170 matches found
Microsoft-Sentinel-SecOps
Microsoft Sentinel - Operazioni SOC Benvenuto in Microsoft Sentinel - Operazioni SOC Questo repository contiene molti contenuti di Microsoft Sentinel con query per esplorazione, caccia alle minacce e altre attività. Risorse Hunting Processi Eventi di sicurezza Aggiornamenti Varie Articoli su Azur...
CorelightForSecOps
Raccolta dei log di Corelight Sensor Questo documento descrive come raccogliere i log di Corelight Sensor configurando Corelight Sensor e un forwarder di Chronicle. Questo documento elenca anche i tipi di log supportati e le versioni di Corelight supportate. Per maggiori informazioni, consulta...
fixing-google-secops-detections
Google SecOps Chronicle Kuratierte Detections: Schwachstellenanalyse & Tuning Dieses Repository dokumentiert architektonische Designfehler, Logikabweichungen und Tuning-Strategien für native Google SecOps Chronicle Kuratierte Detections. Obwohl Google Threat Intelligence GTIG eine außergewöhnlich...
CVE-2026-15623 Authenticated Blind SQL Injection in Google Cloud SecOps SOAR Dashboard Widget Query Service
A SQL Injection vulnerability in a legacy dashboard widget API in Google Cloud Google SecOps Chronicle SOAR versions prior to 6.3.85 on Google Cloud Platform allows an authenticated attacker to execute blind SQL queries using a crafted request parameter. This vulnerability was patched in version...
CVE-2026-15623
CVE-2026-15623 describes an authenticated blind SQL injection in Google Cloud Chronicle SOAR’s legacy dashboard widget API for versions prior to 6.3.85. An authenticated attacker can cause blind SQL queries via a crafted request parameter. The issue is mitigated by the patch in version 6.3.85; no...
CVE-2026-15623
A SQL Injection vulnerability in a legacy dashboard widget API in Google Cloud Google SecOps Chronicle SOAR versions prior to 6.3.85 on Google Cloud Platform allows an authenticated attacker to execute blind SQL queries using a crafted request parameter. This vulnerability was patched in version...
EUVD-2026-60060
A SQL Injection vulnerability in a legacy dashboard widget API in Google Cloud Google SecOps Chronicle SOAR versions prior to 6.3.85 on Google Cloud Platform allows an authenticated attacker to execute blind SQL queries using a crafted request parameter. This vulnerability was patched in version...
EUVD-2026-53390
Improper Privilege Management in Google SecOps Chronicle SOAR versions prior to 6.3.85 on Google Cloud Platform allows an authenticated attacker to escalate privileges to system-level administrative access using a crafted internal authentication header. This vulnerability was patched with version...
EUVD-2025-201881
A vulnerability exists in the SecOps SOAR server. The custom integrations feature allowed an authenticated user with an "IDE role" to achieve Remote Code Execution RCE in the server. The flaw stemmed from weak validation of uploaded Python package code. An attacker could upload a package containi...
Changing the physics of cyber defense
The Deputy CISO blog series is whereMicrosoft Deputy Chief Information Security Officers CISOs share their thoughts on what is most important in their respective domains. In this series, you will get practical advice, tactics to start and stop deploying, forward-looking commentary on where the...
CVE-2025-13428 RCE in SecOps SOAR server via user-provided Python packages
A vulnerability exists in the SecOps SOAR server. The custom integrations feature allowed an authenticated user with an "IDE role" to achieve Remote Code Execution RCE in the server. The flaw stemmed from weak validation of uploaded Python package code. An attacker could upload a package containi...
EUVD-2024-48491
Malicious code in bioql PyPI...
EUVD-2024-48493
Malicious code in bioql PyPI...
EUVD-2024-48494
Malicious code in bioql PyPI...
EUVD-2024-47126
Malicious code in bioql PyPI...
EUVD-2024-48465
Malicious code in bioql PyPI...
EUVD-2024-47129
Malicious code in bioql PyPI...
EUVD-2025-27633
Malicious code in bioql PyPI...