The vulnerability of the Active Directory LDAP server component in Samba networking software allows a perpetrator to gain unauthorized access to confidential data.

The vulnerability of the Samba network communication software component of the Active Directory LDAP server is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential data...

The vulnerability of the Windows Modules Installer service in Windows operating systems allows a hacker to gain unauthorized access to protected data.

The vulnerability of the Windows Modules Installer service in Windows operating systems is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected data through a specially created application...

Vulnerability of the Server:Security:Encryption component of the Oracle MySQL database management system, which allows a hacker to gain unauthorized access to confidential data

The vulnerability of the Server:Security:Encryption component of the Oracle MySQL database management system is related to the lack of protection for operational data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential data...

The vulnerability of the SAP Business One resource management system, related to the lack of protection for operational data, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the SAP Business One resource management system is related to the lack of protection for operational data. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

Privacy Experts Skeptical of Proposed Data Protection Agency

A new federal bureaucracy, the Data Protection Agency DPA, has been proposed to completely revamp how the U.S. government regulates data collection and misuse by big tech companies. However, while privacy experts call the agency a “good first step,” they remain skeptical about how effective it...

A US Data Protection Agency

The United States is one of the few democracies without some formal data protection agency, and we need one. Senator Gillibrand just proposed creating one...

CVE-2020-2132

CVE-2020-2132 affects Jenkins Parasoft Environment Manager Plugin 2.14 and earlier. The vulnerability stems from passwords stored unencrypted in job config.xml on the Jenkins master, allowing access by users with Extended Read permission or those with master-file access. Impact described in sourc...

How to Manage Your Privacy On and Off Facebook

Social media has come a long way in a short space of time. In a little over a decade, it’s grown from being the preserve of a relatively small group of online enthusiasts to one of the defining trends of 21st century life. As the undisputed global leader in this field, Facebook now boasts nearly...

The vulnerability of the Automated Note Search Tool component of the SAP Basis system management platform allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Automated Note Search Tool component of the SAP Basis system management platform is related to the lack of protection for operational data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

Security Bulletin: Sensitive data protection vulnerability affects IBM Sterling B2B Integrator (CVE-2017-1349)

Summary IBM Sterling B2B Integrator Standard Edition stores potentially sensitive information from HTTP sessions that could be read by a local user. Vulnerability Details CVEID: CVE-2017-1349 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition stores potentially sensitive information from...

CVE-2019-15126 aka Kr00k

An issue was discovered on Broadcom Wi-Fi client devices. Specifically timed and handcrafted traffic can cause internal errors related to state transitions in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure over the air for a...

Washington Privacy Act welcomed by corporate and nonprofit actors

The steady parade of US data privacy legislation continued last month in Washington with the introduction of an improved bill that would grant state residents the rights to access, control, delete, and port their data, as well as opting out of data sales. The bill, called the Washington Privacy...

Changing the Monolith—Part 3: What’s your process?

In my 25-year journey, I have led security and privacy programs for corporations and provided professional advisory services for organizations of all types. Often, I encounter teams frantically running around in their own silos, trying to connect the dots and yet unsure if those are the right dot...

Cyber-risk assessments—the solution for companies in the Fourth Industrial Revolution

Technology continues to play a critical role in shaping the global risks landscape for individuals, governments, and businesses. According to the World Economic Forum's Global Risks Report 2020, cyberattacks are ranked as the second risk of greatest concern for business globally over the next 10...

How to Get the Most Out of Your Smartphone's Encryption

Both iPhones and Androids are encrypted by default. But there are steps you can take to safeguard your data on backups and messaging apps...

The vulnerability of the sub-component of the Infrastructure component of the Oracle FLEXCUBE Universal Banking banking analytics system, a simulation modeling application of Oracle Financial Services, allows a perpetrator to gain access to read data or modify data.

The vulnerability of the Infrastructure sub-component of the Oracle FLEXCUBE Universal Banking component, a banking analytics system for simulation-based modeling by Oracle Financial Services Applications, is related to the lack of protection for operational data. Exploiting this vulnerability...

The vulnerability of Linux operating system kernels, related to the lack of protection for service data, allows attackers to gain unauthorized access to protected information.

The vulnerability of Linux operating system kernels is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information using a USB device driver drivers/net/can/usb/kvaserusb/kvaserusbleaf.c driver...

The vulnerability of the Core component in Oracle VM VirtualBox, which allows a hacker to disclose protected information

The vulnerability of the Core component in Oracle VM VirtualBox is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of the Core component in Oracle VM VirtualBox, which allows a hacker to disclose protected information

The vulnerability of the Core component in Oracle VM VirtualBox is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Core component of the Oracle VM VirtualBox software relates to the lack of protection for operational data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...