Security Affairs

JANUARY 31, 2022

“The local file inclusion vulnerability exists due to the way user input data is used inside of PHP’s include function that are part of the ajax_load_more and ajax_eael_product_gallery functions.” This adds more security by making use of PHP’s realpath function. 31-01-2022 – Published the article.

Security 96

Security IT Information Security 96

Security Affairs

JANUARY 9, 2024

Cybersecurity and Infrastructure Security Agency (CISA) adds Apache Superset vulnerability to its Known Exploited Vulnerabilities catalog. Cybersecurity and Infrastructure Security Agency (CISA) added an Apache Superset flaw, tracked as CVE-2023-27524 , to its Known Exploited Vulnerabilities (KEV) catalog.

IT 112

IT Cybersecurity Authentication Ransomware 112

Security Affairs

AUGUST 22, 2024

Cybersecurity and Infrastructure Security Agency (CISA) adds Dahua IP Camera, Linux Kernel and Microsoft Exchange Server bugs to its Known Exploited Vulnerabilities catalog. A remote attacker can exploit both vulnerabilities by sending specially crafted data packets to the vulnerable cameras. The flaw received a CVSS v3 score of 8.1,

IT 86

IT Authentication Cybersecurity Security 86

Thales Cloud Protection & Licensing

JANUARY 17, 2022

It is your data in their cloud, make sure it is secure! Tue, 01/18/2022 - 05:32. It is your data in their cloud after all - and you need to make sure your most valuable assets are secure! Security controls for Cloud Service Providers are notoriously tough to figure out and can be easy to overlook.

Cloud 71

Cloud IT Security Digital transformation 71

Security Affairs

OCTOBER 2, 2022

CISA added a recently disclosed flaw in Atlassian Bitbucket Server, tracked as CVE-2022-36804, to its Known Exploited Vulnerabilities Catalog. This advisory discloses a critical severity security vulnerability which was introduced in version 7.0.0 of Bitbucket Server and Data Center.” of Bitbucket Server and Data Center.”

IT 95

IT Cybersecurity Risk Security 95

Security Affairs

AUGUST 29, 2022

Cybersecurity and Infrastructure Security Agency (CISA) added 10 new flaws to its Known Exploited Vulnerabilities Catalog. Cybersecurity and Infrastructure Security Agency (CISA) added 10 new vulnerabilities to its Known Exploited Vulnerabilities Catalog , including a high-severity security flaw ( CVE-2021-38406 CVSS score: 7.8)

IT 98

IT Authentication Cybersecurity Cloud 98

Security Affairs

FEBRUARY 11, 2022

CISA has added to the catalog of vulnerabilities another 15 security vulnerabilities actively exploited in the wild. The US Cybersecurity & Infrastructure Security Agency (CISA) has added fifteen more flaws to the Known Exploited Vulnerabilities Catalog. ” reads the advisory published by Microsoft.

IT 125

IT IoT Cybersecurity Authentication 125

Security Affairs

MARCH 8, 2023

GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. A proof of concept (PoC) exploit code for this vulnerability was published on GitHub since December 2022. The CVE-2022-33891 flaw is a command injection vulnerability in the Apache Spark.

IoT 98

IoT Cybersecurity Risk IT 98

Security Affairs

JANUARY 23, 2024

Cybersecurity and Infrastructure Security Agency (CISA) adds VMware vCenter Server Out-of-Bounds Write bug to its Known Exploited Vulnerabilities catalog. It serves as a centralized and comprehensive management platform for VMware’s virtualized data centers. In October, VMware addressed the flaw CVE-2023-34048 (CVSS score 9.8).

IT 127

IT Cybersecurity Cloud Security 127

Security Affairs

AUGUST 19, 2022

The US Cybersecurity and Infrastructure Security Agency (CISA) added a critical SAP vulnerability, tracked as CVE-2022-22536 , to its Known Exploited Vulnerabilities Catalog a few days after researchers shared details about the issue at the Black Hat and Def Con hacker conferences. The flaw received a CVSSv3 score of 10.0.

IT 102

IT Communications Paper Risk 102

Security Affairs

JULY 30, 2022

US Critical Infrastructure Security Agency (CISA) adds the critical Confluence flaw, tracked as CVE-2022-26138, to its Known Exploited Vulnerabilities Catalog. Recenlty Atlassian released security updates to address a critical hardcoded credentials vulnerability in Confluence Server and Data Center tracked as CVE-2022-26138.

