2022, Blog and Information Security - Information Management Today

Apr 03 – Apr 09 Ukraine – Russia the silent cyber conflict

Security Affairs

APRIL 10, 2022

Please vote for Security Affairs as the best European Cybersecurity Blogger Awards 2022 – VOTE FOR YOUR WINNERS Vote for me in the sections “The Underdogs – Best Personal (non-commercial) Security Blog” and “The Tech Whizz – Best Technical Blog” and others of your choice.

Military

Military Phishing Cybersecurity Government

Experts released PoC exploit code for critical VMware CVE-2022-22972 flaw

Security Affairs

MAY 26, 2022

Security researchers released PoC exploit code for the critical authentication bypass vulnerability CVE-2022-22972 affecting multiple VMware products. The virtualization giant recently warned that a threat actor can exploit the CVE-2022-22972 flaw (CVSSv3 base score of 9.8) using CVE-2022-22972. states VMware.

Authentication

Authentication Cybersecurity Access Education

CISA orders federal agencies to fix VMware CVE-2022-22972 and CVE-2022-22973 flaws

Security Affairs

MAY 18, 2022

CISA orders federal agencies to fix VMware CVE-2022-22972 and CVE-2022-22973 vulnerabilities by May 23, 2022. The virtualization giant warns that a threat actor can exploit the flaw, tracked as CVE-2022-22972 (CVSSv3 base score of 9.8), to obtain admin privileges and urges customers to install patches immediately.

Cybersecurity

Cybersecurity Access Cloud Security

Webinars

Generative AI Deep Dive: Advancing from Proof of Concept to Production

MORE WEBINARS

EnemyBot malware adds new exploits to target CMS servers and Android devices

Security Affairs

MAY 30, 2022

CVE Number Affected devices CVE-2021-44228, CVE-2021-45046 Log4J RCE CVE-2022-1388 F5 BIG IP RCE No CVE (vulnerability published on 2022-02) Adobe ColdFusion 11 RCE CVE-2020-7961 Liferay Portal – Java Unmarshalling via JSONWS RCE No CVE (vulnerability published on 2022-04) PHP Scriptcase 9.7

CMS

CMS IoT Passwords Security

Google fixed the second actively exploited Chrome zero-day of 2023

Security Affairs

APRIL 19, 2023

Reported by Rong Jian of VRI on 2023-03-30 [$8000][ 1429201 ] High CVE-2023-2134: Out of bounds memory access in Service Worker API. Reported by Rong Jian of VRI on 2023-03-30 [$3000][ 1424337 ] High CVE-2023-2135: Use after free in DevTools.

Libraries

Libraries Education Access Cybersecurity

Dirty Pipe Linux flaw allows gaining root privileges on major distros

Security Affairs

MARCH 7, 2022

Dirty Pipe is a Linux vulnerability, tracked as CVE-2022-0847, that can allow local users to gain root privileges on all major distros. Security expert Max Kellermann discovered a Linux flaw, dubbed Dirty Pipe and tracked as CVE-2022-0847, that can allow local users to gain root privileges on all major distros.

Passwords

Passwords Access Security IT

Security Affairs newsletter Round 361 by Pierluigi Paganini

Security Affairs

APRIL 17, 2022

Please vote for Security Affairs as the best European Cybersecurity Blogger Awards 2022 – VOTE FOR YOUR WINNERS Vote for me in the sections “The Underdogs – Best Personal (non-commercial) Security Blog” and “The Tech Whizz – Best Technical Blog” and others of your choice.

Security

Security Ransomware Data breaches Cybersecurity

Argo CD flaw could allow stealing sensitive data from Kubernetes Apps

Security Affairs

FEBRUARY 6, 2022

A zero-day vulnerability, tracked as CVE-2022-24348, in the Argo CD tool for Kubernetes could be exploited by attackers to steal sensi tive data from Kubernetes Apps , including passwords and API keys. The post Argo CD flaw could allow stealing sensitive data from Kubernetes Apps appeared first on Security Affairs. and 2.1.9. .”

Encryption

Encryption Passwords Access Security

Apr 17 – Apr 23 Ukraine – Russia the silent cyber conflict

Security Affairs

APRIL 24, 2022

Apr 03 – Apr 09 Ukraine – Russia the silent cyber conflict. The post Apr 17 – Apr 23 Ukraine – Russia the silent cyber conflict appeared first on Security Affairs. Mar 27 – Apr 02 Ukraine – Russia the silent cyber conflict. Apr 10 – Apr 16 Ukraine – Russia the silent cyber conflict. To nominate, please visit:?

Phishing

Phishing Cybersecurity Security Information Security

Shopping trap: The online stores’ scam that hits users worldwide?

Security Affairs

MARCH 28, 2022

Malicious schemas linked to online stores are on the rise in 2022. The campaign has been active since late 2020 but gained momentum in early 2022, with thousands of victims affected. Active domains behind the malicious online stores at the time of analysis (21-03-2022).

