Information Security (SOC)

Information Security (SOC) pinned «👇👇👇👇👇👇 #آگهی_استخدام؛ شرکت زیرساخت امن خدمات تراکنشی وابسته به بانک ملت در تخصص های ذیل از کارشناسان و متخصصان حوزه امنیت اطلاعات دعوت به همکاری می نماید. 👈رده شغلی : کارشناس مرکز عملیات امنیت 👈سابقه مرتبط: 2 سال 👈جنسیت: آقا 👈تجارب و تخصص‌های مرتبط مورد…»

17:28

⚠️ WARNING ⚠️
Incoming scans detected from 106.75.84.197 (🇨🇳) checking for vulnerable Belkin WeMo smart switches.

Exploit attempt sends a POST request to http://[target]/upnp/control/basicevent1 via UPnP (49152/tcp).

407 views08:58

Information Security (SOC)

"Over 36,000 publicly accessible #WebLogic servers will remain vulnerable to attacks, and server owners will have to deploy workarounds to counteract any possible breaches."

https://www.zdnet.com/article/new-oracle-weblogic-zero-day-discovered-in-the-wild/

ZDNet

New Oracle WebLogic zero-day discovered in the wild

Chinese cyber-security firm warns about impending attacks on Oracle WebLogic servers.

445 viewsedited 09:04

Information Security (SOC)

Google Releases Security Update for Chrome https://t.co/ZybmVRGFKT
#cyber #cybersecurity #infosec

www.us-cert.gov

Google Releases Security Update for Chrome | US-CERT

Google has released Chrome version 74.0.3729.108 for Windows, Mac, and Linux. This version addresses multiple vulnerabilities that an attacker could exploit to take control of an affected system.The Cybersecurity and Infrastructure Security Agency (CISA)…

422 views09:05

Information Security (SOC)

ISC Releases BIND Security Updates https://t.co/vgFfFU4uH7
#cyber #cybersecurity #infosec

www.us-cert.gov

ISC Releases BIND Security Updates | US-CERT

The Internet Systems Consortium (ISC) has released updates that address vulnerabilities in versions of ISC Berkeley Internet Name Domain (BIND). A remote attacker could exploit these vulnerabilities to cause a denial-of-service condition.

433 views09:05

Information Security (SOC)

Drupal Releases Security Updates https://t.co/IcEH60fyxh #cyber #cybersecurity #infosec

www.us-cert.gov

Drupal Releases Security Updates | US-CERT

Drupal has released security updates to address multiple vulnerabilities in Drupal Core. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.The Cybersecurity and Infrastructure Security Agency (CISA) encourages…

444 views09:06

Information Security (SOC)

'Highly Critical' Unpatched Zero-Day RCE Flaw Discovered in #Oracle WebLogic Servers

Read More ⮞ https://t.co/fWq9fgvm76

#infosec https://t.co/2w4BUqV38B

The Hacker News — Cyber Security and Hacking News Website

'Highly Critical' Unpatched Zero-Day Flaw Discovered In Oracle WebLogic

A new, unpatched, zero-day remote code execution vulnerability discovered in Oracle WebLogic server.

490 views09:08

Information Security (SOC)

Oracle Releases April 2019 Security Bulletin https://t.co/lAAitajouo #cyber #cybersecurity #infosec

www.us-cert.gov

Oracle Releases April 2019 Security Bulletin | US-CERT

Oracle has released its Critical Patch Update for April 2019 to address 297 vulnerabilities across multiple products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.The Cybersecurity and Infrastructure…

520 views09:09

Information Security (SOC)

MISP 2.4.106 released with a host of improvements, including new features such as a feed cache search, CLI tools to manage your MISP instance along with improved diagnostics.

Full Changelog
https://t.co/m1r1a9aVdD

https://t.co/aUUtNZBbKa

#MISP #threatintel #sharingiscaring

www.misp-project.org

MISP 2.4.106 released (aka Too many improvements)

A new version of MISP (2.4.106) has been released with a host of improvements, including new features such as a feed cache search, CLI tools to manage your M...

567 views09:10

Information Security (SOC)

[Important]
An unpatched arbitrary file upload #vulnerability in a popular #WordPress WooCommerce extension—WooCommerce Checkout Manager—has been disclosed publicly that could allow unauthenticated attackers to compromise more than 60,000 e-Commerce sites

https://t.co/nSCJYoGFLg

The Hacker News — Cyber Security and Hacking News Website

Critical Unpatched Flaw Disclosed in WordPress WooCommerce Extension

Critical Unpatched Flaw Disclosed in a Popular WordPress WooCommerce Extension Called WooCommerce Checkout Manager

637 viewsedited 16:13

Information Security (SOC)

Forwarded from Information Security (SOC)

👇👇👇👇👇👇
#آگهی_استخدام؛
شرکت زیرساخت امن خدمات تراکنشی وابسته به بانک ملت در تخصص های ذیل از کارشناسان و متخصصان حوزه امنیت اطلاعات دعوت به همکاری می نماید.

