The vulnerability of the Azure SDK for Java development software package lies in a data protection mechanism flaw, which allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Azure SDK for Java development software package is related to a flaw in the data protection mechanism. Exploiting this vulnerability allows an attacker, operating remotely, to compromise the confidentiality and integrity of the protected information...

The vulnerability of the Kerberos protocol implemented in Windows operating systems allows attackers to compromise the integrity of protected information.

The vulnerability of the Kerberos protocol in the Windows operating system is related to a breach of the data protection mechanism. Exploiting this vulnerability allows an attacker, acting remotely, to compromise the integrity of the protected information...

The vulnerability of the software development package for Azure SDK for C lies in a flaw related to data protection mechanisms. This flaw allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Azure SDK for C development software package is related to a flaw in the data protection mechanism. Exploiting this vulnerability allows an attacker, operating remotely, to compromise the confidentiality and integrity of the protected information...

PT-2021-1599 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a lack of protection for service data in the TPM device driver of the Windows operating system. This can allow an attacker to gain unauthorized access to protected...

IBM Spectrum Protect Plus Information Disclosure Vulnerability (CNVD-2021-03028)

IBM Spectrum Protect Plus is a data protection and availability solution for virtualized environments that can be deployed in minutes and protect your environment in less than an hour. An information disclosure vulnerability exists in IBM Spectrum Protect Plus 10.1.0-10.1.6. An attacker could...

Forcepoint and Microsoft: Risk-based access control for the remote workforce

This blog post is part of the Microsoft Intelligence Security Association MISA guest blog series. Learn more about MISA here. Adopting cloud-based services as part of an organization’s digital transformation strategy is no longer optional, its a necessity. Last year, only 18 percent of the...

The vulnerability of the integrated enterprise management system of Microsoft Dynamics NAV, related to the lack of protection for operational data, allows a perpetrator to gain access to protected information.

The vulnerability of the integrated Microsoft Dynamics NAV enterprise management system is related to the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor to gain access to protected information...

The vulnerability of the “Basic HTTP Authentication” method used by the CmtViewer application for controlling programmable panels arises from the lack of protection for the transmitted data. This allows a hacker to gain access to the system.

The vulnerability of the “Basic HTTP Authentication” method used by the CmtViewer application for controlling programmable panels is related to the lack of protection for the transmitted data. Exploiting this vulnerability could allow a remote attacker to gain access to the system...

Third-Party APIs: How to Prevent Enumeration Attacks

When organizations use APIs – the next frontier in cybercrime – to engage with third parties, it’s crucial they understand the associated security exposure they’re introducing. To do so, they must think like a hacker to evaluate whether or not they are introducing a problem or a solution for thei...

The vulnerability of the Linux operating system’s kernel, related to the lack of protection for service data, allows attackers to disclose protected information.

The vulnerability of the Linux operating system’s kernel is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to disclose the protected information remotely...

The vulnerability of the IBM Spectrum Protect Plus data protection software platform, related to insufficient validation of input data, allows attackers to escalate their privileges and execute arbitrary code.

The vulnerability of the IBM Spectrum Protect Plus data protection software platform lies in insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to enhance their privileges and execute arbitrary code...

Code42 Incydr Series: Bringing Shadow IT into the light with Code42 Incydr

Shadow IT is hardly a hidden threat to security professionals. Gartner was warning, way back in 2016, that 1 in 3 successful attacks experienced by enterprises would come from the use of unsanctioned apps by 2020. Code42’s Data Exposure Report just about proves Gartner’s prediction, showing that...

45 Million Medical Images Left Exposed Online

More than 45 million medical images—and the personally identifiable information PII and personal healthcare information PHI associated with them–have been left exposed online due to unsecured technology that’s typically used to store, send and receive medical data, new research has found. A team...

The vulnerability of the i915 module in Linux operating systems allows attackers to gain access to protected information.

The vulnerability of the i915 module in Linux operating systems is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Ditch Your Data-Hungry Apps for These Privacy-Focused Swaps

From messaging to maps, many popular apps slurp up your data to sell you ads. There’s a better way...

Chinese Breakthrough in Quantum Computing a Warning for Security Teams

China’s top quantum-computer researchers have reported that they have achieved quantum supremacy, i.e., the ability to perform tasks a traditional supercomputer cannot. And while it’s a thrilling development, the inevitable rise of quantum computing means security teams are one step closer to...

Locking down your cyber life in lockdown

Today the NCSC refreshed their advice for online shoppers, so I thought it’d be handy to review and advise on other aspects of consumer security hygiene. More than ever, we’re reliant on technology, so now that we’re in various stages of lockdown it’s a great time to have a look at your home and...

The vulnerability of the DCH-compatible Thunderbolt driver, related to a breach of the data protection mechanism, allows an attacker to disclose protected information.

The vulnerability of the DCH-compatible Thunderbolt driver is related to a violation of data protection mechanisms. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of the GENEVE protocol implementation in the Linux operating system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the GENEVE protocol’s implementation in Linux kernel systems is related to the lack of protection for transmitted data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Vulnerability of the Server component: Security: Privileges of the MySQL Server database management system, which allows attackers to gain unauthorized access to protected information.

The vulnerability of the MySQL Server component relates to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...