Cybersecurity Risk Management – From HIPAA to HITRUST

Cybersecurity risk management for healthcare organizations continues to be a perplexing issue. While it is explicit in the security management standard of the HIPAA Security Rule that a Covered Entity and their Business Associates must conduct an "accurate and thorough" risk analysis teamed with ...

CVE-2020-11108

The Gravity updater in Pi-hole through 4.4 allows an authenticated adversary to upload arbitrary files. This can be abused for Remote Code Execution by writing to a PHP file in the web directory. Also, it can be used in conjunction with the sudo rule for the www-data user to escalate privileges t...

SpamAssassin OS Command Injection

The vulnerability of spam filtering systems that use Perl-based text analysis, such as SpamAssassin, is related to incorrect configuration of malicious rules or configuration files, which may have been uploaded from the update server. Exploiting this vulnerability can allow a remote attacker to...

CVE-2020-11651

An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class does not properly validate method calls. This allows a remote user to access some methods without authentication. These methods can be used to retrieve user tokens from the...

Denial Of Service (DoS)

The kernel is vulnerable to denial of service DoS. A flaw was found in the Linux kernel's Integrity Measurement Architecture IMA implementation. When SELinux was disabled, adding an IMA rule which was supposed to be processed by SELinux would cause imamatchrules to always succeed, ignoring any...

YARA webinar follow up

If you read my previous blogpost Hunting APTs with YARA then you probably know about the webinar we conducted on March 31, 2020, showcasing some of our experience in developing and using YARA rules for malware hunting. In case you missed the webinar - or if you attended and want to re-watch it -...

openSUSE Security Update : spamassassin (openSUSE-2020-446)

This update for spamassassin fixes the following issues : Security issues fixed : - CVE-2018-11805: Fixed an issue with delimiter handling in rule files related to isregexpvalid bsc1118987. - CVE-2020-1930: Fixed an issue with rule configuration .cf files which can be configured to run system...

OPENSUSE-SU-2020:0446-1 Security update for spamassassin

This update for spamassassin fixes the following issues: Security issues fixed: - CVE-2018-11805: Fixed an issue with delimiter handling in rule files related to isregexpvalid bsc1118987. - CVE-2020-1930: Fixed an issue with rule configuration .cf files which can be configured to run system...

Security update for spamassassin (important)

openSUSE Security Update: Security update for spamassassin Announcement ID: openSUSE-SU-2020:0446-1 Rating: important References: 1118987 1162197 1162200 862963 Cross-References: CVE-2018-11805 CVE-2020-1930 CVE-2020-1931 Affected Products: openSUSE Leap 15.1 An update that solves three...

CVE-2020-7219

HashiCorp Consul and Consul Enterprise up to 1.6.2 HTTP/RPC services allowed unbounded resource usage, and were susceptible to unauthenticated denial of service. Fixed in 1.6.3. Mitigation Enforce network connection limits on Consul server agents by using the following iptables rule: iptables -A...

Command Execution Vulnerability in YKCMS v5 Backend Rule Management System

YKCMS5 is a film and television system specifically tailored for film and television collection. YKCMS v5 backend rules management system has a command execution vulnerability that can be exploited by attackers to obtain web server administrator privileges...

UBUNTU-CVE-2018-11802

In Apache Solr, the cluster can be partitioned into multiple collections and only a subset of nodes actually host any given collection. However, if a node receives a request for a collection it does not host, it proxies the request to a relevant node and serves the request. Solr bypasses all...

SUSE SLED15 / SLES15 Security Update : spamassassin (SUSE-SU-2020:0811-1)

This update for spamassassin fixes the following issues : Security issues fixed : CVE-2018-11805: Fixed an issue with delimiter handling in rule files related to isregexpvalid bsc1118987. CVE-2020-1930: Fixed an issue with rule configuration .cf files which can be configured to run system command...

SUSE SLES12 Security Update : spamassassin (SUSE-SU-2020:0810-1)

This update for spamassassin fixes the following issues : CVE-2018-11805: Fixed an issue with delimiter handling in rule files related to isregexpvalid bsc1118987. CVE-2020-1930: Fixed an issue with rule configuration .cf files which can be configured to run system commands bsc1162197...

SUSE SLES15 Security Update : spamassassin (SUSE-SU-2020:0813-1)

This update for spamassassin fixes the following issues : Security issues fixed : CVE-2018-11805: Fixed an issue with delimiter handling in rule files related to isregexpvalid bsc1118987. CVE-2020-1930: Fixed an issue with rule configuration .cf files which can be configured to run system command...

SUSE-SU-2020:0813-1 Security update for spamassassin

This update for spamassassin fixes the following issues: Security issues fixed: - CVE-2018-11805: Fixed an issue with delimiter handling in rule files related to isregexpvalid bsc1118987. - CVE-2020-1930: Fixed an issue with rule configuration .cf files which can be configured to run system...

SUSE-SU-2020:0811-1 Security update for spamassassin

This update for spamassassin fixes the following issues: Security issues fixed: - CVE-2018-11805: Fixed an issue with delimiter handling in rule files related to isregexpvalid bsc1118987. - CVE-2020-1930: Fixed an issue with rule configuration .cf files which can be configured to run system...

Mozilla: The names of AirPods with personally identifiable information were exposed to websites with camera or microphone permission

The Mozilla Foundation Security Advisory describes this flaw as: The first time AirPods are connected to an iPhone, they become named after the user's name by default e.g. Jane Doe's AirPods. Websites with camera or microphone permission are able to enumerate device names, disclosing the user's...

Imperva Wants to Hear From YOU!

Imperva is pleased to announce UserVoice, a new product feedback system that allows YOU to shape the future of Imperva product lines. UserVoice empowers Imperva users to share feedback and ideas in one comprehensive, crowd-sourced place where they can also see and react to the ideas others submit...

Linux fib6_rule_lookup Heap Buffer Overflow DoS

The vulnerability of the fib6rulelookup function in the Linux operating system is related to errors in handling exceptional conditions. Exploiting this vulnerability can allow an attacker to cause a service failure...