Lucene search
K

4667 matches found

The Hacker News
The Hacker News
added 2022/10/28 10:43 a.m.79 views

Implementing Defense in Depth to Prevent and Mitigate Cyber Attacks

The increased use of information technology in our everyday life and business has led to cyber-attacks becoming more sophisticated and large-scale. For organizations to thrive in this era of technology, they must develop robust security strategies to detect and mitigate attacks. Defense in depth ...

6.7AI score
Exploits0
Positive Technologies
Positive Technologies
added 2022/10/28 12:0 a.m.2 views

PT-2022-5293 · Ibm · Ibm Cics Tx Standard +1

Name of the Vulnerable Software and Affected Versions: IBM CICS TX Standard and Advanced version 11.1 Description: The issue is related to insufficient protection of service data, which could allow a remote attacker to gain unauthorized access to sensitive information. It is also noted that the...

7.5CVSS7AI score0.00486EPSS
Exploits0References9
Positive Technologies
Positive Technologies
added 2022/10/28 12:0 a.m.3 views

PT-2022-6987 · Unknown · Keyinstall

Name of the Vulnerable Software and Affected Versions: keyinstall affected versions not specified Description: The issue is related to a missing bounds check in keyinstall, which could lead to local information disclosure. System execution privileges are needed for exploitation, and user...

4.6CVSS4.3AI score0.00104EPSS
Exploits0References6
Tenable Nessus
Tenable Nessus
added 2022/10/27 12:0 a.m.121 views

macOS 12.x < 12.6.1 Multiple Vulnerabilities (HT213494)

The remote host is running a version of macOS / Mac OS X that is 12.x prior to 12.6.1. It is, therefore, affected by multiple vulnerabilities: - This issue was addressed by removing additional entitlements. This issue is fixed in tvOS 16.1, macOS Ventura 13, watchOS 9.1, iOS 16.1 and iPadOS 16,...

9.8CVSS8.1AI score0.1593EPSS
Exploits1References15
BDU FSTEC
BDU FSTEC
added 2022/10/26 12:0 a.m.3 views

The vulnerability of Intel Active Management Technology and Standard Manageability implementations lies in the insufficient protection of registration data, which allows attackers to enhance their privileges and disclose sensitive information.

The vulnerability of Intel Active Management Technology and Standard Manageability implementations is related to insufficient protection of registration data. Exploiting this vulnerability can allow a malicious actor to enhance their privileges and disclose sensitive information...

9CVSS7.7AI score0.00779EPSS
Exploits0References3
Microsoft Secure
Microsoft Secure
added 2022/10/25 4:0 p.m.43 views

How businesses are gaining integrated data protection with Microsoft Purview

Currently, our interconnected world is creating 2.5 quintillion bytes of data every day.1 Every purchase made, every email sent, every contract signed: all of it gets shared, accessed, and stored. We take it on faith that organizations are doing all this safely; however, data loss is becoming a...

Exploits0
Microsoft Malware Protection
Microsoft Malware Protection
added 2022/10/25 4:0 p.m.16 views

How businesses are gaining integrated data protection with Microsoft Purview

Currently, our interconnected world is creating 2.5 quintillion bytes of data every day.1 Every purchase made, every email sent, every contract signed: all of it gets shared, accessed, and stored. We take it on faith that organizations are doing all this safely; however, data loss is becoming a...

Exploits0
OpenVAS
OpenVAS
added 2022/10/25 12:0 a.m.19 views

Apple Mac OS X Security Update (HT213494)

Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.5AI score0.0387EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2022/10/25 12:0 a.m.23 views

Apple Mac OS X Security Update (HT213493)

Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.8AI score0.0387EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2022/10/24 12:0 a.m.4 views

PT-2022-21538 · Apple · Ios +1

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 16 macOS versions prior to 13 Description: The issue allows a user with physical access to an iOS device to read past diagnostic logs. This was addressed with improved data protection. Recommendations: For iOS versions...

