WAF and RASP: Best Practice for Defense in Depth

Why do you need a RASP solution if WAFs layer of defense is so powerful? The simple answer is that no single security product can provide protection for all threat vectors. A comprehensive IT security strategy includes risk-appropriate controls implemented where they can provide maximum efficacy,...

The 2020 Cyberthreat Defense Report: Simplify Security with Unified Tools and Monitoring

The CyberEdge Group’s recently released 2020 Cyberthreat Defense Report CDR details findings based on a survey of 1200 security IT professionals from around the globe. Although multiple key takeaways emerged from analyzing their perceptions and insights, it’s worth digging a little further into o...

Avira Operations Free Antivirus Code Injection Vulnerability

Avira Operations Free Antivirus is a suite of antivirus programs from Avira Operations. A security vulnerability exists in Avira Operations Free Antivirus versions prior to 15.0.2004.1825, which stems from a self-protection feature that does not prohibit write operations by external processes. Th...

CVE-2020-8961

An issue was discovered in Avira Free-Antivirus before 15.0.2004.1825. The Self-Protection feature does not prohibit a write operation from an external process. Thus, code injection can be used to turn off this feature. After that, one can construct an event that will modify a file at a specific...

CVE-2020-8961

An issue was discovered in Avira Free-Antivirus before 15.0.2004.1825. The Self-Protection feature does not prohibit a write operation from an external process. Thus, code injection can be used to turn off this feature. After that, one can construct an event that will modify a file at a specific...

Code injection

An issue was discovered in Avira Free-Antivirus before 15.0.2004.1825. The Self-Protection feature does not prohibit a write operation from an external process. Thus, code injection can be used to turn off this feature. After that, one can construct an event that will modify a file at a specific...

CVE-2020-8961

An issue was discovered in Avira Free-Antivirus before 15.0.2004.1825. The Self-Protection feature does not prohibit a write operation from an external process. Thus, code injection can be used to turn off this feature. After that, one can construct an event that will modify a file at a specific...

CVE-2020-8961

The CVE-2020-8961 entry relates to Avira Free-Antivirus prior to 15.0.2004.1825, where Self-Protection does not block write operations from external processes. This enables code injection to disable Self-Protection, after which an attacker can craft an event to modify a file at a specific locatio...

McAfee Agent Access Control Error Vulnerability

McAfee Agent MA is a set of client components from McAfee, Inc. that provides secure communications between ePolicy Orchestrator antivirus management platform and managed products. An access control error vulnerability exists in the masvc.exe file in McAfee Agent versions prior to 5.6.4. A local...

CVE-2020-7253

Improper access control vulnerability in masvc.exe in McAfee Agent MA prior to 5.6.4 allows local users with administrator privileges to disable self-protection via a McAfee supplied command-line utility...

CVE-2020-7253

Improper access control vulnerability in masvc.exe in McAfee Agent MA prior to 5.6.4 allows local users with administrator privileges to disable self-protection via a McAfee supplied command-line utility...

Improper access control

Improper access control vulnerability in masvc.exe in McAfee Agent MA prior to 5.6.4 allows local users with administrator privileges to disable self-protection via a McAfee supplied command-line utility...

CVE-2020-7253

The CVE-2020-7253 issue affects McAfee Agent (MA) client components, specifically masvc.exe, prior to version 5.6.4. The root cause is improper access control that allows local users with administrator privileges to disable self-protection via a McAfee-supplied command-line utility. Impact descri...

CVE-2020-7253 Improper access control vulnerability in McAfee Agent

Improper access control vulnerability in masvc.exe in McAfee Agent MA prior to 5.6.4 allows local users with administrator privileges to disable self-protection via a McAfee supplied command-line utility...

Comodo Internet Security DLL Preload Vulnerability

Comodo Internet Security CIS is an Internet security suite that includes an antivirus program, personal firewall, sandbox, and host-based intrusion prevention system HIPS. A DLL preloading vulnerability in signmgr.dll 6.5.0.819 in Comodo Internet Security 12.0 and earlier can be exploited to bypa...

Avast Antivirus Local Denial of Service Vulnerability

Avast Antivirus is a suite of antivirus software from the Czech company Avast. A security vulnerability exists in Avast Antivirus versions prior to 19.4. The vulnerability can be exploited to bypass the Avast self-protection mechanism and rename important binary files e.g. AvastSvc.exe file,...

Cloud WAAPs Are the Future of Application Security. But What Does That Mean?

Millions of Verizon FIOS broadband users vulnerable to hackers controlling and surveilling their home networks. Thousands of GPS watches whose maps were open to attackers tracking and eavesdropping on children and elderly users. A zero-day hole in Microsoft’s Edge and Internet Explorer browsers...

McAfee Total Protection (MTP) Security Restriction Bypass Vulnerability

McAfee Total Protection is a suite of antivirus software from the American company McAfee McAfee. A security vulnerability exists in the Windows client in McAfee MTP versions prior to 16.0.R18. This vulnerability can be exploited by a local attacker with specially crafted malware to bypass the...

CVE-2019-3593

CVE-2019-3593 tracks a privilege/trust vulnerability in the Windows client of McAfee Total Protection (MTP) before version 16.0.R18 . The issue allows local attackers to bypass the product’s self‑protection, tamper with policies and product files, and uninstall McAfee software via specially craft...

CVE-2019-3593 Exploitation of Privilege/Trust vulnerability

Exploitation of Privilege/Trust vulnerability in Microsoft Windows client in McAfee Total Protection MTP Prior to 16.0.R18 allows local users to bypass product self-protection, tamper with policies and product files, and uninstall McAfee software without permission via specially crafted malware...