⚠ Intel: SSH-stealing NetCAT bug not really a problem ⚠
📖 Read
via "Naked Security".
There's another vulnerability in Intel chips, with another catchy name: NetCAT.📖 Read
via "Naked Security".
Naked Security
Intel: SSH-stealing NetCAT bug not really a problem
There’s another vulnerability in Intel chips, with another catchy name: NetCAT.
❌ North Korean Spear-Phishing Attack Targets U.S. Firms ❌
📖 Read
via "Threatpost".
Researchers warn that U.S. firms are being targeted with legitimate - but trojanized - documents that are often socially engineered to a tee.📖 Read
via "Threatpost".
Threat Post
North Korean Spear-Phishing Attack Targets U.S. Firms
Researchers warn that U.S. firms are being targeted with legitimate - but trojanized - documents that are often socially engineered to a tee.
⚠ Just how private are your browsing habits? ⚠
📖 Read
via "Naked Security".
DNS-over-HTTPS sounds as though it should be safer than plain DNS, because of the "HTTPS" part - but not everyone is delighted about it...📖 Read
via "Naked Security".
Naked Security
Just how private are your browsing habits?
DNS-over-HTTPS sounds as though it should be safer than plain DNS, because of the “HTTPS” part – but not everyone is delighted about it…
🕴 Taking a Fresh Look at Security Ops: 10 Tips 🕴
📖 Read
via "Dark Reading: ".
Maybe you love your executive team, your security processes, tools, or strategy. Maybe you hate them. Whatever the situation, it's likely at some point that things will have changed.📖 Read
via "Dark Reading: ".
Dark Reading
Cyber Risk recent news | Dark Reading
Explore the latest news and expert commentary on Cyber Risk, brought to you by the editors of Dark Reading
ATENTION‼ New - CVE-2016-10955
📖 Read
via "National Vulnerability Database".
The cysteme-finder plugin before 1.4 for WordPress has unrestricted file upload because of incorrect session tracking.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2016-10954
📖 Read
via "National Vulnerability Database".
The Neosense theme before 1.8 for WordPress has qquploader unrestricted file upload.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2016-10953
📖 Read
via "National Vulnerability Database".
The Headway theme before 3.8.9 for WordPress has XSS via the license key field.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2016-10952
📖 Read
via "National Vulnerability Database".
The quotes-collection plugin before 2.0.6 for WordPress has XSS via the wp-admin/admin.php?page=quotes-collection page parameter.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2016-10951
📖 Read
via "National Vulnerability Database".
The fs-shopping-cart plugin 2.07.02 for WordPress has SQL injection via the pid parameter.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2016-10950
📖 Read
via "National Vulnerability Database".
The sirv plugin before 1.3.2 for WordPress has SQL injection via the id parameter.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2016-10949
📖 Read
via "National Vulnerability Database".
The Relevanssi Premium plugin before 1.14.6.1 for WordPress has SQL injection with resultant unsafe unserialization.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2016-10948
📖 Read
via "National Vulnerability Database".
The Post Indexer plugin before 3.0.6.2 for WordPress has incorrect handling of data passed to the unserialize function.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2016-10947
📖 Read
via "National Vulnerability Database".
The Post Indexer plugin before 3.0.6.2 for WordPress has SQL injection via the period parameter by a super admin.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2016-10946
📖 Read
via "National Vulnerability Database".
The wp-d3 plugin before 2.4.1 for WordPress has CSRF.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2016-10945
📖 Read
via "National Vulnerability Database".
The PageLines theme 1.1.4 for WordPress has wp-admin/admin-post.php?page=pagelines CSRF.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2016-10944
📖 Read
via "National Vulnerability Database".
The multisite-post-duplicator plugin before 1.1.3 for WordPress has wp-admin/tools.php?page=mpd CSRF.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2016-10943
📖 Read
via "National Vulnerability Database".
The zx-csv-upload plugin 1 for WordPress has SQL injection via the id parameter.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2016-10942
📖 Read
via "National Vulnerability Database".
The podlove-podcasting-plugin-for-wordpress plugin before 2.3.16 for WordPress has SQL injection via the insert_id parameter exploitable via CSRF.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2016-10941
📖 Read
via "National Vulnerability Database".
The podlove-podcasting-plugin-for-wordpress plugin before 2.3.16 for WordPress has XSS exploitable via CSRF.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2016-10940
📖 Read
via "National Vulnerability Database".
The zm-gallery plugin 1.0 for WordPress has SQL injection via the order parameter.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2016-10939
📖 Read
via "National Vulnerability Database".
The xtremelocator plugin 1.5 for WordPress has SQL injection via the id parameter.📖 Read
via "National Vulnerability Database".