4652 matches found
Enhancing Security Operations Using Wazuh: Open Source XDR and SIEM
In today's interconnected world, evolving security solutions to meet growing demand is more critical than ever. Collaboration across multiple solutions for intelligence gathering and information sharing is indispensable. The idea of multiple-source intelligence gathering stems from the concept th...
GDPR Cookie Compliance < 4.12.5 - License Update/Deactivation via CSRF
Description The plugin does not have proper CSRF checks when managing its license, which could allow attackers to make logged in admins update and deactivate the plugin's license via CSRF attacks Make a logged in admin open a page with the code below To make them deactivate the license To make th...
Fedora: Security Advisory for firefox (FEDORA-2023-a4e8720e0f)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 37 Update: firefox-116.0-2.fc37
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...
A Penetration Testing Buyer's Guide for IT Security Teams
The frequency and complexity of cyber threats are constantly evolving. At the same time, organizations are now collecting sensitive data that, if compromised, could result in severe financial and reputational damage. According to Cybersecurity Ventures, the cost of cybercrime is predicted to hit ...
[SECURITY] Fedora 38 Update: firefox-116.0-2.fc38
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...
New InsightCloudSec Compliance Pack for CIS AWS Benchmark 2.0.0
The Center for Internet Security CIS recently released version two of their AWS Benchmark. CIS AWS Benchmark 2.0.0 brings two new recommendations and eliminates one from the previous version. The update also includes some minor formatting changes to certain recommendation descriptions. In this...
Moderate: Red Hat Security Advisory: OpenShift sandboxed containers 1.4.1 security update
OpenShift sandboxed containers 1.4.1 is now available. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in t...
CVE-2023-31466
An XSS issue was discovered in FSMLabs TimeKeeper 8.0.17. On the "Configuration - Compliance - Add a new compliance report" and "Configuration - Timekeeper Configuration - Add a new source there" screens, there are entry points to inject JavaScript code...
CVE-2023-31466
An XSS issue was discovered in FSMLabs TimeKeeper 8.0.17. On the "Configuration - Compliance - Add a new compliance report" and "Configuration - Timekeeper Configuration - Add a new source there" screens, there are entry points to inject JavaScript code...
CVE-2023-31466
An XSS issue was discovered in FSMLabs TimeKeeper 8.0.17. On the "Configuration - Compliance - Add a new compliance report" and "Configuration - Timekeeper Configuration - Add a new source there" screens, there are entry points to inject JavaScript code...
New Microsoft identity and data security capabilities to accelerate CMMC compliance for the Defense Industrial Base
As Department of Defense DoD Chief Information Officer Hon. John Sherman said recently, Cybersecurity Maturity Model Certification CMMC is necessary to ensure that the United States raises the bar for protecting sensitive information.1 The DoD is leading by example towards this goal by implementi...
2023 OWASP Top-10 Series: Introduction
In early June 2023, OWASP released the final version of the OWASP API Security Top-10 list update. At that time we published a “hot take” on this final version and followed that up with an in-depth look at the new risk ratings for 2023. Today we’re kicking off a multi-post series in which we take...
[SECURITY] Fedora 37 Update: firefox-115.0.2-1.fc37
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...
Fedora: Security Advisory for firefox (FEDORA-2023-d5759f1edb)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Expanding cloud logging to give customers deeper security visibility
In response to the increasing frequency and evolution of nation-state cyberthreats, Microsoft is taking additional steps to protect our customers and increase the secure-by-default baseline of our cloud platforms. These steps are the result of close coordination with commercial and government...
[SECURITY] Fedora 38 Update: firefox-115.0.2-1.fc38
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...
The state of cybersecurity compliance in 2023 – part 1
This first blog in the series captures the key takeaways from Coalfires Annual Compliance Report...
WordPress TK Google Fonts GDPR Compliant Plugin < 2.2.11 is vulnerable to Cross Site Scripting (XSS)
Software TK Google Fonts GDPR Compliant Type Plugin Vulnerable versions 2.2.11 Fixed in 2.2.11 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 33cf3898b186 Credits Rafie Muhammad...