CVE-2017-18556: Improper Neutralization of Input During Web Page Generation

The bws-google-analytics plugin before 1.7.1 for WordPress has multiple XSS issues...

PT-2019-8488

Name of the Vulnerable Software and Affected Versions WordPress analytics-tracker plugin versions prior to 1.1.1 Description The issue allows for XSS via a search event. Recommendations For versions prior to 1.1.1, update to version 1.1.1 or later to resolve the issue...

PT-2019-8490

Name of the Vulnerable Software and Affected Versions bws-google-analytics plugin versions prior to 1.7.1 Description The issue is related to multiple XSS problems. Recommendations For versions prior to 1.7.1, update to version 1.7.1 or later to resolve the issue...

PT-2019-7708

Name of the Vulnerable Software and Affected Versions WordPress universal-analytics plugin versions prior to 1.3.1 Description The issue concerns a cross-site scripting XSS problem. Recommendations For versions prior to 1.3.1, update the universal-analytics plugin to version 1.3.1 or later to...

CVE-2016-10912: Improper Neutralization of Input During Web Page Generation

The universal-analytics plugin before 1.3.1 for WordPress has XSS...

Your Business is Compliant with Data Security Regulations. It’s Still not Safe.

There has been plenty of discussion about the impact of global data regulations on data security practices. Particularly with the implementation of the EU’s GDPR last year, organizations in every industry have been scrambling to develop new security practices to avoid fines and the associated bad...

How much personalization is too much?

This story originally ran in The Parallax on January 25, 2019, and was written by Dan Tynan. In 2012, when Target used data analytics to identify customers who were expecting a baby, then mailed them coupons for maternity clothing and nursery furniture, it inadvertently revealed a teenage girl’s...

PT-2019-3707 · Oracle +7 · Oracle Hospitality Reporting/Analytics +7

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.16 and prior Oracle Hospitality Reporting and Analytics affected versions not specified Description: The issue is related to inadequate access control in the Server: Optimizer component of MySQL Server and the Oracle...

HELK - The Hunting ELK

The Hunting ELK or simply the HELK is one of the first open source hunt platforms with advanced analytics capabilities such as SQL declarative language, graphing, structured streaming, and even machine learning via Jupyter notebooks and Apache Spark over an ELK stack. This project was developed...

cPanel Input Validation Error Vulnerability (CNVD-2019-29615)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in the API Analytics adminbin in versions prior to cPanel 80.0.5, no detailed vulnerability detai...

CVE-2019-14396

API Analytics adminbin in cPanel before 80.0.5 allows spoofed insertions of log data SEC-495...

Code injection

API Analytics adminbin in cPanel before 80.0.5 allows spoofed insertions of log data SEC-495...

CVE-2019-14396

API Analytics adminbin in cPanel before 80.0.5 allows spoofed insertions of log data SEC-495...

CVE-2019-14396

CVE-2019-14396 affects the API Analytics adminbin in cPanel prior to version 80.0.5. The vulnerability allows spoofed insertions of log data (SEC-495). Documents consistently describe the affected component and symptom but do not provide concrete exploit details, attack vectors, or in-the-wild ac...

CVE-2019-14396: Undefined Security Weakness

API Analytics adminbin in cPanel before 80.0.5 allows spoofed insertions of log data SEC-495...

The evolution of Microsoft Threat Protection—July update

Modern security teams need to proactively, efficiently, and effectively hunt for threats across multiple attack vectors. To address this need, today we’re excited to give you a glimpse of a new threat hunting capability coming soon to Microsoft Threat Protection. Building off the threat hunting...

Introducing EQR — The Need for Petabyte-Scale Real-Time Analysis

Making Fast Decisions from Lots of Data One of the most difficult things to solve for in the Security industry is scale. Security is essentially a big data problem—data that is dynamic, and variadic. You need to correlate lots of disparate data elements that contain dynamically changing parameter...

Security Bulletin: Multiple vulnerabilities affect IBM Planning Analytics (CVE-2018-3180, CVE-2013-1624, CVE-2018-1933, CVE-2015-1832, CVE-2018-15494)

Summary This Security Bulletin addresses multiple vulnerabilities that have been remediated in IBM Planning Analytics 2.0.7. There is a vulnerability in IBM® Runtime Environment Java™ used by IBM Planning Analytics 2.0.6 and lower. IBM Planning Analytics 2.0.7 has addressed the applicable CVE by...

Security Bulletin: Multiple vulnerabilities affect IBM Planning Analytics

Summary This Security Bulletin addresses multiple vulnerabilities that have been remediated in IBM Planning Analytics 2.0.8. There are multiple vulnerabilities in IBM® Runtime Environment Java™ used by IBM Planning Analytics 2.0.7 and lower. IBM Planning Analytics 2.0.8 has addressed the applicab...

No man’s land: How a Magecart group is running a web skimming operation from a war zone

Our Threat Intelligence team has been monitoring the activities of a number of threat actors involved in the theft of credit card data. Often referred to under the Magecart moniker, these groups use simple pieces of JavaScript code skimmers typically injected into compromised e-commerce websites ...