ATENTION‼ New - CVE-2011-2934
📖 Read
via "National Vulnerability Database".
A Cross Site Request Forgery (CSRF) vulnerability exists in the administrator functions in WebsiteBaker 2.8.1 and earlier due to inadequate confirmation for sensitive transactions.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2011-2933
📖 Read
via "National Vulnerability Database".
An Arbitrary File Upload vulnerability exists in admin/media/upload.php in WebsiteBaker 2.8.1 and earlier due to a failure to restrict uploaded files with .htaccess, .php4, .php5, and .phtl extensions.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2011-2715
📖 Read
via "National Vulnerability Database".
An SQL Injection vulnerability exists in Drupal 6.20 with Data 6.x-1.0-alpha14 due to insufficient sanitization of table names or column names.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2011-2714
📖 Read
via "National Vulnerability Database".
A Cross-Site Scripting vulnerability exists in Drupal 6.20 with Data 6.x-1.0-alpha14 due to insufficient sanitization of table descriptions, field names, or labels before display.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2011-2706
📖 Read
via "National Vulnerability Database".
A Cross-Site Scripting (XSS) vulnerability exists in the reorder administrator functions in sNews 1.71.📖 Read
via "National Vulnerability Database".
❌ Oracle Ties Previous All-Time Patch High with January Updates ❌
📖 Read
via "Threatpost".
The software giant patched 300+ bugs in its quarterly update.📖 Read
via "Threatpost".
Threat Post
Oracle Ties Previous All-Time Patch High with January Updates
The software giant patched 300+ bugs in its quarterly update.
🕴 Cloud Adoption & Technology Change Create Gaps in Enterprise Security 🕴
📖 Read
via "Dark Reading: ".
Many companies are struggling to get a handle on risk exposure because of visibility issues, Radware survey shows.📖 Read
via "Dark Reading: ".
Darkreading
Cloud Adoption & Technology Change Create Gaps in Enterprise Security
Many companies are struggling to get a handle on risk exposure because of visibility issues, Radware survey shows.
🕴 Microsoft Patches Windows Vuln Discovered by the NSA 🕴
📖 Read
via "Dark Reading: ".
The National Security Agency is publicly acknowledged for its finding and reporting of CVE-2020-0601, marking the start of what it says is a new approach to security.📖 Read
via "Dark Reading: ".
Darkreading
Microsoft Patches Windows Vuln Discovered by the NSA
The National Security Agency is publicly acknowledged for its finding and reporting of CVE-2020-0601, marking the start of what it says is a new approach to security.
⚠ Apple says no to unlocking shooter’s phone; AG and Trump lash back ⚠
📖 Read
via "Naked Security".
Attorney General Barr and President Trump are demanding Apple unlock the mass shooter's iPhone. Apple replies: You can't break just 1 phone.📖 Read
via "Naked Security".
Naked Security
Apple says no to unlocking shooter’s phone; AG and Trump lash back
Attorney General Barr and President Trump are demanding Apple unlock the mass shooter’s iPhone. Apple replies: You can’t break just 1 phone.
⚠ Peekaboo Moments baby-recording app has a bad database booboo ⚠
📖 Read
via "Naked Security".
No need to wait until you've gurgled out of your mother's womb to experience the joys of having your privacy breached.📖 Read
via "Naked Security".
Naked Security
Peekaboo Moments baby-recording app has a bad database booboo
No need to wait until you’ve gurgled out of your mother’s womb to experience the joys of having your privacy breached.
❌ Oski Data-Stealing Malware Emerges to Target North America, China ❌
📖 Read
via "Threatpost".
The malware is new and in the early stages of its development -- but packs a sophisticated punch.📖 Read
via "Threatpost".
Threat Post
Oski Data-Stealing Malware Emerges to Target North America, China
The malware is new and in the early stages of its development — but packs a sophisticated punch.
⚠ Malicious npm package taken down after Microsoft warning ⚠
📖 Read
via "Naked Security".
Criminals have been caught trying to sneak a malicious package on to the popular Node.js platform npm (Node Package Manager).📖 Read
via "Naked Security".
Sophos News
Naked Security – Sophos News
⚠ Microsoft fixes critical bugs in CryptoAPI, RD Gateway and .NET ⚠
📖 Read
via "Naked Security".
Here are the most serious bugs from Microsoft's Patch Tuesday - Including CryptoAPI and RCE flaws in Windows Remote Desktop Gateway.📖 Read
via "Naked Security".
Sophos News
Naked Security – Sophos News
🔐 Why corporate boards are unprepared to handle cybersecurity risks 🔐
📖 Read
via "Security on TechRepublic".
A new report recommends that corporate boards answer four key questions on a regular basis to guide cybersecurity governance.📖 Read
via "Security on TechRepublic".
TechRepublic
Why corporate boards are unprepared to handle cybersecurity risks
A new report recommends that corporate boards answer four key questions on a regular basis to guide cybersecurity governance.
🕴 How SD-WAN Helps Achieve Data Security and Threat Protection 🕴
📖 Read
via "Dark Reading: ".
Enterprises currently consider the technology a best practice because of its flexibility, scalability, performance, and agility.📖 Read
via "Dark Reading: ".
Dark Reading
How SD-WAN Helps Achieve Data Security and Threat Protection
Enterprises currently consider the technology a best practice because of its flexibility, scalability, performance, and agility.
🔐 Microsoft rolls out patch for serious Windows bug highlighted by NSA 🔐
📖 Read
via "Security on TechRepublic".
Designed to exploit a vulnerability in Windows 10 and Windows Server 2016 and 2019, the bug could allow an attacker to remotely access and control an infected computer.📖 Read
via "Security on TechRepublic".
ATENTION‼ New - CVE-2012-1563
📖 Read
via "National Vulnerability Database".
Joomla! before 2.5.3 allows Admin Account Creation.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2012-1562
📖 Read
via "National Vulnerability Database".
Joomla! core before 2.5.3 allows unauthorized password change.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2012-1326
📖 Read
via "National Vulnerability Database".
Cisco IronPort Web Security Appliance up to and including 7.5 does not validate the basic constraints of the certificate authority which could lead to MITM attacks📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2012-1316
📖 Read
via "National Vulnerability Database".
Cisco IronPort Web Security Appliance does not check for certificate revocation which could lead to MITM attacks📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2012-0945
📖 Read
via "National Vulnerability Database".
whoopsie-daisy before 0.1.26: Root user can remove arbitrary files📖 Read
via "National Vulnerability Database".