πŸ›‘ Cybersecurity & Privacy πŸ›‘ - News
25.8K subscribers
89.2K links
πŸ—ž The finest daily news on cybersecurity and privacy.

πŸ”” Daily releases.

πŸ’» Is your online life secure?

πŸ“© lalilolalo.dev@gmail.com
Download Telegram
β€Ό CVE-2023-32620 β€Ό

Improper authentication vulnerability in WL-WN531AX2 firmware versions prior to 2023526 allows a network-adjacent attacker to obtain a password for the wireless network.

πŸ“– Read

via "National Vulnerability Database".
πŸ“’ Rubrik partners with Microsoft to drive generative AI-powered cyber recovery πŸ“’

Rubrik Security Cloud will integrate with Microsoft Sentinel and Azure OpenAI to accelerate recovery from cyber attacks

πŸ“– Read

via "ITPro".
πŸ“’ NHS data leak raises β€˜serious questions’ about Manchester University cyber attack πŸ“’

NHS patient data used for research purposes is believed to have been compromised in the June attack

πŸ“– Read

via "ITPro".
β€Ό CVE-2023-3479 β€Ό

Cross-site Scripting (XSS) - Reflected in GitHub repository hestiacp/hestiacp prior to 1.7.8.

πŸ“– Read

via "National Vulnerability Database".
πŸ“’ TSMC faces $70 million LockBit ransom demand following hardware supplier breach πŸ“’

While TSMC has confirmed the breach, it has refuted claims that company operations have been disrupted by the incident

πŸ“– Read

via "ITPro".
πŸ•΄ 3 Ways to Build a More Skilled Cybersecurity Workforce πŸ•΄

With the right collaboration among employers, educators, and policymakers, we can come together to create a more secure environment for all. 

πŸ“– Read

via "Dark Reading".
β€Ό CVE-2023-3478 β€Ό

A vulnerability classified as critical was found in IBOS OA 4.5.5. Affected by this vulnerability is the function actionEdit of the file ?r=dashboard/roleadmin/edit&op=member of the component Add User Handler. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-232759. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

πŸ“– Read

via "National Vulnerability Database".
⚠ S3 Ep141: What was Steve Jobs’s first job? ⚠

Latest episode - listen now! (Full transcript inside.)

πŸ“– Read

via "Naked Security".
πŸ›  Falco 0.35.1 πŸ› 

Sysdig Falco is a behavioral activity monitoring agent that is open source and comes with native support for containers. Falco lets you define highly granular rules to check for activities involving file and network activity, process execution, IPC, and much more, using a flexible syntax. Falco will notify you when these rules are violated. You can think about Falco as a mix between snort, ossec and strace.

πŸ“– Read

via "Packet Storm Security".
β€Ό CVE-2023-37298 β€Ό

Joplin before 2.11.5 allows XSS via a USE element in an SVG document.

πŸ“– Read

via "National Vulnerability Database".
❀1
β€Ό CVE-2023-37299 β€Ό

Joplin before 2.11.5 allows XSS via an AREA element of an image map.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-33276 β€Ό

The web interface of Gira Giersiepen Gira KNX/IP-Router 3.1.3683.0 and 3.3.8.0 responds with a "404 - Not Found" status code if a path is accessed that does not exist. However, the value of the path is reflected in the response. As the application will reflect the supplied path without context-sensitive HTML encoding, it is vulnerable to reflective cross-site scripting (XSS).

πŸ“– Read

via "National Vulnerability Database".
πŸ“’ MITRE publishes the top 25 most dangerous software weaknesses πŸ“’

The annual list features the usual suspects and some new entries too

πŸ“– Read

via "ITPro".
❀1
πŸ•΄ IP Fabric Announces $25M Series B Funding to Accelerate Adoption of Network Assurance πŸ•΄

One Peak investment will advance the ubiquity of network assurance, helping organizations to reduce network complexity, assure network automation, and improve network security.

πŸ“– Read

via "Dark Reading".
πŸ•΄ Perception Point Unveils AI Model to Thwart Generative AI-Based BEC Attacks πŸ•΄

The detection model identifies LLM patterns to counter the rising abuse of generative AI in social engineering attacks.

πŸ“– Read

via "Dark Reading".
πŸ•΄ Russian Hacktivist Platform 'DDoSia' Grows Exponentially πŸ•΄

As cybercrime amidst the Russia-Ukraine war continues to escalate, the DDoSia project, launched by a known hacktivist group, has exploded in its number of members and quality of tools used for attacks.

πŸ“– Read

via "Dark Reading".
β€Ό CVE-2023-37303 β€Ό

An issue was discovered in the CheckUser extension for MediaWiki through 1.39.3. In certain situations, an attempt to block a user fails after a temporary browser hang and a DBQueryDisconnectedError error message.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-35178 β€Ό

Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow when performing a GET request to scan jobs.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-37304 β€Ό

An issue was discovered in the DoubleWiki extension for MediaWiki through 1.39.3. includes/DoubleWiki.php allows XSS via the column alignment feature.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-35177 β€Ό

Certain HP LaserJet Pro print products are potentially vulnerable to a stack-based buffer overflow related to the compact font format parser.

πŸ“– Read

via "National Vulnerability Database".
β€Ό CVE-2023-37302 β€Ό

An issue was discovered in SiteLinksView.php in Wikibase in MediaWiki through 1.39.3. There is XSS via a crafted badge title attribute. This is also related to lack of escaping in wbTemplate (from resources/wikibase/templates.js) for quotes (which can be in a title attribute).

πŸ“– Read

via "National Vulnerability Database".