5133 matches found
The State of Cloud & SaaS Security: Essential Statistics and Insights
Twenty-eight percent of organizations experienced a cloud- or SaaS-related data breach in the past year—meaning more than 1 in 4 enterprises were impacted. Even more alarming, 36% of those affected faced multiple breaches within a single year. This is just one of many cloud security pain points...
AI Adoption in the Enterprise: Breaking Through the Security and Compliance Gridlock
AI holds the promise to revolutionize all sectors of enterpriseーfrom fraud detection and content personalization to customer service and security operations. Yet, despite its potential, implementation often stalls behind a wall of security, legal, and compliance hurdles. Imagine this...
[SECURITY] Fedora 40 Update: firefox-137.0-2.fc40
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...
Helping Your Clients Achieve NIST Compliance: A Step by Step Guide for Service Providers
Introduction As the cybersecurity landscape evolves, service providers play an increasingly vital role in safeguarding sensitive data and maintaining compliance with industry regulations. The National Institute of Standards and Technology NIST offers a comprehensive set of frameworks that provide...
Best Data Anonymization Tools in 2025
Top Data Anonymization Tools of 2025 to protect sensitive information, ensure compliance, and maintain performance across industries...
USN-7392-4: Linux kernel (AWS FIPS) vulnerabilities
Chenyuan Yang discovered that the CEC driver driver in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2024-23848 Attila Szász discovered that the HFS+ file system...
Medium: python3
Issue Overview: Directory traversal vulnerability in the 1 extract and 2 extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. dot dot sequence in filenames in a TAR archive, a related issue to CVE-2001-1267. CVE-2007-4559...
EulerOS 2.0 SP13 : python3 (EulerOS-SA-2025-1340)
According to the versions of the python3 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : The urllib.parse.urlsplit and urlparse functions improperly validated bracketed hosts , allowing hosts that weren't IPv6 or IPvFuture. This...
CGA-Q4FC-47CM-PG7P
Bulletin has no description...
CGA-QRMP-8336-4Q77
Bulletin has no description...
CGA-5XP4-H25F-X85C
Bulletin has no description...
CGA-RCP4-WG9V-48HW
Bulletin has no description...
CGA-5CFW-5G8F-48MW
Bulletin has no description...
CGA-4473-6F83-QM28
Bulletin has no description...
CGA-P2M5-883M-9749
Bulletin has no description...
CGA-3PWM-F94P-FPPG
Bulletin has no description...
Amazon Linux 2023 : python3, python3-devel, python3-idle (ALAS2023-2025-898)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-898 advisory. The Python standard library functions urllib.parse.urlsplit and urlparse accepted domain names that included square brackets which isn't valid according to RFC 3986. Square brackets are only meant to be...
USN-7387-2: Linux kernel (FIPS) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - MIPS architecture; - PowerPC architecture; - RISC-V architecture; - S390 architecture; - Supe...
To Meet Compliance Challenges, Focus on Building Great Security
...
Medium: python3.12
Issue Overview: The Python standard library functions urllib.parse.urlsplit and urlparse accepted domain names that included square brackets which isn't valid according to RFC 3986. Square brackets are only meant to be used as delimiters for specifying IPv6 and IPvFuture hosts in URLs. This could...