squid: HTTP Request Splitting could result in cache poisoning

A flaw was found in squid. Due to incorrect data validation, an HTTP Request Splitting attack against HTTP and HTTPS traffic is possible leading to cache poisoning. The highest threat from this vulnerability is to data confidentiality and integrity...

squid: HTTP Request Smuggling could result in cache poisoning

A flaw was found in squid. Due to incorrect data validation, a HTTP Request Smuggling attack against HTTP and HTTPS traffic is possible leading to cache poisoning. The highest threat from this vulnerability is to data confidentiality and integrity...

Cisco DuoConnect Authentication Vulnerability

Cisco DuoConnect is a two-factor authentication solution from Cisco USA. A security vulnerability exists in Cisco DuoConnect versions prior to 1.1.1, which stems from the fact that when DuoConnect is configured as 'http://', under certain circumstances, the program sends authentication tokens ove...

Cisco Firepower Threat Defense Software SSL/TLS URL Category Bypass Vulnerability (cisco-sa-ssl-bypass-O5tGum2n)

According to its self-reported version, Cisco Firepower Threat Defense Software is affected by a remote code execution vulnerability in Transport Layer Security. This is due to logic error withing SNORT handling. An unauthenticated, remote attacker can exploit this to bypass web traffic policies...

Analyzing the Effects of COVID-19 on mPulse Traffic

The events surrounding the COVID-19 pandemic, and in particular various social-distancing measures quarantine, shelter in place, etc., have had an impact on people's lives and routines across the world. As internet usage is a large part of those routines, we wanted to see how usage changed as the...

Cyberattackers Ramp Up to 1.5M COVID-19 Emails Per Day

Cyberattackers have reached a peak of sending 1.5 million malicious emails per day related to the COVID-19 pandemic over the course of the last three months, according to new research. Research from Forcepoint analyzing coronavirus-themed attacks between Jan. 19 to April 18 found cybercriminals...

[SECURITY] Fedora 30 Update: libmodsecurity-3.0.2-6.fc30

Libmodsecurity is one component of the ModSecurity v3 project. The library codebase serves as an interface to ModSecurity Connectors taking in web traffic and applying traditional ModSecurity processing. In general, it provides the capability to load/interpret rules written in the ModSecurity...

[SECURITY] Fedora 32 Update: libmodsecurity-3.0.3-6.fc32

Libmodsecurity is one component of the ModSecurity v3 project. The library codebase serves as an interface to ModSecurity Connectors taking in web traffic and applying traditional ModSecurity processing. In general, it provides the capability to load/interpret rules written in the ModSecurity...

CVE-2020-8809

Gurux GXDLMS Director prior to 8.5.1905.1301 downloads updates to add-ins and OBIS code over an unencrypted HTTP connection. A man-in-the-middle attacker can prompt the user to download updates by modifying the contents of gurux.fi/obis/files.xml and gurux.fi/updates/updates.xml. Then, the attack...

The vulnerability of the McAfee Client Proxy software lies in its ability to bypass authentication by using a user-controlled password. This allows attackers to circumvent web traffic scanning and gain access to blocked websites.

The vulnerability of the McAfee Client Proxy software relates to the bypassing of authentication procedures by using a key controlled by the user. Exploiting this vulnerability allows an attacker to bypass web traffic scanning and gain access to blocked websites for a short period of time. This i...

CVE-2019-16274

DTEN D5 before 1.3 and D7 before 1.3 devices transfer customer data files via unencrypted HTTP...

Inspecting TLS Web Traffic - Part 1

In this series of blogs I'm going to talk about how the continued move towards all web traffic being encrypted has impacted enterprise security. In this blog I'm going to focus on the basics - what is encrypted web traffic and how can you proactively control this. TLS encryption is the de-facto...

CVE-2019-16732

Unencrypted HTTP communications for firmware upgrades in Petalk AI and PF-103 allow man-in-the-middle attackers to run arbitrary code as the root user...

CVE-2019-3654

Authentication Bypass vulnerability in the Microsoft Windows client in McAfee Client Proxy MCP prior to 3.0.0 allows local user to bypass scanning of web traffic and gain access to blocked sites for a short period of time via generating an authorization key on the client which should only be...

Authentication flaw

Authentication Bypass vulnerability in the Microsoft Windows client in McAfee Client Proxy MCP prior to 3.0.0 allows local user to bypass scanning of web traffic and gain access to blocked sites for a short period of time via generating an authorization key on the client which should only be...

CVE-2019-3654

McAfee Client Proxy (MCP) for Windows is affected by an authentication bypass vulnerability prior to version 3.0.0. The issue allows a local user to bypass the normal authentication mechanism and generate an authorization key on the client that should only be created by the network administrator,...

Amazon's Ring Video Doorbell Lets Attackers Steal Your Wi-Fi Password

Security researchers at Bitdefender have discovered a high-severity security vulnerability in Amazon's Ring Video Doorbell Pro devices that could allow nearby attackers to steal your WiFi password and launch a variety of cyberattacks using MitM against other devices connected to the same network...

Introducing Serverless Computing at the Edge with Akamai EdgeWorkers

For the first time, Akamai is introducing an all-new serverless compute capability to help you customize web traffic, expanding the possibilities of personalized engagement with your customers while putting the flexibility and control in the hands of your developers. Developers can now manipulate...

The vulnerability of the FortiOS operating system, related to security configuration errors, allows attackers to circumvent existing security restrictions.

The vulnerability of the FortiOS operating system is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions by using specially crafted SSL/TLS or HTTP traffic...

The vulnerability of the HTTP traffic filtering component of Cisco Firepower Threat Defense’s micro-programming-based network interface controllers, as well as Cisco FirePOWER Services Software for ASA and Cisco Firepower Management Center’s network management software, allows attackers to influence the integrity of protected information.

The vulnerability of the HTTP traffic filtering component in Cisco Firepower Threat Defense, Cisco FirePOWER Services Software for ASA, and Cisco Firepower Management Center software is caused by errors in HTTP request processing. Exploiting this vulnerability allows a malicious actor to influenc...