Microsoft Azure Compliance Checks

Binary data azurecompliancecheck.nbin...

Thomson Reuters FATCA Arbitrary File Upload Vulnerability

Thomson Reuters FATCA is an integrated solution of market-leading software with reporting capabilities from Thomson Reuters. The solution addresses issues around regulatory compliance, tax documentation and tax reporting. An arbitrary file upload vulnerability exists in Thomson Reuters FATCA. An...

Sen. Warren Worried About Banks' New Encrypted Messaging Platform

UPDATE–The list of politicians in Washington wringing their hands over the increasing use of encryption by consumers and businesses is growing longer by the day. Sen. Elizabeth Warren added her name to that list on Monday. Warren D-Mass. sent a letter to Attorney General Loretta Lynch expressing...

[SECURITY] Fedora 23 Update: firefox-39.0.3-1.fc23

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

[SECURITY] Fedora 21 Update: firefox-39.0.3-1.fc21

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

Lynis 2.1.1 - Security Auditing Tool for Unix/Linux Systems

Lynis is an open source security auditing tool. Commonly used by system administrators, security professionals and auditors, to evaluate the security defenses of their Linux/Unix based systems. It runs on the host itself, so it can perform very extensive security scans. Supported operating system...

SIMP - System Integrity Management Platform

SIMP is a framework that aims to provide a reasonable combination of security compliance and operational flexibility. The ultimate goal of the project is to provide a complete management environment focused on compliance with the various profiles in the SCAP Security Guide Project and industry be...

CloudFlare Transparency Report Shows Spike in Court Orders

In its latest transparency report, CloudFlare says that the number of subpoenas it has received has remained steady since last year, but the volume of court orders has more than doubled since the second half of last year. While much of the data from CloudFlare’s report for the first half of 2015...

[SECURITY] Fedora 21 Update: firefox-39.0-8.fc21

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

[SECURITY] Fedora 22 Update: firefox-39.0-8.fc22

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

UK Student's Research a Wassenaar Casualty

U.S.-based security researchers may soon be championing the case of Grant Wilcox, a young U.K. university student whose work is one of the few publicly reported casualties of the Wassenaar Arrangement. Wilcox last week published his university dissertation, presented earlier this spring for an...

Is penetration testing required for HIPAA compliance?

In this blog post were going to focus our discussion on the technical requirement part of this standard. The evaluation is supposed to establish the extent to which a covered entitys or business associates security policies and procedures meet the requirements of the HIPAA Security Rule. A questi...

SUSE-SU-2015:1179-1 Security update for libgcrypt

This update of libgcrypt fixes one security issue and brings various FIPS 140-2 related improvements. libgcrypt now uses ciphertext blinding for Elgamal decryption CVE-2014-3591 FIPS 140-2 related changes: The library performs its self-tests when the module is complete the -hmac file is also...

[SECURITY] Fedora 22 Update: firefox-38.0-4.fc22

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

[SECURITY] Fedora 20 Update: firefox-38.0-4.fc20

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

[SECURITY] Fedora 21 Update: firefox-38.0-4.fc21

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

PCI Compliance Simplified: Get Trained and Avoid Security Breaches

Target’s data breach is a chilling example: After the widely publicized hack, 12% of loyal shoppers no longer shop at that retailer, and 36% shop at the retailer less frequently. For those who continue to shop, 79% are more likely to use cash instead of credit cards. According to DeMeo, Vice...

[SECURITY] Fedora 20 Update: firefox-37.0.2-1.fc20

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

Unix / Linux - Local Users Information : Passwords Never Expire

Using the supplied credentials, Nessus was able to list local users that are enabled and whose passwords never expire. TRUSTED...

Nearly 95% of SAP Systems Vulnerable to Hackers

More than 95 percent of enterprise SAP installations exposed to high-severity vulnerabilities that could allow attackers to hijack a company's business data and processes, new research claims entirely. According to a new assessment released by SAP short for Systems, Applications & Products...