2.4CVSS4.4AI score0.00356EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2022/10/24 12:0 a.m.3 views

PT-2022-28138 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13 Description: The issue allows an app to modify protected parts of the file system. This was addressed with improved data protection. Recommendations: For versions prior to 13, update to macOS Ventura 13 to resolve t...

5.5CVSS7.6AI score0.00223EPSS
Exploits0References9
Apple
Apple
added 2022/10/24 12:0 a.m.129 views

About the security content of macOS Monterey 12.6.1

About the security content of macOS Monterey 12.6.1 This document describes the security content of macOS Monterey 12.6.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...

9.8CVSS9.7AI score0.1593EPSS
Exploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2022/10/24 12:0 a.m.2 views

PT-2022-26603 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13 Description: The issue allows an app to potentially access user-sensitive data due to inadequate data protection mechanisms. This has been addressed with improved data protection. Recommendations: For versions prior...

5.5CVSS7.8AI score0.0027EPSS
Exploits0References5
BDU FSTEC
BDU FSTEC
added 2022/10/24 12:0 a.m.2 views

The vulnerability of Adobe InDesign’s computer layout automation tool, related to buffer overflow in dynamic memory, allows attackers to gain unauthorized access to protected information.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to overflowing buffers in dynamic memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

5.5CVSS6.5AI score0.00436EPSS
Exploits0References3Affected Software1
The Hacker News
The Hacker News
added 2022/10/20 11:20 a.m.33 views

Not All Sandboxes Are for Children: How to Secure Your SaaS Sandbox

When creating a Sandbox, the mindset tends to be that the Sandbox is considered a place to play around, test things, and there will be no effect on the production or operational system. Therefore, people don't actively think they need to worry about its security. This mindset is not only wrong, b...

7.1AI score
Exploits0
BDU FSTEC
BDU FSTEC
added 2022/10/20 12:0 a.m.3 views

The vulnerability of the multimedia viewing function of Cisco Webex Meetings Server and Cisco Webex Meetings allows attackers to circumvent existing security restrictions.

The vulnerability of the multimedia viewing function in Cisco Webex Meetings Server and Cisco Webex Meetings relates to a flaw in the data protection mechanism. Exploiting this vulnerability allows an attacker to circumvent existing security restrictions remotely...

5CVSS5.5AI score0.00825EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2022/10/20 12:0 a.m.4 views

The vulnerability of Windows operating systems, related to insufficient protection of sensitive data, allows attackers to gain unauthorized access to protected information.

The vulnerability of Windows operating systems is related to insufficient protection of service data during the processing of registry keys. Exploiting this vulnerability can allow an attacker, working remotely, to gain unauthorized access to protected information...

7.8CVSS6.8AI score0.01506EPSS
Exploits0References4
Microsoft Malware Protection
Microsoft Malware Protection
added 2022/10/18 4:0 p.m.24 views

How Microsoft Purview and Priva help simplify data protection

At Microsoft Security, we understand how challenging it is to protect your most important asset, your data, in today’s threat landscape. You’re faced with evolving challenges—from empowering employees for greater productivity to eliminating gaps in your infrastructure—all while trying to protect...

0.3AI score
Exploits0
Microsoft Secure
Microsoft Secure
added 2022/10/18 4:0 p.m.23 views

How Microsoft Purview and Priva help simplify data protection

At Microsoft Security, we understand how challenging it is to protect your most important asset, your data, in today’s threat landscape. You’re faced with evolving challenges—from empowering employees for greater productivity to eliminating gaps in your infrastructure—all while trying to protect...

0.3AI score
Exploits0
Microsoft Malware Protection
Microsoft Malware Protection
added 2022/10/18 4:0 p.m.18 views

How Microsoft Purview and Priva help simplify data protection

At Microsoft Security, we understand how challenging it is to protect your most important asset, your data, in today’s threat landscape. You’re faced with evolving challenges—from empowering employees for greater productivity to eliminating gaps in your infrastructure—all while trying to protect...

0.3AI score
Exploits0
Rows per page
Query Builder