ATENTION‼ New - CVE-2011-5250 (snare)
📖 Read
via "National Vulnerability Database".
Snare for Linux before 1.7.0 has CSRF in the web interface.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2009-1120
📖 Read
via "National Vulnerability Database".
EMC RepliStor Server Service before ESA-09-003 has a DoASOCommand Remote Code Execution Vulnerability. The flaw exists within the DoRcvRpcCall RPC function -exposed via the rep_srv.exe process- where the vulnerability is caused by an error when the rep_srv.exe handles a specially crafted packet sent by an unauthenticated attacker.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2007-4774
📖 Read
via "National Vulnerability Database".
The Linux kernel before 2.4.36-rc1 has a race condition. It was possible to bypass systrace policies by flooding the ptraced process with SIGCONT signals, which can can wake up a PTRACED process.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2007-4773
📖 Read
via "National Vulnerability Database".
Systrace before 1.6.0 has insufficient escape policy enforcement.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2005-4891
📖 Read
via "National Vulnerability Database".
Simple Machine Forum (SMF) versions 1.0.4 and earlier have an SQL injection vulnerability that allows remote attackers to inject arbitrary SQL statements.📖 Read
via "National Vulnerability Database".
🔏 Ex-Pharma Employees Arrested Following Data Theft in India 🔏
📖 Read
via "Subscriber Blog RSS Feed ".
The employees allegedly stole confidential information belonging to the company, including batch production control records for drug manufacturing, according to reports.📖 Read
via "Subscriber Blog RSS Feed ".
Digital Guardian
Ex-Pharma Employees Arrested Following Data Theft in India
The employees allegedly stole confidential information belonging to the company, including batch production control records for drug manufacturing, according to reports.
🔐 How to better protect your organization's most valuable data 🔐
📖 Read
via "Security on TechRepublic".
Many organizations underestimate the value of their data to skilled and organized cybercriminals, said security provider eSentire.📖 Read
via "Security on TechRepublic".
TechRepublic
How to better protect your organization's most valuable data
Many organizations underestimate the value of their data to skilled and organized cybercriminals, said security provider eSentire.
❌ Podcast: NSA Reports Major Crypto-Spoofing Bug to Microsoft ❌
📖 Read
via "Threatpost".
Threatpost talks to Venafi about the recently-disclosed Microsoft vulnerability and whether the hype around the flaw was warranted.📖 Read
via "Threatpost".
Threat Post
Podcast: NSA Reports Major Crypto-Spoofing Bug to Microsoft
Threatpost talks to Venafi about the recently-disclosed Microsoft vulnerability and whether the hype around the flaw was warranted.
ATENTION‼ New - CVE-2011-5266 (securesphere_web_application_firewall)
📖 Read
via "National Vulnerability Database".
Imperva SecureSphere Web Application Firewall (WAF) before 12-august-2010 allows SQL injection filter bypass.📖 Read
via "National Vulnerability Database".
🕴 Google Lets iPhone Users Turn Device into Security Key 🕴
📖 Read
via "Dark Reading: ".
The iPhone can now be used in lieu of a physical security key as a means of protecting Google accounts.📖 Read
via "Dark Reading: ".
Dark Reading
Google Lets iPhone Users Turn Device into Security Key
The iPhone can now be used in lieu of a physical security key as a means of protecting Google accounts.
❌ A Practical Guide to Zero-Trust Security ❌
📖 Read
via "Threatpost".
There are five different pillars to implement when moving to a modern, zero-trust security model.📖 Read
via "Threatpost".
Threat Post
A Practical Guide to Zero-Trust Security
There are five different pillars to implement when moving to a modern, zero-trust security model.
❌ Critical WordPress Bug Leaves 320,000 Sites Open to Attack ❌
📖 Read
via "Threatpost".
Authentication bypass bugs in WordPress plugins InfiniteWP Client and WP Time Capsule leave hundreds of thousands of sites open to attack.📖 Read
via "Threatpost".