CMS

CMS Communications Passwords Information Security

May 01 – May 07 Ukraine – Russia the silent cyber conflict

Security Affairs

MAY 8, 2022

Apr 03 – Apr 09 Ukraine – Russia the silent cyber conflict. Mar 27 – Apr 02 Ukraine – Russia the silent cyber conflict. Apr 10 – Apr 16 Ukraine – Russia the silent cyber conflict. Apr 17 – Apr 23 Ukraine – Russia the silent cyber conflict. Apr 24 – Apr 30 Ukraine – Russia the silent cyber conflict. To nominate, please visit:?

Cybersecurity

Cybersecurity Government Security IT

Russian cybercrime group likely behind ongoing exploitation of PaperCut flaws

Security Affairs

APRIL 24, 2023

“PaperCut received our first report from a customer of suspicious activity on their PaperCut server on the 18th April at 03:30 AEST / 17th April 17:30 UTC. .” reads the advisory published by PaperCut. ” The CVE-2023-27350 (CVSS score – 9.8) is a PaperCut MF/NG Improper Access Control Vulnerability.

Cybersecurity

Cybersecurity Ransomware Education Authentication

Apr 24 – Apr 30 Ukraine – Russia the silent cyber conflict

Security Affairs

MAY 1, 2022

Apr 03 – Apr 09 Ukraine – Russia the silent cyber conflict. The post Apr 24 – Apr 30 Ukraine – Russia the silent cyber conflict appeared first on Security Affairs. Mar 27 – Apr 02 Ukraine – Russia the silent cyber conflict. Apr 10 – Apr 16 Ukraine – Russia the silent cyber conflict. To nominate, please visit:?

Government

Government Cybersecurity Security Information Security

Apr 10 – Apr 16 Ukraine – Russia the silent cyber conflict

Security Affairs

APRIL 18, 2022

Apr 03 – Apr 09 Ukraine – Russia the silent cyber conflict. Mar 27 – Apr 02 Ukraine – Russia the silent cyber conflict.

Ransomware

Ransomware Phishing Cybersecurity Government

May 08 – May 14 Ukraine – Russia the silent cyber conflict

Security Affairs

MAY 15, 2022

Apr 03 – Apr 09 Ukraine – Russia the silent cyber conflict. Mar 27 – Apr 02 Ukraine – Russia the silent cyber conflict. Apr 10 – Apr 16 Ukraine – Russia the silent cyber conflict. Apr 17 – Apr 23 Ukraine – Russia the silent cyber conflict. Apr 24 – Apr 30 Ukraine – Russia the silent cyber conflict. To nominate, please visit:?

Government

Government Cybersecurity Security Information Security

Experts released PoC Exploit code for actively exploited PaperCut flaw

Security Affairs

APRIL 24, 2023

“PaperCut received our first report from a customer of suspicious activity on their PaperCut server on the 18th April at 03:30 AEST / 17th April 17:30 UTC. .” reads the advisory published by PaperCut. ” The CVE-2023-27350 (CVSS score – 9.8) is a PaperCut MF/NG Improper Access Control Vulnerability.

Authentication

Authentication Cybersecurity Education Access

A critical RCE flaw in Horde Webmail has yet to be addressed

Security Affairs

JUNE 1, 2022

Researchers from SonarSource discovered a remote code execution vulnerability (CVE-2022-30287) in the open-source Horde Webmail client. Below is the timeline for this flaw that has yet to be addressed: Date Action 2022-02-02 We report the issue to the vendor and inform about our 90 disclosure policy 2022-02-17 We ask for a status update.

Authentication

Authentication Passwords Cybersecurity Security

Information Management Today

Apr 03 – Apr 09 Ukraine – Russia the silent cyber conflict

Experts released PoC exploit code for critical VMware CVE-2022-22972 flaw

Webinars

Trending Sources

CISA orders federal agencies to fix VMware CVE-2022-22972 and CVE-2022-22973 flaws

Webinars

EnemyBot malware adds new exploits to target CMS servers and Android devices

Google fixed the second actively exploited Chrome zero-day of 2023

Dirty Pipe Linux flaw allows gaining root privileges on major distros

Security Affairs newsletter Round 361 by Pierluigi Paganini

Argo CD flaw could allow stealing sensitive data from Kubernetes Apps

Apr 17 – Apr 23 Ukraine – Russia the silent cyber conflict

Shopping trap: The online stores’ scam that hits users worldwide?

May 01 – May 07 Ukraine – Russia the silent cyber conflict

Russian cybercrime group likely behind ongoing exploitation of PaperCut flaws

Apr 24 – Apr 30 Ukraine – Russia the silent cyber conflict

Apr 10 – Apr 16 Ukraine – Russia the silent cyber conflict

May 08 – May 14 Ukraine – Russia the silent cyber conflict

Experts released PoC Exploit code for actively exploited PaperCut flaw

A critical RCE flaw in Horde Webmail has yet to be addressed

Stay Connected