Multiple vulnerabilities in Trend Micro Security 2021 family (Consumer)

Overview Trend Micro Incorporated has released security updates for Trend Micro Security 2021 family Consumer. Trend Micro Incorporated reported these vulnerabilities to JPCERT/CC to notify users of the solutions through JVN. Impact Maximum Security 2021 A user who can log in to the system where...

Trend Micro Security 安全特征问题漏洞

Trend Micro Security is a suite of computer security protection software from Trend Micro. A security feature issue vulnerability exists in Trend Micro Security that stems from an unspecified error in the Folder Shield feature. A local user can modify files within a Folder Shield-protected folder...

A Guide to Shift Away from Legacy Authentication Protocols in Microsoft 365

Microsoft 365 M365, formerly called Office 365 O365, is Microsoft's cloud strategy flagship product with major changes ahead, such as the deprecation of their legacy authentication protocols. Often stored on or saved to the device, Basic Authentication protocols rely on sending usernames and...

Detecting Credential Stealing Attacks Through Active In-Network Defense

ARCHIVED STORY Detecting Credential Stealing Attacks Through Active In-Network Defense By Trellix · September 22, 2021 This blog was written by Chintan Shah Executive Summary Today, enterprises tend to use multiple layers of security defenses, ranging from perimeter defense on network entry point...

Ditch the Alert Cannon: Modernizing IDS is a Security Must-Do

After more than 20 years of underwhelming results, security leaders have accepted their intrusion detection system IDS programs as no more than a compliance checkoff. It’s no secret that IDS’s reliance on bi-modal signatures is brittle, easily evaded and often referred to as an “alert cannon.” Ti...

Advisory ROSA-SA-2021-1945

Software: pango 1.42.4 OS: Cobalt 7.9 CVE-ID: CVE-2020-17365 CVE-Crit: HIGH CVE-DESC: Incorrect directory permissions in the Hotspot Shield VPN client software for Windows 10.3.0 and earlier could allow an authorized user to potentially enable privilege escalation via local access. The...

Arbitrary File Download Vulnerability in Blue Shield Firewall of Blue Shield Information Security Technology Co.

Blue Shield Information Security Technology Co., Ltd. is the earliest professional network security enterprise engaged in the research and development, production and sales of information security products with independent intellectual property rights in China. Blue Shield Information Security...

Arbitrary File Read Vulnerability in Zhongxin Golden Shield Firewall System

Golden Shield Firewall is a series of firewall products of Zhongxin Golden Shield specialized in anti-DDoS attack and anti-CC attack. There exists an arbitrary file read vulnerability in the firewall system, which can be exploited by attackers to obtain sensitive information...

Command Execution Vulnerability in Zhongxin Golden Shield Information Security Management System

Zhongxin Network Information Security Co., Ltd. is a high-tech company integrating network security products, software and hardware development. A command execution vulnerability exists in the Zhongxin Golden Shield information security management system, which can be exploited by an attacker to...

Feds Secretly Ran a Fake Encrypted Chat App and Busted Over 800 Criminals

In an unprecedented sting operation, the U.S. Federal Bureau of Investigation FBI and Australian Federal Police AFP ran an encrypted chat service called ANoM for nearly three years to intercept 27 million messages exchanged between criminal gang members globally. Dubbed Operation Ironside AFP,...

800 arrests after police dupe crime groups into using backdoored phones

An international operation that monitored an encrypted device company under control of the Federal Bureau of Investigation FBI and the Australian Federal Police AFP has led to a massive, coordinated string by law enforcement in several countries. The setup Law enforcement agencies around the worl...

Command Execution Vulnerability in Reporter of Shanghai New Shield Technology Co.

Ltd. is a professional security company with "network security" as its main axis and "making the network safer" as its mission to provide customers with total network security solutions. A command execution vulnerability exists in Reporter, which can be exploited by attackers to gain control of t...

Brave Software: DNS Leaks when using any VPN Browser extension with Brave Shield enabled

If Brave Shield is enabled alongside with a VPN Chrome extension and adblocking is enabled, some DNS requests may not be forwarded through the VPN tunnel...

SQL Injection Vulnerability in Zhongxin Golden Shield Information Security Management System

Zhongxin Network Information Security Co., Ltd. is a high-tech company integrating network security products, software and hardware development. There is a SQL injection vulnerability in the Zhongxin Golden Shield information security management system, which can be exploited by attackers to obta...

Weak Password Vulnerability in Zhongxin Golden Shield Information Security Management System

Zhongxin Golden Shield information security management system realizes the collection, monitoring, analysis, early warning and control of all kinds of resource information such as network traffic, IP address, domain name, information content, application and so on in the IDC server room. Weak...

Improper Control of Dynamically-Managed Code Resources in config-shield

scripts/cli.js in the GoDaddy node-config-shield aka Config Shield package before 0.2.2 for Node.js calls eval when processing a set command. NOTE: the vendor reportedly states that this is not a vulnerability. The set command was not intended for use with untrusted data...

CIRA Canadian Shield Security Feature Vulnerability

CIRA Canadian Shield is an application from CIRA Canada Inc. provides protection from online threats such as malicious domains, phishing sites, and helps keep your personal data private. A security feature vulnerability exists in the CIRA Canadian Shield app for iOS versions prior to 4.0.13 that...

Weak Password Vulnerability in Tianrui Green Shield Data Leakage Prevention System

Tianrui Green Shield Data Leakage Prevention System referred to as Data Leakage Prevention System is a set of software systems to protect data security and use security from the source. Tianrui Green Shield Data Leakage Prevention System has a weak password vulnerability that can be exploited by...

Weak Password Vulnerability in Zhongxin Golden Shield Information Security Management System

Zhongxin Golden Shield Information Security Management System adopts distributed data collection, intelligent packet reorganization and flow reorganization, adaptive in-depth protocol analysis, real-time network protocol blocking, massive data storage, in-depth data mining and other advanced...

The vulnerability of the Libnvomx driver for NVIDIA Tegra OpenMax and the software for NVIDIA Shield TV Experience allows a hacker to induce a service failure or increase their privileges.

The vulnerability of the Libnvomx driver for NVIDIA Tegra OpenMax and the NVIDIA Shield TV Experience device software relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause service failures or gain increased privileges...