Important: Red Hat Security Advisory: kernel-rt security and bug fix update

An update for kernel-rt is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

Wallarm NG-WAF is Now a Part of Kong Hub to Provide Better Protection for Microservices, APIs and…

Wallarm NG-WAF is Now a Part of Kong Hub to Provide Better Protection for Microservices, APIs and Serverless Thousands of companies from startups to Fortune 500 enterprises use Kong as their API gateway. With a blazingly fast performance, it comes with a perfect feature set for everyone who manag...

Microsoft Windows Defender AV: Turn on process scanning whenever real-time protection is enabled

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winavprocessscanningrealtimeprotection.nasl 11495 2018-09-20 10:06:25Z emoss $ Check value for Turn on process scanning whenever real-time protection is enabled Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone...

Microsoft Windows Defender AV: Monitor file and program activity on your computer

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winavmonitorfileprogramactivity.nasl 11495 2018-09-20 10:06:25Z emoss $ Check value for Monitor file and program activity on your computer Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

Microsoft Windows Defender AV: Turn on behavior monitoring

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winavbehaviormonitoring.nasl 11495 2018-09-20 10:06:25Z emoss $ Check value for Turn on behavior monitoring Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is...

Microsoft Windows Defender AV: Turn off real-time protection

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winavrealtimeprotection.nasl 11495 2018-09-20 10:06:25Z emoss $ Check value for Turn off real-time protection Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is...

Microsoft Windows Defender AV: Configure monitoring for incoming and outgoing file and program activity

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winavrealtimescandirection.nasl 11495 2018-09-20 10:06:25Z emoss $ Check value for Configure monitoring for incoming and outgoing file and program activity Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks...

Microsoft Windows Defender AV: Configure local setting override to turn on real-time protection

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winavoverriderealtimemonitoring.nasl 11495 2018-09-20 10:06:25Z emoss $ Check value for Configure local setting override to turn on real-time protection Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks Gmb...

Microsoft Windows Defender AV: Path Exclusions

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winavpathexclusions.nasl 11495 2018-09-20 10:06:25Z emoss $ Check value for Path Exclusions Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; yo...

Microsoft Windows Defender AV: Configure local setting override for monitoring for incoming and outgoing file activity

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winavoverriderealtimescandirection.nasl 11495 2018-09-20 10:06:25Z emoss $ Check value for Configure local setting override for monitoring for incoming and outgoing file activity Authors: Emanuel Moss Copyright: Copyright c...

Microsoft Windows Defender AV: Process Exclusions

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winavprocessexclusions.nasl 11495 2018-09-20 10:06:25Z emoss $ Check value for Process Exclusions Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

Office VBA + AMSI: Parting the veil on malicious macros

As part of our continued efforts to tackle entire classes of threats, Office 365 client applications now integrate with Antimalware Scan Interface AMSI, enabling antivirus and other security solutions to scan macros and other scripts at runtime to check for malicious behavior. Macro-based threats...

chromium-browser: Use after free in WebRTC

A use after free in WebRTC in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially exploit heap corruption via a crafted video file...

Google Chrome WebRTC Memory Misreference Vulnerability (CNVD-2018-20753)

Google Chrome is a web browser developed by Google, Inc. WebRTC is a component of the browser that supports real-time voice or video conversations. A memory misreference vulnerability exists in WebRTC in Google Chrome versions prior to 69.0.3497.81. No details of the vulnerability are provided at...

Google Chrome WebRTC Buffer Overflow Vulnerability

Google Chrome is a web browser developed by Google, Inc. WebRTC is a component of the browser that supports real-time voice or video conversations. A buffer overflow vulnerability exists in WebRTC in Google Chrome versions prior to 69.0.3497.81. An attacker can exploit the vulnerability to obtain...

How New Passive Network Sensor Boosts Platform Capabilities

Black Hat attendees got a peek at Qualys Passive Network Sensor PNS, a product that amplifies the already comprehensive IT asset visibility Qualys provides to its customers. By adding real-time network analysis to Qualys’ versatile set of sensors, PNS eliminates blind spots across IT environments...

Partner Perspectives: Creating Your Own Threat Hunting Army

Idan Bellayev is the head of security research for empow. Cyber intelligence is one of the strongest tools that can be used to combat a potential attacker. Accessing the information needed to build cyber intelligence from a reliable source is typically difficult and very expensive - but it doesn’...

Why Should CISOs Should Care About Live Query?

If you’re a CISO, you are most likely focused on three things: 1. Strong security efficacy 2. Operational efficiency 3. Business enablement To address this, many organizations are adding layers of security tools to their technology stack, putting stress on their security and IT operations teams,...

Real-time Media Engine (RTME) for Citrix Workspace App for Mac OS "unoptimized" or fails to install

When attempting to use the Citrix Workspace app 1808 for Mac with the Real-time Media Engine RTME 2.5 or previous versions , customers may experience the following symptoms: If an endpoint is upgraded to CWA from previous versions of Receiver, and they had the RTME 2.5 or previous version...

Schneider Pelco Sarix Pro camera snapshot.cgi has an unauthorized access vulnerability

Pelco Sarix Pro is a video surveillance device from Schneider Electric France. An unauthorized access vulnerability exists in the snapshot.cgi of the Schneider Pelco Sarix Pro camera. The vulnerability stems from the lack of privilege checks on the snapshot.cgi interface, which can be exploited b...