Taking Action on Climate Change at Climate Week NYC 2023

...

ELSYS ERS Security Vulnerability

ELSYS ERS is a smart, professional LoRaWAN sensor from ELSYS. It is used for indoor climate measurements. A security vulnerability exists in ELSYS ERS version 1.5 Sound v2.3.8, which stems from a buffer overflow vulnerability in the NFC data parser...

Care Bears and Open Campus Launch Educational Games on Climate Change

By Owais Sultan London, England, August 2, 2023 - Open Campus, a leading educational technology protocol, has announced an exciting new… This is a post from HackRead.com Read the original post: Care Bears and Open Campus Launch Educational Games on Climate Change...

WordPress South Pole: Climate action now Plugin <= 1.0.3.2 is vulnerable to Cross Site Scripting (XSS)

Software South Pole: Climate action now Type Plugin Vulnerable versions = 1.0.3.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 0b8c06df3bd4 Credits Rafie Muhammad...

changement-climatique.fr Cross Site Scripting vulnerability OBB-3358419

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

climatepledge.global Cross Site Scripting vulnerability OBB-3319261

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

climatelmadrid.es Cross Site Scripting vulnerability OBB-3301563

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Malicious Package

Overview climate-warehouse is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package...

Malicious code in climate-warehouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb03c4128835a9256b968cd63d617675ff8af803b43a908731d04f8b1b81151f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-184 Malicious code in climate-warehouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb03c4128835a9256b968cd63d617675ff8af803b43a908731d04f8b1b81151f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Getting It Done: It’s Go Time for Bold Leadership in Sustainability

Sustainability professionals from around the world convened in New York City for Climate Week NYC 2022, exploring the theme of the week to “get it done.”...

Insider Threats: Your employees are being used against you

By Nick Biasini. Insider threats are becoming an increasingly common part of the attack chain, with malicious insiders and unwitting assets playing key roles in incidents over the past year. Social engineering should be part of any organization’s policies and procedures and a key area for user...

api.climate.ncsu.edu Cross Site Scripting vulnerability OBB-2910236

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Friday Squid Blogging: Squid Migration and Climate Change

New research on the changing migration of the Doryteuthis opalescens as a result of climate change. News article: Stanford researchers have solved a mystery about why a species of squid native to California has been found thriving in the Gulf of Alaska about 1,800 miles north of its expected rang...

Akamai Accelerator Program: Technological Solutions for India’s Water Crisis

Akamai’s India Corporate Social Responsibility CSR Trust is helping to tackle this major challenge. In accordance with the country’s CSR mandates, the trust allocates 2% of the branch’s revenue to CSR programs. Its flagship initiative is the Akamai Accelerator Program, which supports innovators w...

Preparing for Heightened Attacks in the Current Geopolitical Environment

The current geopolitical environment has raised many concerns about security postures and readiness to respond to a cyberattack. Today, Imperva customers are protected by our world-class network, application, and data security products. Alongside that, Imperva Threat Research is closely monitorin...

WordPress South Pole: Climate action now plugin <= 1.0.1 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress South Pole: Climate action now plugin versions = 1.0.1. Solution Update the WordPress South Pole: Climate action now plugin to the latest available version at least 1.0.2...

Friday Squid Blogging: Climate Change Causing “Squid Bloom” along Pacific Coast

The oceans are warmer, which means more squid. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Read my blog posting guidelines here...

COP26 Backs Electric Vehicles to Reduce Climate Change

The 26 United Nations Climate Change Conference pushes for countries of parties to adopt more widespread EV use in order to reduce the looming threats of climate change...

Friday Squid Blogging: Squid Eating Maine Shrimp

Squid are eating Maine shrimp, causing a collapse of the ecosystem. This seems to be a result of climate change. Maines shrimp fishery has been closed for nearly a decade since the stocks collapse in 2013. Scientists are now saying a species of squid that came into the Gulf of Maine during a...