5034 matches found
Upcoming Speaking Engagements
This is a current list of where and when I am scheduled to speak: Im speaking as part of a Geneva Centre for Security Policy course on Cyber Security in the Context of International Security, online, on September 22, 2022. Im speaking at IT-Security INSIDE 2022 in Zurich, Switzerland, on Septembe...
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise. Note: to view the newly adde...
mgpservices.com.au Cross Site Scripting vulnerability OBB-2834492
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise. Note: to view the newly adde...
CVE-2022-34993
creationtimestamp| type| source ---|---|--- 2022-08-04 22:20:00+00:00| seen| https://t.me/cibsecurity/47579...
CVE-2022-32455
creationtimestamp| type| source ---|---|--- 2022-08-04 22:19:56+00:00| seen| https://t.me/cibsecurity/47576...
CVE-2022-35506
creationtimestamp| type| source ---|---|--- 2022-08-04 00:23:22+00:00| seen| https://t.me/cibsecurity/47516...
CISA Adds One Known Exploited Vulnerability to Catalog
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise. Note: to view the newly added...
CVE-2022-23003
creationtimestamp| type| source ---|---|--- 2022-07-29 22:13:50+00:00| seen| https://t.me/cibsecurity/47284...
Transposh WordPress Translation 1.0.8.1 Remote Code Execution
RCE Security Advisory https://www.rcesecurity.com 1. ADVISORY INFORMATION ======================= Product: Transposh WordPress Translation Vendor URL: https://wordpress.org/plugins/transposh-translation-filter-for-wordpress/ Type: Reliance on File Name or Extension of Externally-Supplied File...
CISA Adds One Known Exploited Vulnerability to Catalog
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise. Note: To view the newly added...
CVE-2022-30270
The ACE1000 RTU (Motorola Solutions) is affected by CVE-2022-30270 due to hard-coded default SSH credentials for five accounts (root, abuilder, acelogin, cappl, ace) used to control SSH on port 22. This enables remote maintenance access and SFTP operations, with documented accounts some not being...
ICONICS Suite and Mitsubishi Electric MC Works64 Products (Update C)
1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Low attack complexity Vendors: ICONICS, Mitsubishi Electric Equipment: ICONICS Product Suite, MC Works64 Vulnerabilities: Path Traversal, Deserialization of Untrusted Data, Inclusion of Functionality from Untrusted Control Sphere, Out-of-Bounds Read 2...
Threat Roundup for July 15 to July 22
Today, Talos is publishing a glimpse into the most prevalent threats we've observed between July 15 and July 22. As with previous roundups, this post isn't meant to be an in-depth analysis. Instead, this post will summarize the threats we've observed by highlighting key behavioral characteristics...
CVE-2022-34853
creationtimestamp| type| source ---|---|--- 2022-07-22 20:23:46+00:00| seen| https://t.me/cibsecurity/46838...
CVE-2022-33191
creationtimestamp| type| source ---|---|--- 2022-07-22 20:23:45+00:00| seen| https://t.me/cibsecurity/46837...
CVE-2022-2510
creationtimestamp| type| source ---|---|--- 2022-07-22 20:23:40+00:00| seen| Telegram/wg1u1pn7n5rE0RYBQL1GqqG7dVDLPqmhykVAxSUB9in9k...
CVE-2022-2511
creationtimestamp| type| source ---|---|--- 2022-07-22 20:23:39+00:00| seen| https://t.me/cibsecurity/46832...