Taiwanese PC Company MSI Falls Victim to Ransomware Attack

Taiwanese PC company MSI short for Micro-Star International officially confirmed it was the victim of a cyber attack on its systems. The company said it "promptly" initiated incident response and recovery measures after detecting "network anomalies." It also said it alerted law enforcement agenci...

Future Proof Your Business from Cybersecurity Threats

A recent global Trend Micro survey found that 53% of respondents said it’s impossible to future-proof cybersecurity due to evolving threats. Respectfully, we disagree. Discover best practices to shifting security left and future proofing your business against cybersecurity threats...

Cyber Insurance Coverage FAQ with DataStream CEO

To help organizations simplify the cyber insurance process and understand the must-have security controls involved, Trend Micro Cyber Risk Specialist, Vince Kearns, and Data Stream CEO and Co-Founder, Andy Anderson, examine cyber insurance coverage along with approaches to strengthening...

SUSE: Security Advisory (SUSE-SU-2023:1718-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

AMD Ryzen 2000 security vulnerabilities

AMD Ryzen is a central processing unit CPU from Ultraviolet Semiconductor AMD. A security vulnerability exists in AMD Ryzen™ 2000 that stems from inadequate control flow management in AmdCpmOemSmm. An attacker could exploit the vulnerability to tamper with the SMM handler to elevate privileges...

SUSE: Security Advisory (SUSE-SU-2023:1691-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fighting mercenaries with the Cybersecurity Tech Accord

Trend Micro co-Authors Cyber Mercenary Principles to help guide the technology industry and others in dealing with the growing market of cyber mercenaries...

Step Tools Third-Party

1. EXECUTIVE SUMMARY CVSS v3 2.2 ATTENTION: Low attack complexity Vendor: Step Tools, Inc Equipment: STEPTools ifcmesh library Vulnerability: Null Pointer Dereference 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to deny application usage when reading a...

Keysight N6845A Geolocation Server

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Keysight Technologies Equipment: N6854A Geolocation Sever Vulnerability: Deserialization of Untrusted Data 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to escalate privileges in...

SUSE: Security Advisory (SUSE-SU-2023:1628-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2023:0868-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2023:0795-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2023:0736-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2023:0781-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2023:0680-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

io.apiman:apiman-manager-api-micro (1.2.6.final), io.apiman:apiman-manager-api-war (1.2.6.final) +6 more potentially affected by CVE-2023-28640 via io.apiman:apiman-manager-api-rest-impl (1.2.6.final)

io.apiman:apiman-manager-api-rest-impl MAVEN version 1.2.6.final is affected by a known vulnerability. The following packages have a transitive dependency on io.apiman:apiman-manager-api-rest-impl and may be impacted: - io.apiman:apiman-manager-api-micro 1.2.6.final -...

io.apiman:apiman-distro-db (1.2.0.alpha1), io.apiman:apiman-distro-db-es (1.2.0.alpha1) +4 more potentially affected by CVE-2023-28640 via io.apiman:apiman-manager-api-rest-impl (1.2.0.alpha1)

io.apiman:apiman-manager-api-rest-impl MAVEN version 1.2.0.alpha1 is affected by a known vulnerability. The following packages have a transitive dependency on io.apiman:apiman-manager-api-rest-impl and may be impacted: - io.apiman:apiman-distro-db 1.2.0.alpha1 - io.apiman:apiman-distro-db-es...

io.apiman:apiman-distro-db (1.2.0.beta1), io.apiman:apiman-distro-db-es (1.2.0.beta1) +6 more potentially affected by CVE-2023-28640 via io.apiman:apiman-manager-api-rest-impl (1.2.0.beta1)

io.apiman:apiman-manager-api-rest-impl MAVEN version 1.2.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on io.apiman:apiman-manager-api-rest-impl and may be impacted: - io.apiman:apiman-distro-db 1.2.0.beta1 - io.apiman:apiman-distro-db-es...

io.apiman:apiman-distro-db (1.2.0.alpha3), io.apiman:apiman-distro-db-es (1.2.0.alpha3) +6 more potentially affected by CVE-2023-28640 via io.apiman:apiman-manager-api-rest-impl (1.2.0.alpha3)

io.apiman:apiman-manager-api-rest-impl MAVEN version 1.2.0.alpha3 is affected by a known vulnerability. The following packages have a transitive dependency on io.apiman:apiman-manager-api-rest-impl and may be impacted: - io.apiman:apiman-distro-db 1.2.0.alpha3 - io.apiman:apiman-distro-db-es...

io.apiman:apiman-distro-db (1.2.0.final), io.apiman:apiman-distro-db-es (1.2.0.final) +11 more potentially affected by CVE-2023-28640 via io.apiman:apiman-manager-api-rest-impl (1.2.0.final)

io.apiman:apiman-manager-api-rest-impl MAVEN version 1.2.0.final is affected by a known vulnerability. The following packages have a transitive dependency on io.apiman:apiman-manager-api-rest-impl and may be impacted: - io.apiman:apiman-distro-db 1.2.0.final - io.apiman:apiman-distro-db-es...