CVE-2022-42792

This issue was addressed with improved data protection. This issue is fixed in iOS 16.1 and iPadOS 16. An app may be able to read sensitive location information...

CVE-2023-32386

A privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Big Sur 11.7.7, macOS Monterey 12.6.6, macOS Ventura 13.4. An app may be able to observe unprotected user data...

CVE-2022-42792

CVE-2022-42792 affects iOS/iPadOS where an app may read sensitive location information due to inadequate data protection. Multiple connected sources confirm the issue and outcomes: Apple’s security content states the fix is in iOS 16.1 and iPadOS 16; Red Hat/PRION and NVD entries mirror this, not...

PT-2023-5205 · Fortinet · Fortisiem

Name of the Vulnerable Software and Affected Versions: Fortinet FortiSIEM versions 6.7.0 through 6.7.5 Description: The issue is related to insufficient protection of service data in the security management system, allowing an attacker to disclose sensitive information via crafted HTTP requests...

PT-2023-14147 · Apple · Ios +1

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 16.1 iPadOS versions prior to 16 Description: The issue allows an app to potentially read sensitive location information due to inadequate data protection. This has been addressed with improved data protection measures...

IBM Security Guardium License Issue Vulnerability (CNVD-2023-51459)

IBM Security Guardium is a suite of platforms from International Business Machines IBM that provide data protection capabilities. The platform includes features such as custom UI, report management and streamlined audit process building. IBM Security Guardium has an authorization issue...

Makves DCAP 安全漏洞

Makves DCAP is a data protection and risk management related to the storage and access of information resources from the Russian company Makves. A security vulnerability exists in Makves DCAP version v3.0.0.122, which stems from incorrect access control. An attacker exploits the vulnerability to...

PT-2023-3555 · Ibm · Ibm Robotic Process Automation

Name of the Vulnerable Software and Affected Versions: IBM Robotic Process Automation versions 21.0.0 through 21.0.7.6 IBM Robotic Process Automation versions 23.0.0 through 23.0.6 Description: The issue is related to weaknesses in the authentication procedure of the software. Exploitation of thi...

Introducing AI-guided Remediation for IaC Security / KICS

While the use of Infrastructure as Code IaC has gained significant popularity as organizations embrace cloud computing and DevOps practices, the speed and flexibility that IaC provides can also introduce the potential for misconfigurations and security vulnerabilities. IaC allows organizations to...

The vulnerability of the Windows Installer component on Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Windows Installer component in Windows operating systems is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

In Healthcare Organizations, Data Security Risks Persist Despite HIPAA Compliance

In a recent blog post, we discussed the extraordinarily powerful “perfect storm” of cyber risk faced by healthcare organizations today. This storm is escalating in size, force, and risk levels. The Health Insurance Portability and Accountability Act HIPAA sets the standard for protecting this dat...

New Research: 6% of Employees Paste Sensitive Data into GenAI tools as ChatGPT

The revolutionary technology of GenAI tools, such as ChatGPT, has brought significant risks to organizations' sensitive data. But what do we really know about this risk? A new research by Browser Security company LayerX sheds light on the scope and nature of these risks. The report titled...

New Research: 6% of Employees Paste Sensitive Data into GenAI tools as ChatGPT

The revolutionary technology of GenAI tools, such as ChatGPT, has brought significant risks to organizations' sensitive data. But what do we really know about this risk? A new research by Browser Security company LayerX sheds light on the scope and nature of these risks. The report titled...

IBM Security Guardium 安全漏洞

IBM Security Guardium is a suite of platforms from International Business Machines IBM that provide data protection capabilities. The platform includes features such as custom UI, report management and streamlined audit process building. IBM Security Guardium has an authorization issue...

API Security: Unveiling Best Practices for a Secure Digital Ecosystem

By Owais Sultan API security is crucial for protecting data, maintaining privacy, and preventing unauthorized access. Lets delve into some of… This is a post from HackRead.com Read the original post: API Security: Unveiling Best Practices for a Secure Digital Ecosystem...

PT-2023-3126 · Microsoft · Windows Installer +1

Name of the Vulnerable Software and Affected Versions: Windows Installer affected versions not specified Description: The issue is related to insufficient protection of service data in the Windows Installer component of Windows operating systems. Exploitation of this issue may allow an attacker t...

PT-2023-3280 · Apache · Apache Traffic Server

Name of the Vulnerable Software and Affected Versions: Apache Traffic Server versions 8.0.0 through 9.2.0 Description: The issue is related to the exposure of sensitive information to an unauthorized actor. This can be exploited by a remote attacker to disclose protected information. The...

How to Improve Your API Security Posture

APIs, more formally known as application programming interfaces, empower apps and microservices to communicate and share data. However, this level of connectivity doesn't come without major risks. Hackers can exploit vulnerabilities in APIs to gain unauthorized access to sensitive data or even ta...

WordPress Plugin WP GDPR 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

Vulnerability of the Server component: The Oracle MySQL Server database management system’s DDL functions allow attackers to gain unauthorized access to protected information.

Vulnerability of the Server component: The DDL system for managing databases, Oracle MySQL Server, has vulnerabilities related to insufficient protection of operational data. Exploiting these vulnerabilities can allow unauthorized attackers to gain unauthorized access to protected information usi...