🛡 Cybersecurity & Privacy 🛡 - News
@cibsecurity
25.8K subscribers
89.2K links
🗞 The finest daily news on cybersecurity and privacy.

🔔 Daily releases.

💻 Is your online life secure?

📩 lalilolalo.dev@gmail.com
Download Telegram
About
Blog
Apps
Platform
Join
🛡 Cybersecurity & Privacy 🛡 - News
25.8K subscribers
🛡 Cybersecurity & Privacy 🛡 - News
🕴 Bishop Fox Expands Leadership With First CISO and CTO 🕴



📖 Read

via "Dark Reading".
Dark Reading
Bishop Fox Expands Leadership With First CISO and CTO
PHOENIX, AZ – July 19, 2023 – Bishop Fox, the leading authority in offensive security, today announced the establishment of the company’s first Chief Information Security Officer (CISO) and Chief Technology Officer (CTO).   New CISO Christie Terrill is a…
197 views
🛡 Cybersecurity & Privacy 🛡 - News
🕴 OneLayer Expands Its Private Cellular Network Security Solutions to Operations and Asset Management 🕴



📖 Read

via "Dark Reading".
Dark Reading
OneLayer Expands Its Private Cellular Network Security Solutions to Operations and Asset Management
BOSTON, Sept. 20, 2023 /PRNewswire/ -- OneLayer, a leader in securing private LTE/5G networks for enterprises, announced today the expansion of its private cellular network security solutions to encompass the areas of operations and asset management, leveraging…
214 views
🛡 Cybersecurity & Privacy 🛡 - News
🕴 83% of IT Security Professionals Say Burnout Causes Data Breaches 🕴



📖 Read

via "Dark Reading".
Dark Reading
83% of IT Security Professionals Say Burnout Causes Data Breaches
CAMBRIDGE, Mass. – Sept. 19, 2023 – Devo Technology, the cloud-native security analytics company, today unveiled the results of a new study examining the ramifications of cybersecurity burnout, finding the vast majority of IT security professionals admit…
233 views
🛡 Cybersecurity & Privacy 🛡 - News
🕴 Dig Security Enhances DSPM Platform to Secure Enterprise Data in On-Prem, File-Share Environments 🕴



📖 Read

via "Dark Reading".
Dark Reading
Dig Security Enhances DSPM Platform to Secure Enterprise Data in On-Prem, File-Share Environments
TEL AVIV, Israel, September 20, 2023 — Dig, the cloud data security leader, today announced the expansion of the Dig Data Security Platform to protect data anywhere enterprises store sensitive information, including public cloud, software as a service (SaaS)…
237 views
🛡 Cybersecurity & Privacy 🛡 - News
🕴 FBI, CISA Issue Joint Warning on 'Snatch' Ransomware-as-a-Service 🕴

The group's use of malware that forces Windows computers to reboot into Safe Mode before encrypting files is noteworthy, advisory says.

📖 Read

via "Dark Reading".
Dark Reading
FBI, CISA Issue Joint Warning on 'Snatch' Ransomware-as-a-Service
The group's use of malware that forces Windows computers to reboot into Safe Mode before encrypting files is noteworthy, advisory says.
218 views
🛡 Cybersecurity & Privacy 🛡 - News
🕴 Fake WinRAR PoC Exploit Conceals VenomRAT Malware 🕴

A supposed exploit for a notable RCE vulnerability in the popular Windows file-archiving utility delivers a big sting for unwitting researchers and cybercriminals.

📖 Read

via "Dark Reading".
Dark Reading
Fake WinRAR PoC Exploit Conceals VenomRAT Malware
A supposed exploit for a notable RCE vulnerability in the popular Windows file-archiving utility delivers a big sting for unwitting researchers and cybercriminals.
187 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2023-20594 ‼

Improper initialization of variables in the DXE driver may allow a privileged user to leak sensitive information via local access.

📖 Read

via "National Vulnerability Database".
178 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2023-43377 ‼

A cross-site scripting (XSS) vulnerability in /hoteldruid/visualizza_contratto.php of Hoteldruid v3.0.5 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the destinatario_email1 parameter.

📖 Read

via "National Vulnerability Database".
👍1
165 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2023-43371 ‼

Hoteldruid v3.0.5 was discovered to contain a SQL injection vulnerability via the numcaselle parameter at /hoteldruid/creaprezzi.php.

📖 Read

via "National Vulnerability Database".
163 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2023-43373 ‼

Hoteldruid v3.0.5 was discovered to contain a SQL injection vulnerability via the n_utente_agg parameter at /hoteldruid/interconnessioni.php.

📖 Read

via "National Vulnerability Database".
154 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2023-43376 ‼

A cross-site scripting (XSS) vulnerability in /hoteldruid/clienti.php of Hoteldruid v3.0.5 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the nometipotariffa1 parameter.

📖 Read

via "National Vulnerability Database".
145 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2023-20597 ‼

Improper initialization of variables in the DXE driver may allow a privileged user to leak sensitive information via local access.

📖 Read

via "National Vulnerability Database".
148 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2023-40368 ‼

IBM Storage Protect 8.1.0.0 through 8.1.19.0 could allow a privileged user to obtain sensitive information from the administrative command line client. IBM X-Force ID: 263456.

📖 Read

via "National Vulnerability Database".
146 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2023-40618 ‼

A reflected cross-site scripting (XSS) vulnerability in OpenKnowledgeMaps Head Start versions 4, 5, 6, 7 as well as Visual Project Explorer 1.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the 'service' parameter in 'headstart_snapshot.php'.

📖 Read

via "National Vulnerability Database".
164 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2023-39041 ‼

An information leak in KUKURUDELI Line v13.6.1 allows attackers to obtain the channel access token and send crafted messages.

📖 Read

via "National Vulnerability Database".
185 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2023-43375 ‼

Hoteldruid v3.0.5 was discovered to contain multiple SQL injection vulnerabilities at /hoteldruid/clienti.php via the annonascita, annoscaddoc, giornonascita, giornoscaddoc, lingua_cli, mesenascita, and mesescaddoc parameters.

📖 Read

via "National Vulnerability Database".
195 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2023-39044 ‼

An information leak in ajino-Shiretoko Line v13.6.1 allows attackers to obtain the channel access token and send crafted messages.

📖 Read

via "National Vulnerability Database".
270 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2023-43374 ‼

Hoteldruid v3.0.5 was discovered to contain a SQL injection vulnerability via the id_utente_log parameter at /hoteldruid/personalizza.php.

📖 Read

via "National Vulnerability Database".
282 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2023-40619 ‼

phpPgAdmin 7.14.4 and earlier is vulnerable to deserialization of untrusted data which may lead to remote code execution because user-controlled data is directly passed to the PHP 'unserialize()' function in multiple places. An example is the functionality to manage tables in 'tables.php' where the 'ma[]' POST parameter is deserialized.

📖 Read

via "National Vulnerability Database".
226 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2023-37410 ‼

IBM Personal Communications 14.05, 14.06, and 15.0.0 could allow a local user to escalate their privileges to the SYSTEM user due to overly permissive access controls. IBM X-Force ID: 260138.

📖 Read

via "National Vulnerability Database".
203 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2023-22024 ‼

In the Unbreakable Enterprise Kernel (UEK), the RDS module in UEK has two setsockopt(2) options, RDS_CONN_RESET and RDS6_CONN_RESET, that are not re-entrant. A malicious local user with CAP_NET_ADMIN can use this to crash the kernel. CVSS 3.1 Base Score 5.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

📖 Read

via "National Vulnerability Database".
212 views