👈رده شغلی : کارشناس مرکز عملیات امنیت

👈سابقه مرتبط: 2 سال

👈جنسیت: آقا

👈تجارب و تخصص‌های مرتبط مورد نیاز:
• آشنایی با محصولات امنیتی فایروال،IPS/IDS
• آشنایی با انواع لاگ های سیستمی
• توانایی کار بصورت گروهی و شیفت کار
• تسلط به مباحث امنیت اطلاعات
• آشنا با کارکرد SIEM و محصولات تحلیل رخداد
• دارای مدرک CEH و Security+

جهت کسب اطلاعات بیشتر و ارسال رزومه به سایت:
http://sits-co.com

و یا رزومه خود را به ایمیل زیر با درج عنوان شغل در subject، ارسال نمایند(مهلت ارسال تا ۹۸/۰۲/۱۵).
hrm@sits-co.com

80 views18:12

Information Security (SOC)

07:10

Information Security (SOC)

Hacker wipes Git repositories and asks for Bitcoin. Gives victim 10 days and threatens to release the code. 27 cases (and counting) reported already.

https://t.co/0qzgLRBVIx

ZDNet

A hacker is wiping Git repositories and asking for a ransom

Hacker threatens to release the code if victims don't pay in 10 days.

865 views02:46

Information Security (SOC)

Git targeted scans by unique source IP, year-to-date:
https://t.co/f3NcpjjQLO

Pastebin

Git targeted scans YTD - Pastebin.com

Pastebin.com is the number one paste tool since 2002. Pastebin is a website where you can store text online for a set period of time.

851 views02:47

Information Security (SOC)

Forwarded from Information Security (SOC)

327 views07:48

Information Security (SOC)

07:48

Information Security (SOC)

‏خدا به موسی(ع) گفت:قحطی خواهد آمد، به قومت بگو آماده شوند!

موسی(ع) به قومش گفت، و مردم از دیوارخانه ها راهی ایجاد کردند که در هنگام سختی به داد هم برسندتا قحطی بگذرد!

مدتی گذشت اما قحطی نیامد،موسی(ع) علت را از خدا پرسید خدا به او گفت: قوم تو به هم رحم کردند، من چگونه رحم نکنم؟!

به همدیگر رحم کنیم.
#بخشش_را_فراموش_نکنیم

1.11K viewsedited 05:24

Information Security (SOC)

Cisco Releases Security Update for Elastic Services Controller https://t.co/EMKdSOdXa0 #cyber #cybersecurity #infosec

www.us-cert.gov

Cisco Releases Security Update for Elastic Services Controller | US-CERT

Cisco has released a security update to address a vulnerability in Cisco Elastic Services Controller. A remote attacker could exploit this vulnerability to take control of an affected system.The Cybersecurity and Infrastructure Security Agency (CISA) encourages…

1.28K views05:27

Information Security (SOC)

Drupal Releases Security Update https://t.co/X2KY3dpBsl #cyber #cybersecurity #infosec

www.us-cert.gov

Drupal Releases Security Update | US-CERT

Drupal has released a security update to address a vulnerability in Drupal Core. A remote attacker could exploit this vulnerability to take control of an affected website.The Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators…

1.57K views22:42

Information Security (SOC)

ElasticSearch database exposed 4 Billion Records of transportation vehicle data. This data include real-time tracking information such as speed, geo coordinates, and terminal information.
https://t.co/jmjDKWVACT

Medium

More Than 4 Billions of Record Exposed from an Unknown Elastic Search Database

Brief:More Than 4 Billions of Record Exposed from an Unknown Elastic Search Database

1.5K views05:45

Information Security (SOC)

⚠️Buffer overflow in sudo (linux utility) - ❗️ affects most distributions/versions - CVE-2021-3156
While a local user is required to exploit this vulnerability, even the account 'nobody' can exploit this vulnerability. An unprivileged user can gain root privileges on affected hosts!

Check if you are affected!
To check if you are affected, run sudoedit -s / as non-root user. If the response is sudoedit: your system is vulnerable.

The following "sudo" versions are vulnerable
* All legacy versions from 1.8.2 to 1.8.31p2
* All stable versions from 1.9.0 to 1.9.5p1

Severity: 🔸High

Additional information
https://yt.gl/sudobufferoverflow

#alert #severityHigh #vulnerability #linux #sudo

Qualys

Sudo Vulnerability CVE-2021-3156: Root Access Risk | Qualys

CVE-2021-3156 in Sudo (Baron Samedit) lets unprivileged users escalate privileges. Understand the technical details and recommended solutions for mitigation.

746 views10:12

About

Blog

Apps

Platform