4653 matches found
[SECURITY] Fedora 37 Update: firefox-107.0.1-1.fc37
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...
Fedora: Security Advisory for firefox (FEDORA-2022-b58437c302)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
The Value of Old Systems
Old technology solutions – every organization has a few of them tucked away somewhere. It could be an old and unsupported storage system or a tape library holding the still-functional backups from over 10 years ago. This is a common scenario with software too. For example, consider an accounting...
[SECURITY] Fedora 35 Update: firefox-107.0-4.fc35
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...
Fedora: Security Advisory for firefox (FEDORA-2022-ec48d2c1b4)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Qualys Broadens Security Offerings for Oracle Cloud Infrastructure
As organizations increase their use of public cloud platforms, they encounter cloud-specific security and compliance threats, which can be challenging to address without the right tools and processes. Organizations’ cloud security difficulties lie in two main areas: Lack of visibility into their...
Implementing Zero Trust access to business data on BYOD with Trustd MTD and Microsoft Entra
This blog post is part of the Microsoft Intelligent Security Association guest blog series. Learn more about MISA. As more employees work remotely on a variety of devices and networks, businesses need a security model that supports this new operational efficiency. An expanding perimeter poses...
SUSE-SU-2022:4275-1 Security update for python
This update for python fixes the following issues: - CVE-2022-45061: Fixed a quadratic IDNA decoding time bsc1205244. The following non-security bug was fixed: - Making compileall.py compliant with year 2038, backport of fix to Python 2.7 bsc1202666, ghpython/cpython79171...
smart-compliance.co.uk Cross Site Scripting vulnerability OBB-3076782
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
[SECURITY] Fedora 36 Update: firefox-107.0-3.fc36
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...
[SECURITY] Fedora 37 Update: firefox-107.0-3.fc37
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...
Search Made Easy: InsightIDR’s Secret Weapon for Efficiency and Efficacy
By Matt Heidet Matt is a Senior Information Security Engineer at a Regional Financial Institution. He is a Customer and Guest Blogger for Rapid7 Have you ever groaned when divvying up incidents from a pen-test amongst an overworked team? Or maybe you’ve struggled to present how you adhere to...
Ease Your Cybersecurity Maturity Model Certification Journey With Qualys
The Cybersecurity Maturity Model Certification CMMC is a cybersecurity training, certification, and assessment program from the United States Department of Defense DoD. CMMC is designed to provide increased assurance to the DoD that a contractor can adequately protect controlled unclassified...
puma-5.6.4: http request smuggling vulnerabilities
A HTTP request smuggling flaw was found in puma. This issue occurs when using puma behind a proxy. Puma does not validate incoming HTTP requests, as per RFC specification, leading to loss of integrity...
kyodo-west.co.jp Cross Site Scripting vulnerability OBB-3057644
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
What are Dating Apps Doing to Protect Their Users?
A very public affair When asked about the pitfalls and problems behind using dating apps, users cite data security as one of the most worrying elements of online dating. Since the Ashley Madison breach in July 2015, online dating sites have repeatedly been under media scrutiny for the poor...
QSC 2022: Listening to the Voice of the Customer
It would be redundant to state that today’s threat landscape is growing increasingly sophisticated and erratic. With all types of attacks becoming “commonplace,” the baseline for normal is abnormal. Bad actors are taking advantage of whatever attack vector they can whether that is a phishing...
Re-Focusing Cyber Insurance with Security Validation
The rise in the costs of data breaches, ransomware, and other cyber attacks leads to rising cyber insurance premiums and more limited cyber insurance coverage. This cyber insurance situation increases risks for organizations struggling to find coverage or facing steep increases. Some Akin Gump...
IBM Business Automation Workflow Information Disclosure Vulnerability
IBM Business Automation Workflow is a workflow automation solution from IBM in the United States. The product is primarily used for workflow management, compliance management, and has features such as workflow visibility and scalability.An information disclosure vulnerability exists in multiple...