Digital Guardian Agent Security Vulnerability

Digital Guardian Agent is a widely used data protection platform for cloud environments from US-based Digital Guardian. Discovers, categorizes and controls the movement of data across endpoints, networks and clouds. A security vulnerability exists in Fortra Digital Guardian Agent prior to version...

The vulnerability of the NTFS file system in Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the NTFS file system in Windows operating systems is related to insufficient protection of operational data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the IsUNCPath method in Microsoft Exchange Server servers allows attackers to perform spoofing attacks.

The vulnerability of the IsUNCPath method in Microsoft Exchange Server’s mail server is related to insufficient protection of service data during NTLM authentication. Exploiting this vulnerability allows a malicious actor to perform spoofing attacks remotely...

Why less is more: 10 steps to secure customer data

In an advisory aimed at the protection of customers’ personal data, the Australian Cyber Security Centre ACSC has emphasized that businesses should only collect personal data from customers that they need in order to operate effectively. While that may seem like kicking in an open door, it’s real...

Fortinet FortiMail Authentication Error Vulnerability

Fortinet FortiMail is a set of e-mail security gateway products of the U.S. Fita Fortinet. The product provides e-mail security and data protection features. An authentication error vulnerability exists in Fortinet FortiMail that stems from improperly limiting excessive authentication attempts. A...

The vulnerability of the Hyper-V hardware virtualization system for Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Hyper-V hardware virtualization technology for Windows operating systems is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the Apache Airflow network software lies in the insufficient protection of operational data, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the Apache Airflow network software is related to insufficient protection of operational data. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain unauthorized access to protected information...

Microsoft Excel Security Feature Bypass Vulnerability (CNVD-2024-02715)

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A security feature bypass vulnerability exists in Microsoft Excel, which can be exploited by an attacker to bypass security features and impact confidentiality, integrity, and availability...

REST API Security Best Practices

...

The vulnerability of the software for working with Azure Machine Learning algorithms lies in the lack of protection for operational data, which allows an attacker to gain unauthorized access to protected information.

The vulnerability of the software for working with Azure Machine Learning algorithms is related to the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information...

PT-2023-6974 · Microsoft · Windows Kernel +1

Name of the Vulnerable Software and Affected Versions: Windows Kernel affected versions not specified Description: The issue is related to insufficient protection of internal data in the Windows operating system, which can allow an attacker to gain unauthorized access to protected information. Th...

The vulnerability of the DownloadDataFromUri method in the Microsoft Exchange Server mail server allows a hacker to disclose protected information.

The vulnerability of the DownloadDataFromUri method in the Microsoft Exchange Server mail server is related to the lack of protection for service data. Exploiting this vulnerability could allow a malicious actor to disclose protected information remotely...

The vulnerability of the Microweber content management system lies in the insufficient protection of operational data, which allows attackers to gain unauthorized access to protected information.

The vulnerability of the Microweber content management system is related to insufficient protection of operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

Decoupling for Security

This is an excerpt from a longer paper. You can read the whole thing complete with sidebars and illustrations here. Our message is simple: it is possible to get the best of both worlds. We can and should get the benefits of the cloud while taking security back into our own hands. Here we outline ...

PT-2023-9617 · Cisco · Cisco Identity Services Engine

Name of the Vulnerable Software and Affected Versions: Cisco Identity Services Engine ISE affected versions not specified Description: A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to obtain sensitive...

The vulnerability of the graphical interface of Spectrum Virtualize software lies in the insufficient protection of operational data, which allows attackers to execute arbitrary code and enhance their privileges.

The vulnerability of the graphical interface of Spectrum Virtualize software lies in the insufficient protection of operational data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code and gain increased privileges...

The vulnerability of the web interface for remote administration of TIONIX Virtual Security lies in the lack of protection for operational data, allowing attackers to obtain information about the software and current versions of the products.

The vulnerability of the web interface of the remote administration tool used for information protection in TIONIX Virtual Security is related to the lack of protection for operational data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to obtain information abo...

YouTube launches “global effort” to block ad blockers

The ongoing struggle between YouTube and ad blockers is turning users into the victims. YouTube has gone all out in its fight against the use of add-ons, extensions and programs that prevent it from serving ads to viewers around the world. It started out as just a small experiment, but it looks...

The vulnerability of the application programming interface of the Elasticsearch search engine allows a hacker to disclose protected information.

The vulnerability of the Elasticsearch search engine’s application programming interface is related to insufficient protection of registration data. Exploiting this vulnerability could allow a perpetrator to disclose protected information...

The vulnerability of the Kibana data visualization service lies in the insufficient protection of registration data, allowing attackers to gain unauthorized access to user accounts.

The vulnerability of the Kibana data visualization service is related to insufficient protection of registration data. Exploiting this vulnerability may allow a malicious actor, operating remotely, to gain unauthorized access to registration data...