Passwords 98

Passwords Cloud Cybersecurity Risk 98

Security Affairs

JUNE 2, 2022

The LockBit ransomware gang claimed responsibility for an attack and announced that it will release the stolen data by 11 June, 2022 18:01:00 if the company will not pay the ransom. Security Affairs is one of the finalists for the best European Cybersecurity Blogger Awards 2022 – VOTE FOR YOUR WINNERS.

Ransomware 104

Ransomware Manufacturing Cybersecurity Security 104

Security Affairs

MAY 2, 2023

US Cybersecurity and Infrastructure Security Agency (CISA) added TP-Link, Apache, and Oracle vulnerabilities to its Known Exploited Vulnerabilities catalog. The vulnerability was first reported to ZDI during the Pwn2Own Toronto 2022 event. in TP-Link Archer AX21 Wi-Fi routers. in TP-Link Archer AX21 Wi-Fi routers.

IT 96

IT Cybersecurity Education Access 96

Security Affairs

MARCH 8, 2022

Cybersecurity and Infrastructure Security Agency (CISA) added recently disclosed Firefox zero-days to its Known Exploited Vulnerabilities Catalog. The US agency has ordered federal civilian agencies to address both issues by March 21, 2022. Yesterday Mozilla has released Firefox 97.0.2, Firefox ESR 91.6.1, Firefox for Android 97.3.0,

Cybersecurity 102

Cybersecurity Authentication Cloud Security 102

Security Affairs

FEBRUARY 11, 2023

US CISA added actively exploited flaws in Fortra MFT, Intel driver, and TerraMaster NAS, respectively tracked as CVE-2023-0669 , CVE-2015-2291 , and CVE-2022-24990 , to its Known Exploited Vulnerabilities Catalog. The CVE-2015-2291 flaw (CVSS v3 score 7.8) sys and IQVW64.sys.

IT 98

IT Ransomware Authentication Access 98

Security Affairs

JANUARY 31, 2022

Researchers from blockchain security firm CertiK speculate that the attackers were able to exploit a security flaw in Qubit’s smart contract code that allowed them to invoke the deposit() function with malicious input data yet actually deposited 0 ETH and withdraw almost $80 million in Binance Coin in return. Pierluigi Paganini.

Blockchain 95

Blockchain Ransomware Security IT 95

Security Affairs

MAY 10, 2022

No to war" pic.twitter.com/P2uCNz8cqa — Francis Scarr (@francis_scarr) May 9, 2022. OpRussia #StandWithUkraine [link] — Anonymous TV (@YourAnonTV) May 9, 2022. appeared first on Security Affairs. TV and the authorities are lying. To nominate, please visit:? Follow me on Twitter: @securityaffairs and Facebook.

Archiving 98

Archiving Access Cybersecurity Security 98

Security Affairs

FEBRUARY 16, 2023

US CISA added the following actively exploited flaws to its Known Exploited Vulnerabilities Catalog : CVE-2022-46169 – Cacti is an open-source platform that provides a robust and extensible operational monitoring and fault management framework for users. CISA orders federal agencies to fix this vulnerability by March 9, 2023.

IT 96

IT Authentication Security Risk 96

Security Affairs

JULY 11, 2022

A large-scale phishing campaign leveraging the Anubis Network is targeting Brazil and Portugal since March 2022. A large-scale phishing campaign is targeting Internet-end users in Brazil and Portugal since March 2022. SMSs are sent based on a list created by the C2 owner, namely: 1kk-rusha-01.txt. The MySQL database.

Phishing 100

Phishing Access Information Security Encryption 100

Security Affairs

MAY 15, 2022

This post provides a timeline of the events related to Russia invasion of Ukraine from the cyber security perspective. Another week has passed and Anonymous has hacked other Russian companies and leaked their data via DDoSecrets. May 01 – May 07 Ukraine – Russia the silent cyber conflict. To nominate, please visit:?

Government 98

Government Cybersecurity Security Information Security 98

Security Affairs

MAY 16, 2023

US Cybersecurity and Infrastructure Security Agency (CISA) added seven new flaws to its Known Exploited Vulnerabilities catalog. It can also be exploited by supplying data to APIs in the specified component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. We are in the final!

IT 95

IT Cybersecurity Communications Security 95

Thales Cloud Protection & Licensing

JANUARY 12, 2022

To Err is Human - Three New Year Resolutions for Securing Critical Data. Thu, 01/13/2022 - 11:20. Today the log4j security exploit will be, and should be, the focus of almost everyone associated with cybersecurity. The target for many of these attacks is your valuable and essential business data.

Security 77

Security Risk Artificial Intelligence Cybersecurity 77