PT-2023-5814 · Apple · Ios +4

Name of the Vulnerable Software and Affected Versions: iPadOS versions prior to 16.3 iOS versions prior to 16.3 tvOS versions prior to 16.3 watchOS versions prior to 9.3 Description: The issue is related to the AppleMobileFileIntegrity component and is caused by a lack of protection for service...

The vulnerability of the Windows operating system’s kernel allows a hacker to gain unauthorized access to the device.

The vulnerability of the Windows operating system’s kernel is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to the device...

WhatsApp Hit with €5.5 Million Fine for Violating Data Protection Laws

The Irish Data Protection Commission DPC on Thursday imposed fresh fines of €5.5 million against Meta's WhatsApp for violating data protection laws when processing users' personal information. At the heart of the ruling is an update to the messaging platform's Terms of Service that was imposed in...

WhatsApp Hit with €5.5 Million Fine for Violating Data Protection Laws

The Irish Data Protection Commission DPC on Thursday imposed fresh fines of €5.5 million against Meta's WhatsApp for violating data protection laws when processing users' personal information. At the heart of the ruling is an update to the messaging platform's Terms of Service that was imposed in...

The vulnerability of Windows operating system’s Cryptographic Services allows attackers to enhance their privileges.

The vulnerability of Windows operating system’s Cryptographic Services is related to insufficient protection of service data. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of Microsoft Exchange Server servers, related to the lack of protection for service data, allows attackers to disclose protected information.

The vulnerability of Microsoft Exchange Server lies in the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose protected information...

Introducing Proactive API Leak Management

Read the press release announcing the early release of Wallarm API Leak Management The recent surge in hacks involving leaked API Keys and other API secrets such as credentials, passwords, certificates, tokens and encryption keys has put everyone involved on notice – organizations need a way to...

Wallarm Releases New End-to-End Solution to Reduce Risk and Time-to-Remediate Leaked API Keys and Secrets

Advancement to API Security Technology Will Combat Recent Surge in Hacks Leveraging Leaked API; Early Release Now Available San Francisco, CA –BUSINESS WIRE– January 19, 2023 – Wallarm, the end-to-end API security company, today announced the early release of the Wallarm API Leak Management...

The vulnerability of Microsoft Visio graphic editors, Microsoft Office programs, and 365 Apps for Enterprise, related to insufficient protection of sensitive data, allows attackers to gain unauthorized access to protected information.

The vulnerability of Microsoft Visio graphic editors, Microsoft Office programs, and 365 Apps for Enterprise is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow unauthorized actors to gain unauthorized access to protected information...

PT-2023-1202 · Oracle · Peoplesoft Enterprise Peopletools

Name of the Vulnerable Software and Affected Versions: PeopleSoft Enterprise PeopleTools versions 8.59 through 8.60 Description: The issue is related to insufficient input validation in the Elastic Search component of the PeopleSoft Enterprise PeopleTools product. This can allow a remote attacker...

TikTok Fined $5.4 Million by French Regulator for Violating Cookie Laws

Popular short-form video hosting service TikTok has been fined €5 million about $5.4 million by the French data protection watchdog for breaking cookie consent rules, making it the latest platform to face similar penalties after Amazon, Google, Meta, and Microsoft since 2020. "Users of 'tiktok.co...

The vulnerability of Mozilla Firefox, Firefox ESR, and the Mozilla Thunderbird email client relates to insufficient protection of sensitive data. This allows attackers to circumvent security restrictions and gain unauthorized access to protected information.

The vulnerabilities of Mozilla Firefox, Firefox ESR, and the Mozilla Thunderbird email client are related to insufficient protection of sensitive data. Exploiting these vulnerabilities allows a malicious actor to bypass security restrictions and gain unauthorized access to protected information b...

PT-2023-1162 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient protection of service data in the Windows Event Tracing service, which can allow an attacker to gain unauthorized access to protected information. This...

PT-2023-1232 · Microsoft · Windows Point-To-Point Protocol +1

Name of the Vulnerable Software and Affected Versions: Windows Point-to-Point Protocol PPP affected versions not specified Description: The issue is related to insufficient protection of service data in the implementation of the Point-to-Point Protocol PPP in Windows operating systems. This can...

PT-2023-1092 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient protection of service data in the Microsoft Cryptographic Services. It allows an attacker to elevate their privileges. Recommendations: At the moment,...

PT-2023-1097 · Microsoft · Exchange Server

Name of the Vulnerable Software and Affected Versions: Microsoft Exchange Server affected versions not specified Description: The issue is related to a lack of protection for service data in Microsoft Exchange Server, which can be exploited to disclose protected information. This can allow an...

Why Do User Permissions Matter for SaaS Security?

Earlier this year, threat actors infiltrated Mailchimp, the popular SaaS email marketing platform. They viewed over 300 Mailchimp customer accounts and exported audience data from 102 of them. The breach was preceded by a successful phishing attempt and led to malicious attacks against Mailchimp'...

Slack GitHub Account Hacked via Stolen Employee API Token

On December 29, 2022, Slack was alerted to suspicious activity on their GitHub account. Upon investigation, the company discovered that a limited number of employee tokens had been stolen and misused to gain access to an externally hosted repository. The threat actor had also downloaded private...

Irish Regulators Fine Facebook $414 Million for Forcing Users to Accept Targeted Ads

The Irish Data Protection Commission DPC has fined Meta Platforms €390 million roughly $414 million over its handling of user data for serving personalized ads in what could be a major blow to its ad-fueled business model. To that end, the privacy regulator has ordered Meta Ireland to pay two fin...

PT-2023-1617 · Qualcomm · Qualcomm Embedded Platform

Name of the Vulnerable Software and Affected Versions: Powerline Communication Firmware affected versions not specified Qualcomm embedded platform software affected versions not specified Description: The issue is related to memory corruption due to information exposure in Powerline Communication...