Hacking on Medium
Cybercrime and Civil Liability in a Digital World

https://cdn-images-1.medium.com/max/2600/1*RXdvm1LcnAuF0YPZTt-V9A.jpeg
The internet has become an integral component of our personal and professional lives. The online world offers us a plethora of options and…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How I learned Hacking as a teenager!

https://cdn-images-1.medium.com/max/960/0*V8v79br8_L_zTUWm
Everyone loves a refreshing coca-cola after their lunch but there is also a certain group who loves coca-cola and black hoodies. Before I…

Continue reading on CodeX »

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
How Routine Pen Testing Can Reveal the Unseen Flaws in Your Cybersecurity Posture

Testing is an ongoing mission, not a one-and-done fix.

Dark Reading: Attacks/Breaches
Google Forks Over $391.5M in Record-Setting US Consumer Privacy Settlement

A misleading location-tracking practice ensnared the search-engine giant in massive privacy case spanning 40 states.

P1 Bug Bounties: What is an IDOR, and how does IDOR == $$$?
https://medium.com/the-gray-area/p1-bug-bounties-what-is-an-idor-and-how-does-idor-63fc72c371c8?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

TL;DR- A brief post about what an IDOR is, and what they mean to the bug-hunting world.Continue reading on The Gray Area » (https://medium.com/the-gray-area/p1-bug-bounties-what-is-an-idor-and-how-does-idor-63fc72c371c8?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Yakima Neighborhood Health Services Notice of Data Security Incident

.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Red Canary Provides First-Ever MITRE Engenuity™ ATT&CK® Evaluations for Managed Services

.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Evolving Security for Government Multiclouds

As the threat landscape increases, public cloud security needs to evolve.

Dark Reading: Attacks/Breaches
44% of Financial Institutions Believe Their Own IT Teams Are the Main Risk to Cloud Security

Only 30% of respondents from other industries are as concerned about the risks associated with their IT staff.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Authomize Launches Identity Threat Detection and Response Platform to Protect Against Identity-Based Attacks

.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Neosec Introduces Automated Tokenization to Enable Full API Visibility Without Exposure of Sensitive Data

API discovery and threat-monitoring solution tokenizes API data at its source for secure behavioral analytics, storage, compliance, and investigations.

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Balbix Announces Cybersecurity Posture Automation Support for Google Cloud Platform

Extends cyber asset attack surface management solution to multi-cloud environments,

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
BMC Remedy ITSM-Suite 9.1.10 / 20.02 HTML Injection

https://4.bp.blogspot.com/-zX4owX_f6gA/WWlvEjBsFTI/AAAAAAAAILA/L-jpFLkKi_AyIykovxrESAdO3HPxIIp7QCLcBGAs/s1600/h132.png
BMC Remedy ITSM-Suite version 9.1.10 (20.02 in new versioning scheme) suffers from an html injection vulnerability.

SHA-256 | ed89f3f49d37ea4299f6f6221ace6ef8292ada73199f9aac17bae7cf6165fad3

Download
SEC Consult Vulnerability Lab Security Advisory < 20221110-0 >
=======================================================================
title: HTML Injection
product: BMC Remedy ITSM-Suite
vulnerable version: 9.1.10 (= 20.02 in new versioning scheme)
fixed version: 22.1
CVE number: CVE-2022-26088
impact: Low
homepage: https://www.bmc.com/it-solutions/remedy-itsm.html
found: 2021-08-11
by: Daniel Hirschberger (Office Bochum)
SEC Consult Vulnerability Lab

An integrated part of SEC Consult, an Atos company
Europe | Asia | North America

https://www.sec-consult.com

=======================================================================

Vendor description:
-------------------
"Remedy IT Service Management Suite (Remedy ITSM Suite) and BMC Helix
ITSM service provide out of-the-box IT Information Library (ITIL)
service support functionality. Remedy ITSM Suite and BMC Helix ITSM
service streamline and automate the processes around IT service desk,
asset management, and change management operations. It also enables
you to link your business services to your IT infrastructure to help
you manage the impact of technology changes on business and business
changes on technology — in real time and into the future. In addition,
you can understand and optimize the user experience, balance current
and future infrastructure investments, and view potential impact on
the business by using a real-time service model."

Source: https://docs.bmc.com/docs/itsm91/home-608490971.html
Business recommendation:
------------------------
The vendor provides an updated version which should be installed immediately.

The vendor states that:
> We have done hardening in version 22.1.
> However, we do not agree with assigning the CVE to this vulnerability.
> As mentioned previously this is an informative vulnerability, and no real
impact is demonstrated.
Nevertheless, this can be used to trigger actions on internal services via CSRF or
exfiltrate information.
Vulnerability overview/description:
-----------------------------------
1) HTML Injection (CVE-2022-26088)
An authenticated attacker who can forward incidents per email is able to inject
a limited set of HTML tags. This is accomplished by inserting arbitrary content
into the "To:" field of the email. There is a filtering mechanism that prevents
the injection of many HTML tags, for example
➖ Sent by @TheFeedReaderBot ➖

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
VMware NSX Manager XStream Unauthenticated Remote Code Execution

___________________________
@hacking_Attack
@Hacking_Video