4762 matches found
PT-2022-28138 · Apple · Apple Macos
Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13 Description: The issue allows an app to modify protected parts of the file system. This was addressed with improved data protection. Recommendations: For versions prior to 13, update to macOS Ventura 13 to resolve t...
About the security content of macOS Monterey 12.6.1
About the security content of macOS Monterey 12.6.1 This document describes the security content of macOS Monterey 12.6.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...
The vulnerability of Adobe InDesign’s computer layout automation tool, related to buffer overflow in dynamic memory, allows attackers to gain unauthorized access to protected information.
The vulnerability of Adobe InDesign’s computer layout automation tool is related to overflowing buffers in dynamic memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
Not All Sandboxes Are for Children: How to Secure Your SaaS Sandbox
When creating a Sandbox, the mindset tends to be that the Sandbox is considered a place to play around, test things, and there will be no effect on the production or operational system. Therefore, people don't actively think they need to worry about its security. This mindset is not only wrong, b...
The vulnerability of Windows operating systems, related to insufficient protection of sensitive data, allows attackers to gain unauthorized access to protected information.
The vulnerability of Windows operating systems is related to insufficient protection of service data during the processing of registry keys. Exploiting this vulnerability can allow an attacker, working remotely, to gain unauthorized access to protected information...
The vulnerability of the multimedia viewing function of Cisco Webex Meetings Server and Cisco Webex Meetings allows attackers to circumvent existing security restrictions.
The vulnerability of the multimedia viewing function in Cisco Webex Meetings Server and Cisco Webex Meetings relates to a flaw in the data protection mechanism. Exploiting this vulnerability allows an attacker to circumvent existing security restrictions remotely...
How Microsoft Purview and Priva help simplify data protection
At Microsoft Security, we understand how challenging it is to protect your most important asset, your data, in today’s threat landscape. You’re faced with evolving challenges—from empowering employees for greater productivity to eliminating gaps in your infrastructure—all while trying to protect...
How Microsoft Purview and Priva help simplify data protection
At Microsoft Security, we understand how challenging it is to protect your most important asset, your data, in today’s threat landscape. You’re faced with evolving challenges—from empowering employees for greater productivity to eliminating gaps in your infrastructure—all while trying to protect...
How Microsoft Purview and Priva help simplify data protection
At Microsoft Security, we understand how challenging it is to protect your most important asset, your data, in today’s threat landscape. You’re faced with evolving challenges—from empowering employees for greater productivity to eliminating gaps in your infrastructure—all while trying to protect...
How Microsoft Purview and Priva help simplify data protection
At Microsoft Security, we understand how challenging it is to protect your most important asset, your data, in today’s threat landscape. You’re faced with evolving challenges—from empowering employees for greater productivity to eliminating gaps in your infrastructure—all while trying to protect...
Microsoft Windows Workstation Service privilege elevation vulnerability
Microsoft Windows Workstation is an application from Microsoft Corporation USA. It handles advanced workloads with the help of server-level data protection and performance.Microsoft Windows Workstation Service has an elevation of privilege vulnerability, which stems from the existence of improper...
Omnicell Healthcare Company Confirms Ransomware Incident
In a US SEC Securities and Exchange Commission 8-K filing, Omnicell, the healthcare technology provider, revealed that some of its products, services, and internal systems were affected by ransomware. Upon detecting the incident, the medication management systems provider took immediate action to...
The vulnerability of the backup and recovery functions of Microsoft File Systems for the IBM Spectrum Protect Plus data protection software allows a perpetrator to disclose protected information.
The vulnerability of the backup and recovery functions of Microsoft’s file systems in the IBM Spectrum Protect Plus data protection platform is related to an incorrect limitation on the path name to the restricted-access directory. Exploiting this vulnerability could allow a malicious actor to...
The vulnerability of the systemd.txt file on the NGINX Controller platform allows a hacker to disclose protected information.
The vulnerability of the systemd.txt file on the NGINX Controller application monitoring and management platform is related to insufficient protection for registration data. Exploiting this vulnerability could allow attackers to disclose sensitive information that is protected by this system...
PT-2022-5516 · Microsoft · Office
Name of the Vulnerable Software and Affected Versions: Microsoft Office affected versions not specified Description: The issue is related to insufficient protection of internal data in Microsoft Office for Mac, which could allow an attacker to gain unauthorized access to protected information...
PT-2022-5108 · Microsoft · Windows Server +1
Name of the Vulnerable Software and Affected Versions: Windows Server affected versions not specified Description: The issue is related to insufficient protection of service data when processing registry keys, which can allow an attacker to obtain unauthorized access to protected information. Thi...
The vulnerability in the Firefox web browser, related to insufficient protection of service data, allows a hacker to gain unauthorized access to protected information.
The vulnerability in the Firefox web browser is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
PT-2022-7071 · Tionix · Tionix Virtual Security
Name of the Vulnerable Software and Affected Versions: TIONIX Virtual Security affected versions not specified Description: The issue is related to a lack of protection for service data in the web interface for remote administration of TIONIX Virtual Security, a virtualization information securit...
The essentials of GRC and cybersecurity — How they empower each other
Understanding the connection between GRC and cybersecurity When talking about cybersecurity, Governance, Risk, and Compliance GRC is often considered the least exciting part of business protection. However, its importance can't be ignored, and this is why. While cybersecurity focuses on the...
Microsoft publishes new report on holistic insider risk management
The risk landscape for organizations has changed significantly in the past few years. The amount of data captured, copied, and consumed is expected to grow to more than 180 zettabytes through 2025.1 Traditional ways of identifying and mitigating risks don’t always work. Historically, organization...