Apple macOS security vulnerabilities

A security vulnerability exists in Apple macOS Golden Gate versions prior to 27, macOS Sequoia versions prior to 15.8.2, and macOS Tahoe versions prior to 26.7.2. This vulnerability stems from an input validation issue that leads to a stack buffer overflow; processing maliciously crafted audit...

GHSA-HCR5-WV4P-H2G2 kube-audit-rest's example logging configuration could disclose secret values in the audit log

Impact What kind of vulnerability is it? Who is impacted? If the "full-elastic-stack" example vector configuration was used for a real cluster, the previous values of kubernetes secrets would have been disclosed in the audit messages. Patches Has the problem been patched? What versions should use...

Commentary on US Election Security

Good commentaries from Ed Felten and Matt Blaze. Both make a point that I have also been saying: hacks can undermine the legitimacy of an election, even if there is no actual voter or vote manipulation. Felten: The second lesson is that we should be paying more attention to attacks that aim to...

Tenable SecurityCenter 5.0.2 Audit File XSS (TNS-2015-12)

According to its version, the Tenable SecurityCenter application installed on the remote host is affected by a cross-site scripting XSS vulnerability due to improper validation of uploaded .audit files before they are rendered on the scan results page. An authenticated, remote attacker can exploi...