Beyond Speed and Reliability: Security Is a New Differentiator

Homes have always been hubs; now they're even more so. Some jobs shifted to work from home, and many children are experiencing distance learning at bedroom desks or kitchen tables or whatever is available. Traditional workplaces like large businesses, government agencies, and other organizations...

Internet Freedom Has Taken a Hit During the Covid-19 Pandemic

From surveillance to arrests, governments are using the novel coronavirus as cover for a crackdown on digital liberty...

The vulnerability of the IPv6 traffic processing service of the StarOS operating system, allowing a hacker to trigger a service failure

The vulnerability of the IPv6 traffic processing service of the StarOS operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Adobe Flash Player Microsoft Edge and Internet Explorer Security Update (APSB20-58) - Windows

Adobe Flash Player is prone to an arbitrary code execution vulnerability. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is fr...

The vulnerability of the IPv6 traffic processing service of the StarOS operating system, allowing a hacker to trigger a service failure

The vulnerability of the IPv6 traffic processing service of the StarOS operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

DEBIAN-CVE-2020-25645

A flaw was found in the Linux kernel in versions before 5.9-rc7. Traffic between two Geneve endpoints may be unencrypted when IPsec is configured to encrypt traffic for the specific UDP port used by the GENEVE tunnel allowing anyone between the two endpoints to read the traffic unencrypted. The...

October 13, 2020—KB4580353 (Security-only update)

None None...

October 13, 2020—KB4580328 (OS Build 16299.2166)

None None...

October 13, 2020—KB4580327 (OS Build 10240.18725) - EXPIRED

None None...

October 13, 2020—KB4580382 (Monthly Rollup)

None None...

Directory Traversal Vulnerability in Zhiyuan A8

Beijing Zhiyuan Internet Software Co., Ltd Zhiyuan Internet is a high-tech enterprise integrating product design, research and development, sales and service, providing customers with professional collaborative management software products, solutions, platforms and cloud services, and is a...

PT-2020-4249 · Microsoft · Windows Tcp/Ip Stack +1

Name of the Vulnerable Software and Affected Versions: Windows TCP/IP stack affected versions not specified Description: A remote code execution issue exists due to improper handling of ICMPv6 Router Advertisement packets by the Windows TCP/IP stack. This allows an attacker to execute arbitrary...

Visualize Visitor Prioritization in Real Time with mPulse

The internet has become one of the most important access points in our daily lives. Unexpected surges in demand can slow web pages and create service outages for unprepared websites. A poor user experience leads to dissatisfied customers, making it more critical than ever to visualize and control...

Split-Second ‘Phantom’ Images Can Fool Tesla’s Autopilot

Researchers found they could stop a Tesla by flashing a few frames of a stop sign for less than half a second on an internet-connected billboard...

SQL Injection Vulnerability in the Management Platform of Internet Service Establishments of Harbin Zhonglong Baiying Technology Development Co.

Harbin Zhonglong Baiying Technology Development Co., Ltd. was founded on May 29, 2013, mainly engaged in computer hardware and software, office automation equipment, security equipment and so on. Harbin Zhonglong Baiying Technology Development Co., Ltd. has a SQL injection vulnerability in the...

Cisco Video Surveillance 8000 Series IP Cameras Resource Management Error Vulnerability

Cisco Video Surveillance 8000 Series IP Cameras is a video surveillance camera from Cisco USA. A resource management error vulnerability exists in Cisco Video Surveillance 8000 Series IP Cameras. The vulnerability arises from improper management of system resources e.g., memory, disk space, files...

Metasploit Wrap-Up

SAP Internet Graphics Server IGS This week includes a new module targeting the SAP Internet Graphics Server application, contributed by community member Vladimir Ivanov. This particular module covers two CVEs that are both XML External Entity XXE bugs that are remotely exploitable. The module com...

NICER Protocol Deep Dive: Internet Exposure of VNC

Welcome to the NICER Protocol Deep Dive blog series! When we started researching what all was out on the internet way back in January, we had no idea we'd end up with a hefty, 137-page tome of a research report. The sheer length of such a thing might put off folks who might otherwise learn a thin...

Cyber Security Awareness: A Critical Checklist

October 2020 marks the 17th year of National CyberSecurity Awareness Month, where users and organizations are encouraged to double their efforts to be aware of cybersecurity issues in all their digital dealings—and to take concrete steps to increase their privacy and security as necessary. The...

Moderate: Red Hat Security Advisory: bind security update

An update for bind is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...