VoIPmonitor 27.5 Missing Memory Protections

VoIPmonitor static builds are compiled without any standard memory corruption protection - Fixed versions: N/A - Enable Security Advisory: https://github.com/EnableSecurity/advisories/tree/master/ES2021-04-voipmonitor-staticbuild-memory-corruption-protection - VoIPmonitor Security Advisory: none ...

5 common VPN myths busted

Virtual Private Networks VPNs are popular but often misunderstood. There are many misconceptions about them—misconceptions that may be stopping people from adding a useful layer to their security and privacy defenses. So, let’s do some myth busting. 1. VPNs are for illegal activity Some people...

Imperva recognized as a ‘Leader’ in The Forrester Wave™: DDoS Mitigation Solutions, Q1 2021 Report

We are delighted to share that Imperva has been named a leader in The Forrester Wave: DDoS Mitigation Solutions, Q1 2021 report, a trusted source for technology buyers which helps security and risk professionals select the right vendor for their needs. You can download a copy of the report here...

How to Keep Up With Vulnerability Management Challenges in Ephemeral Cloud Environments

This blog is part of an ongoing series sharing key takeaways from Rapid7’s 2020 Cloud Security Executive Summit. Interested in participating in the next summit on March 9? Register here! The modern perspective is that the cloud has made it much easier to have visibility of your attack surface and...

IAM Never Gonna Give You Up, Never Gonna Breach Your Cloud

This blog is part of an ongoing series sharing key takeaways from Rapid7’s 2020 Cloud Security Executive Summit. Interested in participating in the next summit on Tuesday, March 9? Register here! Identity and access management IAM credentials have solved myriad security issues, but the recent...

Security Bulletin: jackson-databind vulnerability CVE-2020-35728 impacts IBM Aspera High-Speed Transfer Server and Aspera High-Speed Transfer Endpoint versions prior to V4.0

Summary Jackson-databind vulnerability CVE-2020-35728 impacts IBM Aspera High-Speed Transfer Server and Aspera High-Speed Transfer Endpoint versions prior to 4.0.0. The fix for this set of vulnerabilities was delivered in IBM Aspera High-Speed Transfer Server V4.0.0 and IBM Aspera High-Speed...

SUSE-SU-2021:0602-1 Security update for python-Jinja2

This update for python-Jinja2 fixes the following issues: - CVE-2020-28493: Improve the speed of the 'urlize' filter by reducing regex backtracking. Email matching requires a word character at the start of the domain part, and only word characters in the TLD. bsc1181944...

Security Bulletin: jackson-databind vulnerabilities CVE-2020-36185/36181/36189/36188/36184/36180 impacts IBM Aspera High-Speed Transfer Server and Aspera High-Speed Transfer Endpoint versions prior to V4.0

Summary Jackson-databind vulnerabilities CVE-2020-36185, CVE-2020-36181, CVE-2020-36189, CVE-2020-36188, CVE-2020-36184, CVE-2020-36180, CVE-2020-36183, CVE-2020-36179, CVE-2020-36187, CVE-2020-36186, CVE-2020-36182 impacts IBM Aspera High-Speed Transfer Server and Aspera High-Speed Transfer...

Security Bulletin: jackson-databind vulnerability CVE-2021-20190 impacts IBM Aspera High-Speed Transfer Server and Aspera High-Speed Transfer Endpoint versions prior to V4.0

Summary Jackson-databind vulnerability CVE-2021-20190 impacts IBM Aspera High-Speed Transfer Server and Aspera High-Speed Transfer Endpoint versions prior to V4.0.0. The fix for this vulnerability was delivered in IBM Aspera High-Speed Transfer Server V4.0.0 and IBM Aspera High-Speed Transfer...

AppSec Bites: A Podcast on Balancing Speed and Thorough AppSec Coverage (Part 1)

In the world today we have all become so accustomed to high-speed delivery and the instant gratification it instills any large 2-day shipping retail monsters come to mind?. Its only natural that the demand for speed and efficiency we are experiencing in our daily lives has expanded to the...

DLL hijacking vulnerability in Sogou High Speed Browser (CNVD-2021-05823)

Sogou Browser is developed by Sogou and is based on Google chromium kernel. Sogou High Speed Browser suffers from a DLL hijacking vulnerability, which can be exploited by attackers to gain server control privileges...

DLL hijacking vulnerability in Sogou High Speed Browser (CNVD-2021-05824)

Sogou Browser is developed by Sogou and is based on Google chromium kernel. Sogou High Speed Browser suffers from a DLL hijacking vulnerability, which can be exploited by attackers to gain server control privileges...

DLL Hijacking Vulnerability in Sogou High Speed Browser (CNVD-2021-05750)

Sogou Browser is developed by Sogou and is based on Google chromium kernel. Sogou High Speed Browser suffers from a DLL hijacking vulnerability, which can be exploited by attackers to gain server control privileges...

DLL hijacking vulnerability in Sogou High Speed Browser (CNVD-2021-05827)

Sogou Browser is developed by Sogou and is based on Google chromium kernel. Sogou High Speed Browser suffers from a DLL hijacking vulnerability, which can be exploited by attackers to gain server control privileges...

DLL hijacking vulnerability in Sogou High Speed Browser (CNVD-2021-05825)

Sogou Browser is developed by Sogou and is based on Google chromium kernel. Sogou High Speed Browser suffers from a DLL hijacking vulnerability, which can be exploited by attackers to gain server control privileges...

DLL hijacking vulnerability in Sogou High Speed Browser (CNVD-2021-05826)

Sogou Browser is developed by Sogou and is based on Google chromium kernel. Sogou High Speed Browser suffers from a DLL hijacking vulnerability, which can be exploited by attackers to gain server control privileges...

DLL Hijacking Vulnerability in Sogou High Speed Browser (CNVD-2021-05820)

Sogou High Speed Browser is developed by Sogou, based on Google chromium kernel, and strives to provide users with a seamless cross-terminal experience, making it easier to surf the Internet and smoother to read web pages. Sogou High Speed Browser suffers from a DLL hijacking vulnerability, which...

DLL hijacking vulnerability in Sogou High Speed Browser (CNVD-2021-05828)

Sogou Browser is developed by Sogou and is based on Google chromium kernel. Sogou High Speed Browser suffers from a DLL hijacking vulnerability, which can be exploited by attackers to gain server control privileges...

DLL Hijacking Vulnerability in Sogou High Speed Browser

Sogou Browser is developed by Sogou and is based on Google chromium kernel. Sogou High Speed Browser suffers from a DLL hijacking vulnerability, which can be exploited by attackers to gain server control privileges...

NSA Cybersecurity Directorate Releases 2020 Year in Review

The National Security Agency NSA Cybersecurity Directorate has released its 2020 Year in Review, outlining key milestones and mission outcomes achieved during NSA Cybersecurity’s first full year of existence. Highlights include NSA Cybersecurity’s contributions to the 2020 elections, Operation Wa...