3490 matches found
10 Non-tech things you wish you had done after being breached
TL;DR Non-tech aspects to breach follow-up are often overlooked but essential NDAs, supply chain, and third party contracts and obligations should be reviewed Reviewing communication protocols and employee training increases resilience Looking after, and retaining your people improves recovery fo...
CVE-2024-41763
creationtimestamp| type| source ---|---|--- 2025-01-04 14:42:21+00:00| seen| https://infosec.exchange/users/cve/statuses/113770603369270865 2025-01-04 15:15:32+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lewfirehej2m 2025-01-04 17:16:05+00:00| seen|...
PT-2025-1978 · Kentico · Kentico Cms
Name of the Vulnerable Software and Affected Versions: Kentico CMS version 7 Description: The issue is a Reflected XSS attack that occurs through the manipulation of a specific GET request parameter sent to the "/CMSMessages/AccessDenied.aspx" endpoint. Support for Kentico CMS version 7 ended in...
When Good Extensions Go Bad: Takeaways from the Campaign Targeting Browser Extensions
News has been making headlines over the weekend of the extensive attack campaign targeting browser extensions and injecting them with malicious code to steal user credentials. Currently, over 25 extensions, with an install base of over two million users, have been found to be compromised, and...
CVE-2024-6914
creationtimestamp| type| source ---|---|--- 2024-12-30 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1740/ 2025-05-22 20:55:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpryt6jtjv27...
GHSA-3PFM-HP96-PFGV
creationtimestamp| type| source ---|---|--- 2024-12-19 18:44:21+00:00| seen| https://infosec.exchange/users/cve/statuses/113680964695610869...
Ossur Mobile Logic Application
RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker unauthorized access to sensitive information. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities, such as: Minimize network...
Hitachi Energy RTU500 series CMU
RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to cause a denial-of-service condition. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. CISA reminds organizations to perform...
Steps to TruRisk—Insight to Action with VMDR
Shifting from Vulnerability Management to Business-Focused Risk Reduction In cybersecurity, numbers can be deceptive. The sheer volume of vulnerabilities does not equate to risk. Instead, resilience depends on understanding which vulnerabilities pose the greatest threat to your business—and actin...
CVE-2024-53241
In the Linux kernel, the following vulnerability has been resolved: x86/xen: don't do PV iret hypercall through hypercall page Instead of jumping to the Xen hypercall page for doing the iret hypercall, directly code the required sequence in xen-asm.S. This is done in preparation of no longer usin...
CISA and ONCD Release Playbook for Strengthening Cybersecurity in Federal Grant Programs for Critical Infrastructure
Today, CISA and the Office of the National Cyber Director ONCD published Playbook for Strengthening Cybersecurity in Federal Grant Programs for Critical Infrastructure to assist grant-making agencies to incorporate cybersecurity into their grant programs and assist grant-recipients to build cyber...
CISA Issues BOD 25-01, Implementing Secure Practices for Cloud Services
Today, CISA issued Binding Operational Directive BOD 25-01, Implementing Secure Practices for Cloud Services to safeguard federal information and information systems. This Directive requires federal civilian agencies to identify specific cloud tenants, implement assessment tools, and align cloud...
CISCO-SA-20190501-FABRIC
creationtimestamp| type| source ---|---|--- 2024-12-17 06:41:53+00:00| seen| https://social.circl.lu/users/vulnerabilitylookup/statuses/113666794783383554...
CISCO-SA-20181017-SM
creationtimestamp| type| source ---|---|--- 2024-12-17 06:41:30+00:00| seen| https://social.circl.lu/users/vulnerabilitylookup/statuses/113666793178357329...
CISCO-SA-20190605-ECE
creationtimestamp| type| source ---|---|--- 2024-12-17 06:41:27+00:00| seen| https://social.circl.lu/users/vulnerabilitylookup/statuses/113666793090941495...
CISCO-SA-20190123-RV
creationtimestamp| type| source ---|---|--- 2024-12-17 06:41:03+00:00| seen| https://social.circl.lu/users/vulnerabilitylookup/statuses/113666792924025627...
Siemens User Management Component
SUMMARY Siemens User Management Component UMC is affected by a heap-based buffer overflow vulnerability which could allow an unauthenticated remote attacker arbitrary code execution. Siemens has released new versions for several affected products and recommends to update to the latest versions...
Debian: Security Advisory (DSA-5829-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
XWiki allows remote code execution through the extension sheet
Impact On instances where Extension Repository Application is installed, any user can execute any code requiring programming rights on the server. In order to reproduce on an instance, as a normal user without script nor programming rights, go to your profile and add an object of type...
