2038 matches found
6 strategies to reduce cybersecurity alert fatigue in your SOC
Today, organizations are faced with the increasingly difficult task of trying to protect their expanding digital estate from sophisticated cybersecurity threats. Migration to the cloud and a mobile workforce has dissolved the network boundary and projected the digital estate beyond its traditiona...
6 strategies to reduce cybersecurity alert fatigue in your SOC
Today, organizations are faced with the increasingly difficult task of trying to protect their expanding digital estate from sophisticated cybersecurity threats. Migration to the cloud and a mobile workforce has dissolved the network boundary and projected the digital estate beyond its traditiona...
CVE-2021-0109
Insecure inherited permissions for the IntelR SOC driver package for STK1A32SC before version 604 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2021-0109
Insecure inherited permissions for the IntelR SOC driver package for STK1A32SC before version 604 may allow an authenticated user to potentially enable escalation of privilege via local access...
Privilege escalation
Insecure inherited permissions for the IntelR SOC driver package for STK1A32SC before version 604 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2021-0109
Insecure inherited permissions for the IntelR SOC driver package for STK1A32SC before version 604 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2021-0109
Insecure inherited permissions for the IntelR SOC driver package for STK1A32SC before version 604 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2021-0109
The CVE-2021-0109 issue affects Intel’s SOC Driver Package for STK1A32SC (versions before 604). The root cause is insecure inherited permissions in the driver package, which may allow an authenticated local user to escalate privileges. Intel’s advisory (Intel SA-00471) confirms the vulnerability,...
CVE-2021-0109: Incorrect Permission Assignment for Critical Resource
Insecure inherited permissions for the IntelR SOC driver package for STK1A32SC before version 604 may allow an authenticated user to potentially enable escalation of privilege via local access...
Talkin’ SMAC: Alert Labeling and Why It Matters
If you’ve ever worked in a Security Operations Center SOC, you know that it’s a special place. Among other things, the SOC is a massive data-labeling machine, and generates some of the most valuable data in the cybersecurity industry. Unfortunately, much of this valuable data is often rendered...
A playbook for modernizing security operations
The security community is continuously changing, growing, and learning from each other to better position the world against cyber threats. In the latest post from our new Voice of the Community blog series, Microsoft Product Marketing Manager Natalia Godyla talks with Dave Kennedy, Founder and...
Intel® SOC Driver Package Advisory
Summary: A potential security vulnerability in the Intel® System-on-a-Chip SOC Driver Package for STK1A32SC may allow escalation of privilege. Intel is releasing a software update to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2021-0109 Description: Insecure inherited...
Sigma Rules to Live Your Best SOC Life
Security Operations is a 24 x 7 job. It does not stop for weekends or holidays or even that much-needed coffee break after the first hour of the shift is complete. We all know this. Every SOC engineer is hoping for some rest at some point. One of my favorite jokes when talking about Security...
Announcing the general availability of Azure Defender for IoT
As businesses increasingly rely on connected devices to optimize their operations, the number of IoT and Operational Technology OT endpoints is growing dramatically—industry analysts have estimated that CISOs will soon be responsible for an attack surface multiple times larger than just a few yea...
Out-of-bounds
In ged, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android SoC; Android ID: A-172514667...
CVE-2021-0301
CVE-2021-0301 affects the Android ged component. The root cause is a missing bounds check that allows an out-of-bounds write, leading to local escalation of privilege with System-level execution privileges required. Exploitation does not require user interaction. Multiple connected sources (NVD, ...
PT-2021-12985
Name of the Vulnerable Software and Affected Versions: Android SoC Description: The issue is related to a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, with System execution privileges needed. User interaction is not required for...
CVE-2021-0301: Out-of-bounds Write
In ged, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android SoC; Android ID: A-172514667...
CVE-2020-0016
In the Broadcom Nexus firmware, there is an insecure default password. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-171413483...