The vulnerability of the Analytics Web General component of the Oracle Business Intelligence Enterprise Edition software platform allows a hacker to gain full control over the application.

The vulnerability of the Analytics Web General component of the Oracle Business Intelligence Enterprise Edition software exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain full control over the application throug...

[Security Nation] Steve Micallef of SpiderFoot on Open-Source Intelligence

!\Security Nation\ Steve Micallef of SpiderFoot on Open-Source Intelligencehttps://blog.rapid7.com/content/images/2022/06/securitynationlogo-1.jpg In this episode of Security Nation, Jen and Tod chat with Steve Micallef about SpiderFoot, the open-source intelligence tool of which he is the creato...

Meet the Administrators of the RSOCKS Proxy Botnet

Authorities in the United States, Germany, the Netherlands and the U.K. last week said they dismantled the "RSOCKS" botnet, a collection of millions of hacked devices that were sold as "proxies" to cybercriminals looking for ways to route their malicious traffic through someone elses computer...

The Power and Pitfalls of AI for US Intelligence

Artificial intelligence use is booming, but it's not the secret weapon you might imagine...

Malicious code in app_intelligence (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 56873ba55df0a42a20f48b534731709ae4f5db6282686aca54dd6ff02a3a86eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in calculator_artificialinteligence (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3682963f66b81c3c337acfa4d153dc6eca46b85977ccf428a6feb1896ab645a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

What is the Essential Eight (And Why Non-Aussies Should Care)

In 2017, The Australian Cyber Security Center ACSC published a set of mitigation strategies that were designed to help organizations to protect themselves against cyber security incidents. These strategies, which became known as the Essential Eight, are designed specifically for use on Windows...

Weekly Digest 30 May – 5 June 2022

Published Vulnerabilities Interesting Vulnerabilities Active Threat Groups Targeted Countries Targeted Industries ATT&CK TTPs 412 24 1 45 3 13 For a detailed threat digest, download the pdf file here Summary The first week of June 2022 witnessed the discovery of 412 vulnerabilities out of which 2...

U.S. Agencies Warn About Chinese Hackers Targeting Telecoms and Network Service Providers

U.S. cybersecurity and intelligence agencies have warned about China-based state-sponsored cyber actors leveraging network vulnerabilities to exploit public and private sector organizations since at least 2020. The widespread intrusion campaigns aim to exploit publicly identified security flaws i...

Samsung mobile 安全漏洞

Samsung mobile is a South Korean cell phone from Samsung. A security vulnerability exists in Samsung mobile SecSettingsIntelligence SMR prior to Jun-2022 Release 1, which arises from an unprotected component vulnerability in DeviceSearchTrampoline that allows local attackers to initiate activity ...

CVE-2020-6220

BI Launchpad and CMC in SAP Business Objects Business Intelligence Platform, versions 4.1, 4.2, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability. Exploit is possible only when the bttoken in victim’s session is active...

CVE-2020-6220

BI Launchpad and CMC in SAP Business Objects Business Intelligence Platform, versions 4.1, 4.2, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting XSS vulnerability. Exploit is possible only when the bttoken in victim’s session is active...

CVE-2020-6220

The CVE-2020-6220 issue affects SAP BusinessObjects BI Platform, specifically BI Launchpad and CMC, versions 4.1 and 4.2. Affected component(s) are parts that process user input, where insufficient encoding of user-controlled inputs leads to a Cross‑Site Scripting (XSS) vulnerability. The exploit...

Arbitrary File Download Vulnerability in HeartStone OA 2022 Early Summer Dragon Boat Festival Edition

Mindtone OA is an office software equipped with AI artificial intelligence. An arbitrary file download vulnerability exists in Heartland OA 2022 Early Summer Dragon Boat Festival Edition, which can be exploited by attackers to obtain sensitive information...

Microsoft Blocks Iran-linked Lebanese Hackers Targeting Israeli Companies

Microsoft on Thursday said it took steps to disable malicious activity stemming from abuse of OneDrive by a previously undocumented threat actor it tracks under the chemical element-themed moniker Polonium. In addition to removing the offending accounts created by the Lebanon-based activity group...

Trellix Global Defenders: Follina — Microsoft Office Zero-Day (CVE-2022-30190)

Trellix Global Defenders: Follina — Microsoft Office Zero-Day CVE-2022-30190 By Taylor Mullins, Robin Noyce, Benjamin Marandel · June 3, 2022 Trellix is continuing to monitor the threat activity associated with the Microsoft Office Zero-Day vulnerability that has been dubbed “Follina.”...

Exposing POLONIUM activity and infrastructure targeting Israeli organizations

Microsoft successfully detected and disabled attack activity abusing OneDrive by a previously undocumented Lebanon-based activity group Microsoft Threat Intelligence Center MSTIC tracks as POLONIUM. The associated indicators and tactics were used by the OneDrive team to improve detection of attac...

Exposing POLONIUM activity and infrastructure targeting Israeli organizations

Microsoft successfully detected and disabled attack activity abusing OneDrive by a previously undocumented Lebanon-based activity group Microsoft Threat Intelligence Center MSTIC tracks as POLONIUM. The associated indicators and tactics were used by the OneDrive team to improve detection of attac...

Being Prepared for Adversarial Attacks

There is no question that the level of threats facing today’s businesses continues to change on a daily basis. So what are the trends that CISOs need to be on the lookout for? For this episode of the Threatpost podcast, I am joined by Derek Manky, Chief Security Strategist & VP Global Threat...

The vulnerability of the Security Intelligence channel function in Cisco Firepower Threat Defense’s microprogramming-based network interface devices allows attackers to bypass the DNS channel of Security Intelligence.

The vulnerability of the Security Intelligence channel function in Cisco Firepower Threat Defense’s microprogramming system is related to the improper processing of unexpected data types. Exploiting this vulnerability can allow a malicious actor to bypass the Security Intelligence DNS channel by...