‼ CVE-2023-34658 ‼
📖 Read
via "National Vulnerability Database".
Telegram v9.6.3 on iOS allows attackers to hide critical information on the User Interface via calling the function SFSafariViewController.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-26612 ‼
📖 Read
via "National Vulnerability Database".
D-Link DIR-823G firmware version 1.02B05 has a buffer overflow vulnerability, which originates from the HostName field in SetParentsControlInfo.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-36487 ‼
📖 Read
via "National Vulnerability Database".
The password reset function in ILIAS 7.0_beta1 through 7.20 and 8.0_beta1 through 8.1 allows remote attackers to take over the account.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-37255 ‼
📖 Read
via "National Vulnerability Database".
An issue was discovered in the CheckUser extension for MediaWiki through 1.39.3. In Special:CheckUser, a check of the "get edits" type is vulnerable to HTML injection through the User-Agent HTTP request header.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-33277 ‼
📖 Read
via "National Vulnerability Database".
The web interface of Gira Giersiepen Gira KNX/IP-Router 3.1.3683.0 and 3.3.8.0 allows a remote attacker to read sensitive files via directory-traversal sequences in the URL.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-26085 ‼
📖 Read
via "National Vulnerability Database".
A possible out-of-bounds read and write (due to an improper length check of shared memory) was discovered in Arm NN Android-NN-Driver before 23.02.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-37251 ‼
📖 Read
via "National Vulnerability Database".
An issue was discovered in the GoogleAnalyticsMetrics extension for MediaWiki through 1.39.3. The googleanalyticstrackurl parser function does not properly escape JavaScript in the onclick handler and does not prevent use of javascript: URLs.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-35830 ‼
📖 Read
via "National Vulnerability Database".
STW (aka Sensor-Technik Wiedemann) TCG-4 Connectivity Module DeploymentPackage_v3.03r0-Impala and DeploymentPackage_v3.04r2-Jellyfish and TCG-4lite Connectivity Module DeploymentPackage_v3.04r2-Jellyfish allow an attacker to gain full remote access with root privileges without the need for authentication, giving an attacker arbitrary remote code execution over LTE / 4G network via SMS.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-26613 ‼
📖 Read
via "National Vulnerability Database".
An OS command injection vulnerability in D-Link DIR-823G firmware version 1.02B05 allows unauthorized attackers to execute arbitrary operating system commands via a crafted get request to excu_shel.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-36488 ‼
📖 Read
via "National Vulnerability Database".
ILIAS 7.21 allows stored Cross Site Scripting (XSS).📖 Read
via "National Vulnerability Database".
‼ CVE-2023-37254 ‼
📖 Read
via "National Vulnerability Database".
An issue was discovered in the Cargo extension for MediaWiki through 1.39.3. XSS can occur in Special:CargoQuery via a crafted page item when using the default format.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-31222 ‼
📖 Read
via "National Vulnerability Database".
Deserialization of untrusted data in Microsoft Messaging Queuing Service in Medtronic's Paceart Optima versions 1.11 and earlier on Windows allows an unauthorized user to impact a healthcare delivery organization’s Paceart Optima system cardiac device causing data to be deleted, stolen, or modified, or the Paceart Optima system being used for further network penetration via network connectivity.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-26616 ‼
📖 Read
via "National Vulnerability Database".
D-Link DIR-823G firmware version 1.02B05 has a buffer overflow vulnerability, which originates from the URL field in SetParentsControlInfo.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-37256 ‼
📖 Read
via "National Vulnerability Database".
An issue was discovered in the Cargo extension for MediaWiki through 1.39.3. It allows one to store javascript: URLs in URL fields, and automatically links these URLs.📖 Read
via "National Vulnerability Database".
♟️ Russian Cybersecurity Executive Arrested for Alleged Role in 2012 Megahacks ♟️
📖 Read
via "Krebs on Security".
Nikita Kislitsin, formerly the head of network security for one of Russia's top cybersecurity firms, was arrested last week in Kazakhstan in response to 10-year-old hacking charges from the U.S. Department of Justice. Experts say Kislitsin's prosecution could soon put the Kazakhstan government in a sticky diplomatic position, as the Kremlin is already signaling that it intends to block his extradition to the United States.📖 Read
via "Krebs on Security".
Krebs on Security
Russian Cybersecurity Executive Arrested for Alleged Role in 2012 Megahacks
Nikita Kislitsin, formerly the head of network security for one of Russia's top cybersecurity firms, was arrested last week in Kazakhstan in response to 10-year-old hacking charges from the U.S. Department of Justice. Experts say Kislitsin's prosecution could…
🕴 AI-Enabled Voice Cloning Anchors Deepfaked Kidnapping 🕴
📖 Read
via "Dark Reading".
Virtual kidnapping is just one of many new artificial intelligence attack types that threat actors have begun deploying, as voice cloning emerges as a potent new imposter tool.📖 Read
via "Dark Reading".
Dark Reading
AI-Enabled Voice Cloning Anchors Deepfaked Kidnapping
Virtual kidnapping is just one of many new artificial intelligence attack types that threat actors have begun deploying, as voice cloning emerges as a potent new imposter tool.
🕴 OTORIO Rolls Out Advanced Attack Graph Analysis for OT Security 🕴
📖 Read
via "Dark Reading".
Innovative risk-based model enables better security measures.📖 Read
via "Dark Reading".
Dark Reading
OTORIO Rolls Out Advanced Attack Graph Analysis for OT Security
Innovative risk-based model enables better security measures.
🕴 Mend.io Launches Inaugural Open Source Reliability Leaderboard 🕴
📖 Read
via "Dark Reading".
New report offers valuable resource to help organizations evaluate the safety and reliability of open-source packages.📖 Read
via "Dark Reading".
Dark Reading
Mend.io Launches Inaugural Open Source Reliability Leaderboard
New report offers valuable resource to help organizations evaluate the safety and reliability of open-source packages.
🕴 Invary Raises $1.85M in Pre-Seed Funding to Close Critical Gap in Zero Trust Security 🕴
📖 Read
via "Dark Reading".
The company introduces a solution to restore trust in customers' existing cyber defense techstack.📖 Read
via "Dark Reading".
Dark Reading
Invary Raises $1.85M in Pre-Seed Funding to Close Critical Gap in Zero Trust Security
The company introduces a solution to restore trust in customers' existing cyber defense techstack.
🕴 Cybellum Unveils New Brand, Amplifying Commitment to Team-Centric Product Security 🕴
📖 Read
via "Dark Reading".
The new brand is launched alongside new product security platform capabilities such as a vulnerability management (VM) co-pilot and incident response investigation management, providing automation and workflows for the many teams involved in product security.📖 Read
via "Dark Reading".
Dark Reading
Cybellum Unveils New Brand, Amplifying Commitment to Team-Centric Product Security
The new brand is launched alongside new product security platform capabilities such as a vulnerability management (VM) co-pilot and incident response investigation management, providing automation and workflows for the many teams involved in product security.
❤1👍1
🕴 Employer Demand for Technology Workers Across Europe Remains on Firm Footing 🕴
📖 Read
via "Dark Reading".
More than 950,000 job postings for tech positions in Q4 2022.📖 Read
via "Dark Reading".
Dark Reading
Employer Demand for Technology Workers Across Europe Remains on Firm Footing
More than 950,000 job postings for tech positions in Q4 2022.