1243 matches found
Campari Site Suffers Ransomware Hangover
Italian spirits brand Campari has restored its company website following a recent ransomware attack. According to the ransom note, the group behind the breach used Ragnar Locker to encrypt most of Campari’s servers and was holding the data hostage for $15 million in Bitcoin. Campari Group is behi...
ALSA-2020:4490 Moderate: gnupg2 security, bug fix, and enhancement update
The GNU Privacy Guard GnuPG or GPG is a tool for encrypting data and creating digital signatures, compliant with OpenPGP and S/MIME standards. The following packages have been upgraded to a later upstream version: gnupg2 2.2.20. BZ1663944 Security Fixes: GnuPG: interaction between the sks-keyserv...
Ransomware Impacting Pipeline Operations
Summary Note: This Activity Alert uses the MITRE Adversarial Tactics, Techniques, and Common Knowledge ATT&CK™ framework. See the MITRE ATT&CK for Enterprise and ATT&CK for Industrial Control Systems ICS frameworks for all referenced threat actor techniques and mitigations. The Cybersecurity and...
Ransomware Takes Down Network of French IT Giant
French IT giant Sopra Steria was hit with a cyber attack this week that disrupted the business of the firm and is widely believed to be the work of the threat actors behind Ryuk ransomware. The company revealed the attack in a brief press statement released Oct. 22, two days after officials said...
CVE-2020-11031
CVE-2020-11031 affects GLPI prior to 9.5.0 where the encryption algorithm is insecure and data security relies on user-chosen password strength. An attacker could decrypt data if a weak/predictable password is used. The issue is addressed in GLPI 9.5.0 by switching to a more secure library (sodiu...
CVE-2020-4622
IBM Data Risk Manager iDNA 2.0.6 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 184983...
IBM Security Guardium Data Encryption (GDE) Information Disclosure Vulnerability (CNVD-2020-49954)
IBM Security Guardium Data Encryption GDE provides a modular set of encryption solutions that help security teams effectively implement data-at-rest security across the organization. An information disclosure vulnerability exists in IBM Security Guardium Data Encryption GDE 3.0.0.2, which can be...
IBM Security Guardium Data Encryption (GDE) Hardcoded Credentials Vulnerability
IBM Security Guardium Data Encryption GDE provides a modular set of encryption solutions that help security teams effectively implement data-at-rest security across the organization. A hard-coded credentials vulnerability exists in IBM Security Guardium Data Encryption GDE 3.0.0.2, which can be...
IBM Security Guardium Data Encryption (GDE) Information Disclosure Vulnerability (CNVD-2020-49510)
IBM Security Guardium Data Encryption GDE provides a modular set of encryption solutions that help security teams effectively implement data-at-rest security across the organization. An information disclosure vulnerability exists in IBM Security Guardium Data Encryption GDE 3.0.0.2. An attacker...
IBM Security Guardium Data Encryption (GDE) Information Disclosure Vulnerability (CNVD-2020-49939)
IBM Security Guardium Data Encryption GDE provides a modular set of encryption solutions that help security teams effectively implement data-at-rest security across the organization. An information disclosure vulnerability exists in IBM Security Guardium Data Encryption GDE 3.0.0.2, which stems...
IBM Security Guardium Data Encryption (GDE) Information Disclosure Vulnerability (CNVD-2020-49938)
IBM Security Guardium Data Encryption GDE provides a modular set of encryption solutions that help security teams effectively implement data-at-rest security across the organization. An information disclosure vulnerability exists in IBM Security Guardium Data Encryption GDE 3.0.0.2, which stems...
IBM Security Guardium Data Encryption (GDE) Information Disclosure Vulnerability (CNVD-2020-49509)
IBM Security Guardium Data Encryption GDE provides a modular set of encryption solutions that help security teams effectively implement data-at-rest security across the organization. An information disclosure vulnerability exists in IBM Security Guardium Data Encryption GDE 3.0.0.2. The...
IBM Security Guardium Data Encryption (GDE) Arbitrary Command Execution Vulnerability
IBM Security Guardium Data Encryption GDE provides a modular set of encryption solutions that help security teams effectively implement data-at-rest security across the organization. An arbitrary command execution vulnerability exists in IBM Security Guardium Data Encryption GDE 3.0.0.2, which ca...
IBM Security Guardium Cross-Site Scripting Vulnerability (CNVD-2020-50543)
IBM Security Guardium is a suite of platforms from IBM in the United States that provide data protection capabilities. The platform includes features such as custom UI, report management and streamlined audit process building. A cross-site scripting vulnerability exists in IBM Security Guardium...
IBM Security Guardium Data Encryption (GDE) Plaintext Storage Vulnerability (CNVD-2020-49941)
IBM Security Guardium Data Encryption GDE provides a modular set of encryption solutions that help security teams effectively implement data-at-rest security across the organization. A plaintext storage vulnerability exists in IBM Security Guardium Data Encryption GDE 3.0.0.2, which can be...
IBM Security Guardium Data Encryption (GDE) Password Strength Requirement Vulnerability
IBM Security Guardium Data Encryption GDE provides a modular set of encryption solutions that help security teams effectively implement data-at-rest security across the organization. A password strength requirement vulnerability exists in IBM Security Guardium Data Encryption GDE 3.0.0.2, which...
IBM Security Guardium Data Encryption (GDE) Cross-Site Scripting Vulnerability
IBM Security Guardium Data Encryption GDE provides a modular set of encryption solutions that help security teams effectively implement data-at-rest security across the organization. A cross-site scripting vulnerability exists in IBM Security Guardium Data Encryption GDE 3.0.0.2, which can be...
IBM Security Guardium Data Encryption (GDE) Information Disclosure Vulnerability (CNVD-2020-49511)
IBM Security Guardium Data Encryption GDE provides a modular set of encryption solutions that help security teams effectively implement data-at-rest security across the organization. An information disclosure vulnerability exists in IBM Security Guardium Data Encryption GDE 3.0.0.2. An attacker...
