4759 matches found
About the security content of iOS 18 and iPadOS 18
About the security content of iOS 18 and iPadOS 18 This document describes the security content of iOS 18 and iPadOS 18. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...
PT-2024-29087
Name of the Vulnerable Software and Affected Versions iOS versions prior to 18 iPadOS versions prior to 18 Description The issue allows an app to potentially enumerate a user's installed apps. This was addressed with improved data protection. Recommendations For iOS versions prior to 18, update t...
PT-2024-30972 · Apple · Apple Macos
Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15 Description: The issue allows an app with root privileges to potentially access private information due to inadequate data protection. This has been addressed with improved data protection measures. Recommendations:...
CVE-2024-39925
An issue was discovered in Vaultwarden formerly BitwardenRS 1.30.3. It lacks an offboarding process for members who leave an organization. As a result, the shared organization key is not rotated when a member departs. Consequently, the departing member, whose access should be revoked, retains a...
The vulnerability of the Python interpreter of the Cisco NX-OS operating system for Cisco Nexus switches allows a hacker to execute arbitrary commands.
The vulnerability of the Python interpreter in the Cisco NX-OS operating system of Cisco Nexus switches is related to a breach in the data protection mechanism. Exploiting this vulnerability allows an attacker to execute arbitrary commands in the underlying operating system...
The vulnerability of the snmp_facts module in the Ansible configuration management system arises from insufficient protection of registration data, allowing attackers to access confidential information.
The vulnerability of the snmpfacts module in the Ansible configuration management system is related to insufficient protection for registration data. Exploiting this vulnerability can allow attackers to access confidential information...
The vulnerability of the Ansible configuration management system, related to insufficient protection of registration data, allows a perpetrator to gain access to confidential information.
The vulnerability of the Ansible configuration management system is related to insufficient protection for registration data. Exploiting this vulnerability can allow an attacker to access confidential information...
The vulnerability of the RabbitMQ message broker, related to insufficient protection of registration data, allows a hacker to access confidential information.
The vulnerability of the RabbitMQ messaging broker is related to insufficient protection for registration data. Exploiting this vulnerability can allow an attacker to access confidential information...
The vulnerability of the Ansible configuration management system, related to insufficient protection of registration data, allows a perpetrator to gain access to confidential information.
The vulnerability of the Ansible configuration management system is related to insufficient protection for registration data. Exploiting this vulnerability can allow an attacker to access confidential information...
Ireland's Watchdog Launches Inquiry into Google's AI Data Practices in Europe
The Irish Data Protection Commission DPC has announced that it has commenced a "Cross-Border statutory inquiry" into Google's foundational artificial intelligence AI model to determine whether the tech giant has adhered to data protection regulations in the region when processing the personal dat...
The vulnerability of Microsoft Publisher software lies in its data protection mechanisms being breached, allowing attackers to circumvent existing security restrictions.
The vulnerability of Microsoft Publisher software is related to a flaw in the data protection mechanism. Exploiting this vulnerability could allow an attacker to circumvent existing security restrictions...
The vulnerability of the Mark of the Web mechanism in Windows operating systems allows attackers to circumvent existing security restrictions.
The vulnerability of the Mark of the Web mechanism in Windows operating systems is related to the breach of data protection mechanisms. Exploiting this vulnerability allows a remote attacker to circumvent existing security restrictions...
ROS-20240911-06
A vulnerability in the stack protection feature of the GNU Compiler Collection GCC for different programming languages is due to a data protection mechanism violation. Collection GCC is related to a breach of the data protection mechanism. Exploitation of the vulnerability could allow an attacker...
The vulnerability of the software platforms for developing and managing Magento Open Source and Adobe Commerce online stores lies in the insufficient protection of sensitive data. This allows attackers to circumvent security restrictions.
The vulnerability of the software platforms for developing and managing Magento Open Source and Adobe Commerce online stores is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions remotely...
Our 4 Essential Strategy Takeaways from the Gartner® 2024 Report – How to Prepare for Ransomware Attacks
As ransomware threats continue to evolve, security and risk management leaders must stay ahead by adopting comprehensive strategies to protect their organizations. The 2024 Gartner report, “How to Prepare for Ransomware Attacks”, provides critical insights into the latest tactics used by bad acto...
What You Need to Know About Grok AI and Your Privacy
xAI’s generative AI tool, Grok AI, is unhinged compared to its competitors. It’s also scooping up a ton of data that people post on X. Here’s how to keep your posts out of Grok—and why you should...
The vulnerability of the Python interpreter of the Cisco NX-OS operating system for Cisco Nexus switches allows a hacker to execute arbitrary commands.
The vulnerability of the Python interpreter in the Cisco NX-OS operating system of Cisco Nexus switches is related to a breach in the data protection mechanism. Exploiting this vulnerability allows an attacker to execute arbitrary commands...
Clearview AI Faces €30.5M Fine for Building Illegal Facial Recognition Database
The Dutch Data Protection Authority Dutch DPA has imposed a fine of €30.5 million $33.7 million against facial recognition firm Clearview AI for violating the General Data Protection Regulation GDPR in the European Union E.U. by building an "illegal database with billions of photos of faces,"...
PT-2024-6472 · Veeam · Veeam Reporter Service +1
Name of the Vulnerable Software and Affected Versions: Veeam Reporter Service affected versions not specified Description: A vulnerability exists in Veeam Reporter Service that allows an attacker to access the NTLM hash of the service account. This attack requires user interaction and data...
The vulnerability of the Hotspot component in Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK, and the Oracle Java SE software platform allows a malicious individual to gain unauthorized access to read or modify data.
The vulnerability of the Hotspot component in Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK, and the Oracle Java SE software platform is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized acce...