5885 matches found
Microsoft Windows Defender Unauthorized Access
The vulnerability of Microsoft Windows Defender operating system lies in the lack of protection for service data. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...
Nearly 2,000 Signal users affected by Twilio phishing attack
New findings following the Twilio phishing attack revealed that Signal, one of its high-value clients and a popular encrypted messaging platform, was particularly affected. 1,900 of its users had their phone numbers and SMS registration codes exposed. However, Signal reassured users that the...
VMware vRealize Operations Monitoring Tool Unauthorized Access
The vulnerability of the monitoring tool for VMware vRealize Operations is related to insufficient protection of registration data. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...
Linux eBPF Disclosure
The vulnerability of the eBPF subsystem in the Linux operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose the protected information...
EcoStruxure Control Expert RemoteConnect Unauthenticated Access
The vulnerabilities of the PLC programming software EcoStruxure Control Expert, the automation system ProcessExpert, and the configuration software SCADAPack RemoteConnect are related to insufficient protection for registration data. Exploiting these vulnerabilities can allow attackers to gain...
Three Keys to Turning Data-centric Security Theory into Practice
Most cybersecurity professionals agree that as more organizations move data and applications to cloud-hosted environments, traditional measures focusing on protecting IT infrastructures are not up to the task. In fact, according to Crowd Research Partners, 84 percent of organizations say...
Windows GDI+ Unauthorized Access
The vulnerability of the Windows GDI+ component in Windows operating systems is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
Cybersecurity and PR: Making Data Protection Public
The customer cares Customers regularly see news about privacy and hacking, and they want to know that it’s safe for them to give over their personal data. A lack of trust in an eCommerce site is a leading reason why potential customers abandon their shopping carts. Consumers have no shortage of...
Jenkins Compuware zAdviser API Plugin Unauthorized Access
The vulnerability of the Jenkins Compuware zAdviser API Plugin is related to a flaw in the data protection mechanism. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to the protected information regarding system settings...
Jenkins Compuware ISPW Operations Plugin Data Protection Violation
The vulnerability of the Jenkins Compuware ISPW Operations Plugin is related to a breach of data protection mechanisms. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to protected system configuration information...
Why Cybersecurity Needs to be a Part of Your ESG
What is an ESG? Environmental, social, and corporate governance ESG documentation is a way to visualize and evaluate how an organization is working for the betterment of social goals and how that organization is responding to the cry for greener, more aware, and more responsible, sustainable...
PT-2022-4272 · Microsoft · Windows Defender +1
Name of the Vulnerable Software and Affected Versions: Windows Defender affected versions not specified Description: The issue is related to a lack of protection for sensitive data in Windows Defender, which could allow an attacker to obtain unauthorized access to protected information. This coul...
PT-2022-4306 · Microsoft · Azure Sphere
Name of the Vulnerable Software and Affected Versions: Azure Sphere affected versions not specified Description: The issue is related to a lack of protection for service data in the Azure Sphere operating system. Exploitation of this issue may allow an attacker to gain unauthorized access to...
PT-2022-4262
Name of the Vulnerable Software and Affected Versions Windows Defender affected versions not specified Description The issue is related to a lack of protection for service data in Windows Defender, which could allow an attacker to gain unauthorized access to a device. It enables attackers to obta...
PT-2022-4273 · Microsoft · Windows Defender +1
Name of the Vulnerable Software and Affected Versions: Windows Defender affected versions not specified Description: The issue is related to a lack of protection for sensitive data in Windows Defender, which could allow an attacker to obtain unauthorized access to protected information. This may...
PT-2022-4229
Name of the Vulnerable Software and Affected Versions VMware vRealize Operations affected versions not specified Description The issue is related to insufficient protection of registration data, which can lead to information disclosure. A low-privileged malicious actor with network access can...
Five Data Security Controls and Processes you Must Bring to Cloud-native Infrastructures
Too frequently, there are significant misunderstandings in organizations with regard to who has the responsibility to protect cloud-hosted data. In Imperva’s recent report, A Data-Centric Cybersecurity Framework for Digital Transformation, IT analyst and author Richard Stiennon explains what...
Research Shows the Annual Cost of API Security-related Breaches is Mind-blowing
Application Programming Interfaces APIs have emerged as useful tools that streamline business operations and enhance the digital experience for customers. As their use has become more widespread, they are a much more prominent part of the cyber threat landscape. API-related hacks and data breache...
L2TP Code Execution
The vulnerability of the Layer 2 Tunneling Protocol L2TP implementation in Windows operating systems is related to insufficient protection for confidential data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
