the Cargo extension for MediaWiki through 1.39.3. XSS can occur in Special:CargoQuery via a crafted page item when using the default format.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-31222 ‼
📖 Read
via "National Vulnerability Database".
Deserialization of untrusted data in Microsoft Messaging Queuing Service in Medtronic's Paceart Optima versions 1.11 and earlier on Windows allows an unauthorized user to impact a healthcare delivery organization’s Paceart Optima system cardiac device causing data to be deleted, stolen, or modified, or the Paceart Optima system being used for further network penetration via network connectivity.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-26616 ‼
📖 Read
via "National Vulnerability Database".
D-Link DIR-823G firmware version 1.02B05 has a buffer overflow vulnerability, which originates from the URL field in SetParentsControlInfo.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-37256 ‼
📖 Read
via "National Vulnerability Database".
An issue was discovered in the Cargo extension for MediaWiki through 1.39.3. It allows one to store javascript: URLs in URL fields, and automatically links these URLs.📖 Read
via "National Vulnerability Database".
♟️ Russian Cybersecurity Executive Arrested for Alleged Role in 2012 Megahacks ♟️
📖 Read
via "Krebs on Security".
Nikita Kislitsin, formerly the head of network security for one of Russia's top cybersecurity firms, was arrested last week in Kazakhstan in response to 10-year-old hacking charges from the U.S. Department of Justice. Experts say Kislitsin's prosecution could soon put the Kazakhstan government in a sticky diplomatic position, as the Kremlin is already signaling that it intends to block his extradition to the United States.📖 Read
via "Krebs on Security".
Krebs on Security
Russian Cybersecurity Executive Arrested for Alleged Role in 2012 Megahacks
Nikita Kislitsin, formerly the head of network security for one of Russia's top cybersecurity firms, was arrested last week in Kazakhstan in response to 10-year-old hacking charges from the U.S. Department of Justice. Experts say Kislitsin's prosecution could…
🕴 AI-Enabled Voice Cloning Anchors Deepfaked Kidnapping 🕴
📖 Read
via "Dark Reading".
Virtual kidnapping is just one of many new artificial intelligence attack types that threat actors have begun deploying, as voice cloning emerges as a potent new imposter tool.📖 Read
via "Dark Reading".
Dark Reading
AI-Enabled Voice Cloning Anchors Deepfaked Kidnapping
Virtual kidnapping is just one of many new artificial intelligence attack types that threat actors have begun deploying, as voice cloning emerges as a potent new imposter tool.
🕴 OTORIO Rolls Out Advanced Attack Graph Analysis for OT Security 🕴
📖 Read
via "Dark Reading".
Innovative risk-based model enables better security measures.📖 Read
via "Dark Reading".
Dark Reading
OTORIO Rolls Out Advanced Attack Graph Analysis for OT Security
Innovative risk-based model enables better security measures.
🕴 Mend.io Launches Inaugural Open Source Reliability Leaderboard 🕴
📖 Read
via "Dark Reading".
New report offers valuable resource to help organizations evaluate the safety and reliability of open-source packages.📖 Read
via "Dark Reading".
Dark Reading
Mend.io Launches Inaugural Open Source Reliability Leaderboard
New report offers valuable resource to help organizations evaluate the safety and reliability of open-source packages.