Becton Dickinson Pyxis Registration Data Access

The vulnerability of Becton Dickinson’s Pyxis software for managing medications and related supplies is related to insufficient protection of registration data. Exploiting this vulnerability could allow an intruder to gain unauthorized access to electronically protected medical information...

Google Pixel 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an information disclosure vulnerability. The vulnerability stems from inadequate protection of sensitive information and can be exploited by attackers to obtain sensitive information...

Modicon M241/M251 Registration Data Protection

The vulnerability of the microprogrammed logic controllers Modicon M241 and Modicon M251 is related to insufficient protection for registration data. Exploiting this vulnerability can allow an attacker, operating remotely, to intercept login credentials and gain access to the web application...

“Orwellian in the extreme” food store installs facial recognition cameras to stop crime, faces backlash

A convenience shop chain is under fire and facing legal charges for installing cameras with facial recognition software in 35 of its branches across the UK. The cameras analyze and convert video face captures into biometric data. The data is compared with a database of people who have committed...

FileWave Cross-platform Cryptographic Key Access

The vulnerability of the cross-platform solution for managing mobile devices by FileWave lies in the use of a rigidly encrypted cryptographic key. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to the protected information...

Dell EMC Data Protection Advisor 跨站脚本漏洞

Dell EMC Data Protection Advisor is a data protection management solution from Dell Dell. The product supports features such as data backup, data recovery and data replication management. Dell EMC Data Protection Advisor: A cross-site scripting vulnerability exists in versions 19.0 through 19.6,...

solid-state storage devices like Privilege Escalation

The vulnerability of Intel SSD microprogramming software is related to the lack of protection for operational data. Exploiting this vulnerability can allow attackers to enhance their privileges and gain unauthorized access to protected information...

solid-state storage devices like Privilege Escalation

The vulnerability of Intel SSD microprogramming software is related to the lack of protection for operational data. Exploiting this vulnerability can allow attackers to enhance their privileges and gain unauthorized access to protected information...

Discover 5 lessons Microsoft has learned about compliance management

Compliance management is a complex process—one that gets increasingly more complicated the larger an organization grows. Microsoft knows this firsthand, not only because of our experience providing Security and Compliance solutions to customers but also because of the global reach and...

CVE-2022-33935

Dell EMC Data Protection Advisor versions 19.6 and earlier, contains a Stored Cross Site Scripting, an attacker could potentially exploit this vulnerability, leading to the storage of malicious HTML or JavaScript codes in a trusted application data store. When a victim user accesses the data stor...

The winding road to compliance

“Here are the keys. Buy milk and bread. Drive safely.” These are important instructions for a new driver tasked with running an errand. But unless the driver knows where they are going, a bit of guidance on how to get to the store can only help. Without it, the driver may complete the errand...

Congress Might Pass an Actually Good Privacy Bill

A bill with bipartisan support might finally give the US a strong federal data protection law...

CVE-2022-34367

Dell EMC Data Protection Central versions 19.1, 19.2, 19.3, 19.4, 19.5, 19.6, contains a Cross-Site Request Forgery Vulnerability. An remote unauthenticated attacker could potentially exploit this vulnerability, leading to processing of unintended server operations...

CVE-2022-34367

Dell EMC Data Protection Central versions 19.1, 19.2, 19.3, 19.4, 19.5, 19.6, contains a Cross-Site Request Forgery Vulnerability. An remote unauthenticated attacker could potentially exploit this vulnerability, leading to processing of unintended server operations...

Cross site request forgery (csrf)

Dell EMC Data Protection Central versions 19.1, 19.2, 19.3, 19.4, 19.5, 19.6, contains a Cross-Site Request Forgery Vulnerability. An remote unauthenticated attacker could potentially exploit this vulnerability, leading to processing of unintended server operations...

AutoSupport Status Tracking Unauthorized Access

The vulnerability of the AutoSupport system monitoring mechanism implemented in the Active IQ Unified Manager software for managing storage system status and performance, as well as in Lenovo ThinkSystem DM series storage systems, is related to insufficient protection of operational data...

Dell EMC Data Protection Central 跨站请求伪造漏洞

Dell EMC Data Protection Central is a management console from Dell USA Inc. It is used for data protection. A security vulnerability exists in Dell EMC Data Protection Central versions 19.1, 19.2, 19.3, 19.4, 19.5, and 19.6 that stems from the inclusion of a cross-site request forgery...

CVE-2022-34367

Dell EMC Data Protection Central versions 19.1, 19.2, 19.3, 19.4, 19.5, 19.6, contains a Cross-Site Request Forgery Vulnerability. An remote unauthenticated attacker could potentially exploit this vulnerability, leading to processing of unintended server operations...

CVE-2022-34367

CVE-2022-34367 affects Dell EMC Data Protection Central versions 19.1–19.6. The vulnerability is a Cross‑Site Request Forgery (CSRF) that could allow a remote unauthenticated attacker to trigger unintended server operations. Exploitation details are not provided in the documents; the impact is de...

A Data-Centric Cybersecurity Framework for Digital Transformation

In this white paper A Cybersecurity Framework for Securing Cloud Data for Digital Transformation, analyst Richard Steinnon of IT Harvest explains that while cloud vendors supply a resilient and secure infrastructure, organizations who put data into the cloud are ultimately responsible for...