251 matches found
gis.summitcountyco.gov Improper Access Control vulnerability OBB-1372526
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
GHSA-CWCP-6C48-FM7M Unsafe eval() in summit allows arbitrary code execution
Affected versions of summit allow attackers to execute arbitrary commands via collection names when using the PouchDB driver. Recommendation No direct patch is available at this time. Currently, the best option to mitigate the issue is to avoid using the PouchDB driver, as the package author has...
Unsafe eval() in summit allows arbitrary code execution
Affected versions of summit allow attackers to execute arbitrary commands via collection names when using the PouchDB driver. Recommendation No direct patch is available at this time. Currently, the best option to mitigate the issue is to avoid using the PouchDB driver, as the package author has...
We Love Our Customers!
Here in the States, we often get our dry cleaning returned on hangers that say "We Love Our Customers." I once inadvertently brought one into the office back in the day, and our team displayed it prominently on a shelf, because it's true. Meeting with customers is the best part of my job here at...
summit-equipment-outlet.com Improper Access Control vulnerability OBB-1203060
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
The Internet Didn't Break. Now What?
Even though it was only November, it seems like an eternity ago that Akamai CEO Tom Leighton discussed the then-forthcoming "streaming explosion" on Variety's "Strictly Business" podcast. Tom spoke with Variety Co-Editor-in-Chief Andrew Wallenstein about the upcoming launches of streaming service...
What's Next for Media Companies in 2020?
Over the past few months, we've all experienced changes -- in how we work, how we parent, and how we live. But one thing that hasn't changed is the essential nature of the internet and Akamai's ability to deliver on your and your customers' expectations. It's what we do. With recent global events...
SAS@Home Virtual Summit Showcases New Threat Intel, Industry Changes
As the COVID-19 pandemic continues to force in-person cybersecurity event cancellations, Kaspersky is forging ahead with a virtual security summit, SAS@home. Topics on the agenda include threat intel on advanced persistent threats APTs, new vulnerability research, and topics related to a...
Will Social Distancing Break the Internet?
First off, no -- the Internet is not going to break! That said, the news media is awash with stories and statistics about how the Internet is faring with the increase in traffic due to isolation protocols forcing daily functions online. Which functions? In my house, we have remote work, e-learnin...
Unexpected Inflection Point
For decades, those of us who work on the infrastructure of the web have heard and talked a lot about "inflection points" -- points at which we have seen notable increases in Internet usage driven by commerce, entertainment, financial services, travel, etc. And now, without warning, the world...
Business Continuity at Edge Live, April 7-8
The COVID-19 crisis has forced enterprises everywhere to find new ways of maintaining valued relationships with customers and partners. At Akamai, we are here to support you at every step during these uncertain times. With this in mind, we are hosting Edge Live, a virtual summit for industry...
LOWKEY: Hunting for the Missing Volume Serial ID
In August 2019, FireEye released the “Double Dragon” report on our newest graduated threat group: APT41. A China-nexus dual espionage and financially-focused group, APT41 targets industries such as gaming, healthcare, high-tech, higher education, telecommunications, and travel services. This blog...
North Korean Spear-Phishing Attack Targets U.S. Firms
Researchers have uncovered an ongoing, sophisticated malware campaign aiming at U.S.-based targets with an interest in nuclear deterrence, North Korea’s nuclear submarine program and North Korean economic sanctions. The campaign, which researchers from Prevailion call “Autumn Aperture” and link...
IRS Security Summit Series for Tax Professionals: Create a Data Theft Recovery Plan
The fifth and final step in the Internal Revenue Service IRS Security Summit series for tax professionals is creating a data theft recovery plan. IRS issued a news release highlighting the importance of understanding the risks posed by national and international cybersecurity criminal syndicates,...
Data and device security for domestic abuse survivors
For more than a month, Malwarebytes has worked with advocacy groups, law enforcement, and cybersecurity researchers to deliver helpful information in fighting stalkerware—the disturbing cyber threat that enables domestic abusers to spy on their partners’ digital and physical lives. While we’ve...
Save the Date: 2019 CISA Cybersecurity Summit
The Cybersecurity and Infrastructure Security Agency CISA will be hosting the 2019 CISA Cybersecurity Summit from September 18-20, 2019, at National Harbor, MD. This summit will provide a forum for critical infrastructure stakeholders to discuss current cybersecurity topics, including emerging...
Beers with Talos Ep. #55: Live from San Diego!
Beers with Talos BWT Podcast Ep. 55 is now available. Download this episode and subscribe to Beers with Talos: If iTunes and Google Play aren't your thing, click here. Recorded June 12, 2019 — God knows why, but we bring you another live episode from the Talos Threat Research Summit at Cisco Live...
The sights and sounds from the Talos Threat Research Summit
More than 250 threat hunters, network defenders and analysts gathered ahead of Cisco Live for the second annual Talos Threat Research Summit on Sunday. The conference by defenders, for defenders, returned this year after the inaugural event in 2018 to San Diego, where speakers passed on their...
Threat Source newsletter (June 6)
Newsletter compiled by Jonathan Munshaw. Welcome to this week’s Threat Source newsletter — the perfect place to get caught up on all things Talos from the past week. We hope to see everyone this weekend at the Talos Threat Research Summit in San Diego or throughout the week at Cisco Live. If you’...
Upcoming Speaking Engagements
This is a current list of where and when I am scheduled to speak: I'm speaking at the Code for America Summit in Oakland, California on May 30, 2019. I'm speaking on "Securing a World of Physically Capable Computers" at Oxford University on Monday, June 17, 2019. The list is maintained on this pa...