Threat Post
Critical WordPress Bug Leaves 320,000 Sites Open to Attack
Authentication bypass bugs in WordPress plugins InfiniteWP Client and WP Time Capsule leave hundreds of thousands of sites open to attack.
🕴 2017 Data Breach Will Cost Equifax at Least $1.38 Billion 🕴
📖 Read
via "Dark Reading: ".
Company agrees to set aside a minimum of $380.5 million as breach compensation and spend another $1 billion on transforming its information security over the next five years. The 147 million US consumers affected by the breach have one week from today to file a claim.📖 Read
via "Dark Reading: ".
Dark Reading
2017 Data Breach Will Cost Equifax at Least $1.38 Billion
Company agrees to set aside a minimum of $380.5 million as breach compensation and spend another $1 billion on transforming its information security over the next five years. The 147 million US consumers affected by the breach have one week from today to…
ATENTION‼ New - CVE-2009-5068
📖 Read
via "National Vulnerability Database".
There is a file disclosure vulnerability in SMF (Simple Machines Forum) affecting versions through v2.0.3. On some configurations a SMF deployment is shared by several "co-admins" that are not trusted beyond the SMF deployment. This vulnerability allows them to read arbitrary files on the filesystem and therefore gain new privileges by reading the settings.php with the database passwords.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2009-5025
📖 Read
via "National Vulnerability Database".
A backdoor (aka BMSA-2009-07) was found in PyForum v1.0.3 where an attacker who knows a valid user email could force a password reset on behalf of that user.📖 Read
via "National Vulnerability Database".
ATENTION‼ New - CVE-2009-3724
📖 Read
via "National Vulnerability Database".
python-markdown2 before 1.0.1.14 has multiple cross-site scripting (XSS) issues.📖 Read
via "National Vulnerability Database".
⚠ College students call for ban on facial recognition on campus ⚠
📖 Read
via "Naked Security".
Fight for the Future is building on its success in pressuring concert promoters to back off of plans to use the technology at festivals.📖 Read
via "Naked Security".
Naked Security
College students call for ban on facial recognition on campus
Fight for the Future is building on its success in pressuring concert promoters to back off of plans to use the technology at festivals.
⚠ Google to kill third-party Chrome cookies in two years ⚠
📖 Read
via "Naked Security".
Google doesn't want to block third-party cookies in Chrome right now. It has promised to make them obsolete later, though. Wait - what?📖 Read
via "Naked Security".
Naked Security
Google to kill third-party Chrome cookies in two years
Google doesn’t want to block third-party cookies in Chrome right now. It has promised to make them obsolete later, though. Wait – what?
⚠ Apps are sharing more of your data with ad industry than you may think ⚠
📖 Read
via "Naked Security".
Apps like Grindr, Tinder and Happn are (over-)sharing data about sexuality, religion, and location with a shadowy network of data brokers. And it's not just dating apps that are doing it...📖 Read
via "Naked Security".
Naked Security
Apps are sharing more of your data with ad industry than you may think
Apps like Grindr, Tinder and Happn are (over-)sharing data about sexuality, religion, and location with a shadowy network of data brokers. And it’s not just dating apps that are doing it̷…
⚠ Update now! Popular WordPress plugins have password bypass flaws ⚠
📖 Read
via "Naked Security".
Researchers have discovered bad authentication bypass vulnerabilities affecting two WordPress plugins which should be patched as soon as possible.📖 Read
via "Naked Security".
Naked Security
Update now! Popular WordPress plugins have password bypass flaws
Researchers have discovered bad authentication bypass vulnerabilities affecting two WordPress plugins which should be patched as soon as possible.
❌ ‘Fleeceware’ Apps Downloaded 600M Times from Google Play ❌
📖 Read
via "Threatpost".
New research shows apps that dupe users into being charged excessively with little reward persist on the Android app store.📖 Read
via "Threatpost".
Threat Post
‘Fleeceware’ Apps Downloaded 600M Times from Google Play
New research shows apps that dupe users into being charged excessively with little reward persist on the Android app store.