11543 matches found
MAL-2025-129 Malicious code in jssdk-infrastructure (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 80c132d5e9d9ea8c65f7c252909ff66d20a611adce2c58734305e4fe06254319 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
dogtag-pki pki-core Auth Bypass Privilege Escalation
The vulnerabilities of dogtag-pki and pki-core involve bypassing authentication due to a fundamental flaw. Exploiting these vulnerabilities can allow attackers who operate remotely to gain increased privileges...
Dell VxRail Information Disclosure
The vulnerability of the Dell VxRail hyper-converged infrastructure is related to the unencrypted storage of critical information. Exploiting this vulnerability could allow an attacker to disclose the protected data...
North Korean IT Worker Fraud Linked to 2016 Crowdfunding Scam and Fake Domains
Cybersecurity researchers have identified infrastructure links between the North Korean threat actors behind the fraudulent IT worker schemes and a 2016 crowdfunding scam. The new evidence suggests that Pyongyang-based threamoret groups may have pulled off illicit money-making scams that predate...
The High-Stakes Disconnect For ICS/OT Security
Why does ICS/OT need specific controls and its own cybersecurity budget today? Because treating ICS/OT security with an IT security playbook isn't just ineffective—it's high risk. In the rapidly evolving domain of cybersecurity, the specific challenges and needs for Industrial Control Systems ICS...
CISA: Protecting Infrastructure during Public Demonstrations Fact Sheet
System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...
CISA: Strategies for Effectively Blending Cyber and Physical Security within Critical Infrastructure
System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...
CISA: Election Infrastructure Security Resource Guide
System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...
CISA: How Multinational Critical Infrastructure Corporations Protect Intellectual Property from Theft and Espionage
System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...
CISA: DHS Election Infrastructure Security Funding Consideration
System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...
CISA Releases the Cybersecurity Performance Goals Adoption Report
Today, CISA released the Cybersecurity Performance Goals Adoption Report to highlight how adoption of Cybersecurity Performance Goals CPGs benefits our nation’s critical infrastructure sectors. Originally released in October 2022, CISA’s CPGs are voluntary practices that critical infrastructure...
Hands-On Walkthrough: Microsegmentation For all Users, Workloads and Devices by Elisity
Network segmentation remains a critical security requirement, yet organizations struggle with traditional approaches that demand extensive hardware investments, complex policy management, and disruptive network changes. Healthcare and manufacturing sectors face particular challenges as they...
UBUNTU-CVE-2024-48943
A malicious RPKI rsync repository can prevent Fort from finishing its validation run by drip-feeding its content...
Thousands of Live Hacker Backdoors Found in Expired Domains
SUMMARY Cybersecurity researchers at watchTowr have identified over 4,000 live hacker backdoors, exploiting abandoned infrastructure and expired domains.…...
Dell VxRail 安全漏洞
Dell VxRail is a hyper-converged infrastructure HCI solution jointly designed by Dell Technologies and VMware, optimized for VMware workloads for virtualized applications, cloud computing and hybrid cloud management. Dell VxRail suffers from a plaintext storage password vulnerability that could b...
U.S. Sanctions Chinese Cybersecurity Firm Over Cyberattacks
US sanctions Beijing-based Integrity Technology Group for aiding "Flax Typhoon" hackers in cyberattacks on American infrastructure, freezing assets…...
10 Non-tech things you wish you had done after being breached
TL;DR Non-tech aspects to breach follow-up are often overlooked but essential NDAs, supply chain, and third party contracts and obligations should be reviewed Reviewing communication protocols and employee training increases resilience Looking after, and retaining your people improves recovery fo...
UBUNTU-CVE-2024-55553
In FRRouting FRR before 10.3 from 6.0 onward, all routes are re-validated if the total size of an update received via RTR exceeds the internal socket's buffer size, default 4K on most OSes. An attacker can use this to trigger re-parsing of the RIB for FRR routers using RTR by causing more than th...
USN-7184-1 linux-aws, linux-kvm vulnerabilities
Ziming Zhang discovered that the VMware Virtual GPU DRM driver in the Linux kernel contained an integer overflow vulnerability. A local attacker could use this to cause a denial of service system crash. CVE-2022-36402 Zheng Wang discovered a use-after-free in the Renesas Ethernet AVB driver in th...
