10351 matches found
CVE-2021-28950
A denial of service in the kernel side of the FUSE functionality can allow a local system to create a denial of service. Mitigation As the FUSE module will be auto-loaded when required, its use can be disabled by preventing the module from loading with the following instructions: echo "install fu...
Operation Dianxun Cyberespionage Campaign Targeting Telecommunication Companies
ARCHIVED STORY Operation Diànxùn: Cyberespionage Campaign Targeting Telecommunication Companies By Thomas Roccia · MAR 16, 2021 In this report the McAfee Advanced Threat Research ATR Strategic Intelligence team details an espionage campaign, targeting telecommunication companies, dubbed Operation...
How Akamai Can Help You Fight the Latest Exploitation Attempts Against Microsoft Exchange
Co-authored by Ryan Barnett. AppSec Protections for Microsoft Exchange CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, CVE-2021-27065 On March 2, 2021, the Microsoft Security Response Center alerted its customers to several critical security updates to Microsoft Exchange Server, addressing...
Women in Security Part 2: Meet Suzanne Hall, Global CISO and VP, Technology at Circle K Stores
This post is part of our Women’s History Month series - follow along with us on Twitter @VMwareCarbonBlack In celebration of Women’s History Month, we’re continuing our six-part Women in Security series by highlighting a VMware Carbon Black customer who is making her mark on the security industry...
CEO of Encrypted Chat Platform Indicted for Aiding Organised Criminals
The U.S. Department of Justice DoJ on Friday announced an indictment against Jean-Francois Eap, the CEO of encrypted messaging company Sky Global, and an associate for wilfully participating in a criminal enterprise to help international drug traffickers avoid law enforcement. Eap also known as...
SYS.2.3.A7
Es SOLLTE sichergestellt werden, dass Dienste und Anwendungen nur die ihnen zugeordneten Dateien erstellen, veraendern oder loeschen duerfen. Auf Verzeichnissen, in denen alle Benutzer Schreibrechte haben z. B. /tmp, SOLLTE das Sticky Bit gesetzt werden. SPDX-FileCopyrightText: 2021 Greenbone AG...
FIN8 Resurfaces with Revamped Backdoor Malware
The FIN8 cyberattack group has resurfaced after a period of relative quiet, researchers have found. The gang is using new versions of the BadHatch backdoor to compromise companies in the chemical insurance, retail and technology industries. The attacks have been seen hitting organizations around...
EulerOS Virtualization 3.0.2.6 : libxml2 (EulerOS-SA-2021-1415)
According to the version of the libxml2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - GNOME project libxml2 v2.9.10 has a global buffer over-read vulnerability in xmlEncodeEntitiesInternal at libxml2/entities.c. The...
Warning the World of a Ticking Time Bomb
Globally, hundreds of thousand of organizations running Exchange email servers from Microsoft just got mass-hacked, including at least 30,000 victims in the United States. Each hacked server has been retrofitted with a "web shell" backdoor that gives the bad guys total, remote control, the abilit...
The Accellion Breach Keeps Getting Worse—and More Expensive
What started as a few vulnerabilities in firewall equipment has snowballed into a global extortion spree...
Microsoft Exchange Cyber Attack — What Do We Know So Far?
Microsoft on Friday warned of active attacks exploiting unpatched Exchange Servers carried out by multiple threat actors, as the hacking campaign is believed to have infected tens of thousands of businesses, government entities in the U.S., Asia, and Europe. The company said "it continues to see...
CVE-2021-27363
An issue was discovered in the Linux kernel through 5.11.3. A kernel pointer leak can be used to determine the address of the iscsitransport structure. When an iSCSI transport is registered with the iSCSI subsystem, the transport's handle is available to unprivileged users via the sysfs file...
Huawei EulerOS: Security Advisory for libxml2 (EulerOS-SA-2021-1415)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CISA Orders Fed Agencies to Patch Exchange Servers
Hot on the heels of Microsoft’s announcement about active cyber-espionage campaigns that are exploiting four serious security vulnerabilities in Microsoft Exchange Server, the U.S. government is mandating patching for the issues. The news comes as security firms report escalating numbers of relat...
Bad Bot Traffic on Healthcare Websites Rises 372% As Vaccines Become Available Globally
Nations around the world are racing to acquire COVID-19 vaccines and assemble digital infrastructure and web applications to enable appointment booking. As they do this, Imperva Research Labs has monitored a staggering 372% increase in bad bot traffic on healthcare websites globally since Septemb...
jenkins: Path traversal vulnerability in agent names
A flaw was found in jenkins. Users with Agent/Configure permissions can choose agent names that cause an override to the global config.xml file. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...
jenkins: Path traversal vulnerability in agent names
A flaw was found in jenkins. Users with Agent/Configure permissions can choose agent names that cause an override to the global config.xml file. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...
Women in Security: Celebrating Women’s History Month
In celebration of Women’s History Month, we are honoring all of the women at VMware who inspire, lead, innovate and set the stage for the next generation to come. In a six-part series, we will highlight some of the outstanding women in security that are playing a significant role in keeping the...
Wizards 2020: Celebrating a community of innovators!
Wizards is a global ideation program that allows Akamai employees to submit their innovative ideas and contribute to the business transformation of Akamai. The program has been running for eight years and has received more than 5000 idea submissions. We are proud that Akamai products like Page...
