PT-2023-20554 · Watchguard · Watchguard Epdr

Name of the Vulnerable Software and Affected Versions: WatchGuard EPDR version 8.0.21.0002 Description: An issue was discovered in WatchGuard EPDR, where it is possible to bypass the defensive capabilities by adding a registry key as SYSTEM. Recommendations: For WatchGuard EPDR version 8.0.21.000...

Security Bulletin: Cross-Site Scripting Attacks (XSS) on Service Portal

Summary The Service Portal web application delivers data to its users along with other trusted dynamic content, without validating it. The regex-based input HTML replacement may turn sanitized code into un-sanitized code. Vulnerability Details Refer to the security bulletins listed in the...

Cisco Adaptive Security Appliance Detection

Binary data ciscoasadetect.nbin...

Sophos Intercept X Detection and Status

Binary data sophosinterceptxwinstatus.nbin...

SUSE SLES15 Security Update : kernel (Live Patch 13 for SLE 15 SP4) (SUSE-SU-2023:3922-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3922-1 advisory. This update for the Linux Kernel 5.14.21-1504002466 fixes several issues. The following security issues were fixed: - CVE-2023-3776: Fixed...

CVE-2023-33106

creationtimestamp| type| source ---|---|--- 2023-10-03 19:17:46+00:00| exploited| Telegram/Rxu4zo-zqPtpxwJhXuMIjF4FHa6XqkwC7R1LNZHIISepQ 2023-10-03 19:23:21+00:00| exploited| https://t.me/KomunitiSiber/881 2023-10-04 10:12:19+00:00| exploited| https://t.me/kasperskyb2b/917 2023-10-04...

CVE-2023-4929

creationtimestamp| type| source ---|---|--- 2023-10-03 18:46:19+00:00| seen| https://t.me/cibsecurity/71510...

Proactively Prevent Breaches with Expanded Endpoint Protection in Rapid7 MDR

Working with thousands of security and risk professionals across the globe, we know that complexity is the top challenge SOCs are facing today. As the attack surface rapidly expands, security teams need more effective ways to keep pace with digital transformation and get out of the cycle of...

Unlock Broader Detections and Forensics with Velociraptor in Rapid7 XDR

Nearly 70% of companies that are breached are likely to get breached again within twelve months CPO. Effective remediation and addressing attacks at the root is key to staying ahead of threats and recurring breaches on the endpoint. Strong Digital Forensics and Incident Response DFIR ready to go...

US Justice Department Urged to Investigate Gunshot Detector Purchases

A civil liberties group has asked the DOJ to investigate deployment of the ShotSpotter gunfire-detection system, which research shows is often installed in predominantly Black neighborhoods...

SUSE-SU-2023:3866-1 Security update for salt

This update for salt fixes the following issues: Security issues fixed: - CVE-2023-20897: Fixed DOS in minion return. bsc1214796, bsc1213441 - CVE-2023-20898: Fixed Git Providers can read from the wrong environment because they get the same cache directory base name. bsc1214797, bsc1193948 Bugs...

The Dark Side of Browser Isolation – and the Next Generation Browser Security Technologies

The landscape of browser security has undergone significant changes over the past decade. While Browser Isolation was once considered the gold standard for protecting against browser exploits and malware downloads, it has become increasingly inadequate and insecure in today's SaaS-centric world...

SUSE-SU-2023:3822-1 Security update for supportutils

This update for supportutils fixes the following issues: Security fixes: - CVE-2022-45154: Removed iSCSI passwords bsc1207598. Other Fixes: - Changes in version 3.1.26 + powerpc plugin to collect the slots and active memory bsc1210950 + A Cleartext Storage of Sensitive Information vulnerability...

SUSE-SU-2023:3803-1 Security update for supportutils

This update for supportutils fixes the following issues: Security Fixes: - CVE-2022-45154: Removed iSCSI passwords bsc1207598. Other fixes: - Changes in version 3.1.26 + powerpc plugin to collect the slots and active memory bsc1210950 + A Cleartext Storage of Sensitive Information vulnerability...

Malwarebytes MDR wins G2 awards for "Best ROI," "Easiest to Use," and more

Malwarebytes Managed Detection and Response MDR earned a placed in 12 new reports on G2s Fall 2023 reports, winning badges for "Easiest to do Business With," "Best Est. ROI," "Easiest to Use," and "Easiest Admin." Purpose-built for resource constrained teams, Malwarebytes MDR provides IT staff wi...

Slackware: Security Advisory (SSA:2023-269-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2023-20527 · Unknown · Quill-Mention

Name of the Vulnerable Software and Affected Versions: quill-mention versions prior to 4.0.0 Description: The issue is related to improper user-input sanitization, which can lead to Cross-site Scripting XSS attacks. This occurs via the renderList function. If the mentions list is sourced from...

Exploit for PHP External Variable Modification in Juniper Junos

CVE-2023-36845 Description CVE-2023-36845 represen...

Webinar: Bridging digital transformation & cybersecurity

Digital transformation may be revolutionizing businesses and the way we operate, but it also presents notable challenge: How can organizations stay secure amidst the ceaseless tide of change? Our latest Byte Into Security webinar has the answers. Meet the Experts Marcin Kleczynski, CEO of...

PT-2023-6033 · Apple · Macos Sonoma +5

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 17 iPadOS versions prior to 17 watchOS versions prior to 10 iOS versions prior to 16.7 iPadOS versions prior to 16.7 macOS Sonoma versions prior to 14 Description: The issue allows an app to identify what other apps a us...