Important Photon OS Security Update - PHSA-2019-0039

Updates of 'python3', 'python2', 'wpasupplicant', 'linux-esx', 'linux', 'linux-secure', 'linux-aws' packages of Photon OS have been released...

7 Courses That Will Help You Start a Lucrative Career in Information Security

As the world becomes more interconnected by the day, more and more companies of all sizes and industries are finding themselves under attack by fearless cybercriminals who can access their entire server farms from across the globe with only a few lines of code. And it's not just private...

Visit Akamai at AWS re:Invent 2019

From December 2-6, the Las Vegas Strip will be jam-packed with tens of thousands of developers, engineers, admins, architects, and other technologists for AWS re:Invent, the annual learning conference hosted by Amazon Web Services for the global cloud computing community. Akamai is excited to be ...

USN-4186-1: Linux kernel vulnerabilities

Stephan van Schaik, Alyssa Milburn, Sebastian Österlund, Pietro Frigo, Kaveh Razavi, Herbert Bos, Cristiano Giuffrida, Giorgi Maisuradze, Moritz Lipp, Michael Schwarz, Daniel Gruss, and Jo Van Bulck discovered that Intel processors using Transactional Synchronization Extensions TSX could expose...

USN-4184-1: Linux kernel vulnerabilities

Stephan van Schaik, Alyssa Milburn, Sebastian Österlund, Pietro Frigo, Kaveh Razavi, Herbert Bos, Cristiano Giuffrida, Giorgi Maisuradze, Moritz Lipp, Michael Schwarz, Daniel Gruss, and Jo Van Bulck discovered that Intel processors using Transactional Synchronization Extensions TSX could expose...

awswwweu.msgapp.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-1015370 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

fqhlu0rq5i.execute-api.us-east-1.amazonaws.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-1015341 Security Researcher 41PH4 Helped patch 18 vulnerabilities Received 1 Coordinated Disclosure badges , a holder of 1 badges for responsible and coordinated disclosure, found a security vulnerability affecting fqhlu0rq5i.execute-api.us-east-1.amazonaws.com website and...

October Release: Q&A with Ari Weil

Shortly after Akamai announced the October 2019 Release with new features and capabilities across its security, performance and media product lines, Akamai's VP of Product Marketing, Ari Weil, took over Akamai's Twitter account for a live October Release Q&A. For those that missed the live event,...

com.treelogic-swe:aws-mock (=1.0), com.treelogic-swe:cxf-stub (=ec2-2013-02-01) potentially affected by CVE-2019-12406 via org.apache.cxf:apache-cxf (=2.7.5)

org.apache.cxf:apache-cxf MAVEN version =2.7.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:apache-cxf and may be impacted: - com.treelogic-swe:aws-mock =1.0 - com.treelogic-swe:cxf-stub =ec2-2013-02-01 Source cves: CVE-2019-12406...

CVE-2019-19781

An issue was discovered in Citrix Application Delivery Controller ADC and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. They allow Directory Traversal. Recent assessments: kevthehermit at February 22, 2020 12:29am UTC reported: AWS had pre built AMIs for these appliances built and supplied to the...

Is AWS Liable in Capital One Breach?

Amazon is at least partly blame for the massive 2019 Capital One breach that impacted more than 100 million customers, senators are alleging. Security researchers however are of two minds. In a letter to the Federal Trade Commission FTC this week, U.S. senators Ron Wyden D-Ore. and Elizabeth Warr...

Critical Photon OS Security Update - PHSA-2019-3.0-0036

Updates of 'dbus', 'sqlite', 'linux', 'linux-secure', 'python3', 'sysstat', 'gdb', 'libgcrypt', 'oniguruma', 'etcd', 'linux-esx', 'lua', 'polkit', 'u-boot', 'systemd', 'linux-aws', 'rsyslog', 'git' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2019-0036

Updates of 'sysstat', 'gdb', 'rsyslog', 'polkit', 'sqlite', 'dbus', 'python3', 'etcd', 'lua', 'u-boot', 'libgcrypt', 'git', 'linux-esx', 'systemd', 'linux', 'linux-secure', 'linux-aws', 'oniguruma' packages of Photon OS have been released...

USN-4163-1: Linux kernel vulnerabilities

It was discovered that a race condition existed in the ARC EMAC ethernet driver for the Linux kernel, resulting in a use-after-free vulnerability. An attacker could use this to cause a denial of service system crash. CVE-2016-10906 It was discovered that a race condition existed in the Serial...

ec2-18-221-234-206.us-east-2.compute.amazonaws.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-1000158 Security Researcher Gh05tPT Helped patch 6901 vulnerabilities Received 10 Coordinated Disclosure badges Received 48 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting...

Information Disclosure

ansible is vulnerable to information disclosure. The boto3 library logs credentials at log level DEBUG. This causes several ansible plugins to disclose AWS credentials in log files...

This Week in Security News: Trend Micro Launches its XDR Center in India and EU Reports 5G Cybersecurity Risks

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, learn about Trend Micro’s new XDR Center in India that will help solve data sovereignty issues. Also, read about 5G network software use bei...

Starbucks: JumpCloud API Key leaked via Open Github Repository.

Summary: Open Github Repo Leaking Starbucks JumbCloud API Key Description: Team, While going through Github search I discovered a public repository which contains Jumbcloud API Key of Starbucks. Repo: https://github.com/██████████/Project. File:...

Critical Photon OS Security Update - PHSA-2019-3.0-0034

Updates of 'linux', 'libpcap', 'linux-secure', 'linux-esx', 'tcpdump', 'linux-aws', 'rsyslog', 'yarn' packages of Photon OS have been released...

ec2-34-212-191-212.us-west-2.compute.amazonaws.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-994541 Security Researcher Gh05tPT Helped patch 6892 vulnerabilities Received 10 Coordinated Disclosure badges Received 48 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting...