Microsoft Security delivers new multicloud capabilities

In times of great change, challenges and opportunities can be found in many directions. This is certainly true in IT and cybersecurity. Today, while navigating a pandemic, frequent supply chain shocks, and global talent shortages, organizations around the world are forced to confront sophisticate...

USN-5294-2: Linux kernel vulnerabilities

It was discovered that the Packet network protocol implementation in the Linux kernel contained a double-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2021-22600 Szymon Heidrich discovered that the USB Gadget...

Cloudsploit - Cloud Security Posture Management (CSPM)

Quick Start Generic $ git clone https://github.com/aquasecurity/cloudsploit.git $ cd cloudsploit $ npm install $ ./index.js -h Docker $ git clone https://github.com/aquasecurity/cloudsploit.git $ cd cloudsploit $ docker build . -t cloudsploit:0.0.1 $ docker run cloudsploit:0.0.1 -h $ docker run -...

ServiceNow Orlando 安全漏洞

ServiceNow Orlando is a cloud-based platform from US-based ServiceNow, Inc. A security vulnerability exists in ServiceNow Orlando that stems from a password reset form in ServiceNow Orlando that provides different responses to invalid authentication attempts based on the existence of a username...

Google Cloud Storage Bucket Detected

Google Cloud Storage is a public cloud storage service available in Google Cloud Platform GCP which provides a programmatic way to store and retrieve data objects in storage containers called buckets. Web applications often rely on storage buckets to serve static assets images or scripts for...

Heartland OA2021 Winter Snow Edition suffers from a logic flaw vulnerability (CNVD-2022-13942)

Heartland OA is developed based on the SaaS architecture of cloud computing model to meet the needs of government cloud, industrial cloud, education cloud and other intelligent cloud platform construction. A logic flaw vulnerability exists in Heartland OA2021 Winter Snow Edition, which can be...

USN-5162-1: Linux kernel vulnerabilities

Ilja Van Sprundel discovered that the SCTP implementation in the Linux kernel did not properly perform size validations on incoming packets in some situations. An attacker could possibly use this to expose sensitive information kernel memory. CVE-2021-3655 It was discovered that the AMD...

Hackers Using Compromised Google Cloud Accounts to Mine Cryptocurrency

Threat actors are exploiting improperly-secured Google Cloud Platform GCP instances to download cryptocurrency mining software to the compromised systems as well as abusing its infrastructure to install ransomware, stage phishing campaigns, and even generate traffic to YouTube videos for view cou...

mongo-java-driver: client-side field level encryption not verifying KMS host name

Specific versions of the Java driver that support client-side field level encryption CSFLE fail to perform correct host name verification on the KMS server’s certificate. This vulnerability in combination with a privileged network position active MITM attack could result in interception of traffi...

GC2 - A Command And Control Application That Allows An Attacker To Execute Commands On The Target Machine Using Google Sheet And Exfiltrate Data Using Google Drive

GC2 Google Command and Control is a Command and Control application that allows an attacker to execute commands on the target machine using Google Sheet and exfiltrates data using Google Drive. Why This program has been developed in order to provide a command and control that does not require any...

From Technical Features to Customer Security Metrics

Qualys solutions are packed with great functionality to deliver operational efficiency to all our customers, but the value does not end with bits and bytes. Qualys customers can count on Technical Account Managers to maximize the effectiveness of their subscription, and this post tells a story...

USN-5073-2: Linux kernel (GCP) vulnerabilities

Maxim Levitsky and Paolo Bonzini discovered that the KVM hypervisor implementation for AMD processors in the Linux kernel allowed a guest VM to disable restrictions on VMLOAD/VMSAVE in a nested guest. An attacker in a guest VM could use this to read or write portions of the host's physical memory...

Doodle Smart app and Doodle Converter (smart socket) have a flawed logic vulnerability

Doodle Smart is an IoT cloud platform that connects brands, OEMs, developers and chain retailers with their intelligence needs, providing a one-stop AI IoT PaaS-level solution that covers hardware development, global cloud, and smart business platform development, providing comprehensive ecologic...

Netskope Client 安全漏洞

Netskope Client is a client program from Netskope USA for connecting to manage the Netskope Cloud Platform. A security vulnerability exists in Netskope Client that allows low-privileged users to elevate their privileges to NT AUTHORITYSYSTEM...

Unauthorized Access Vulnerability in Ovia's Instructional Video Application Cloud Platform

Ltd. is a high-tech enterprise focusing on the research and development, production, sales and service of education informatization products. Guangzhou Aoweiya Electronic Technology Co., Ltd. campus video application cloud platform has unauthorized access vulnerability, attackers can use the...

Arbitrary File Download Vulnerability in Taibo Cloud Platform of Xiamen Taibo Technology Co.

TabTech Ltd. is a software company focusing on the informationization of senior universities. Xiamen Taibo Technology Co., Ltd. Taibo Cloud Platform has an arbitrary file download vulnerability that can be exploited by attackers to obtain sensitive information...

XSS Vulnerability in the Transportation Management Cloud Platform of Shanghai BuBuYiBai Technology Co.

Ltd. is a high-tech enterprise providing information system for domestic small and medium-sized logistics. Shanghai BBYB Technology Co., Ltd. has an XSS vulnerability in its transportation management cloud platform, which can be exploited by attackers to obtain sensitive information such as user...

Weak Password Vulnerability in Intelligent Firefighting Cloud Platform of Suzhou State Grid Electronic Technology Co.

GNT is an IoT+ management solution provider. A weak password vulnerability exists in the Intelligent Firefighting Cloud Platform of Suzhou Guonet Electronic Technology Co. Ltd. where an attacker utilizes a weak password to log into the backend and obtain sensitive information...

Information Leakage Vulnerabilities in the Education Cloud Platform of Beijing Zhongqing Nabo Information Technology Co.

Beijing Zhongqing Nabo Information Technology Co., Ltd. is a core enterprise of Zhongqing Group and one of the pioneering enterprises in the field of education information technology in China. An information leakage vulnerability exists in the education cloud platform of Beijing Zhongqing Nabo...

Logic flaws exist in the management informationization practical training cloud platform of Changjie Tong Information Technology Co.

Stock Code: 1588.HK is a member company of UFIDA. Changjitong is committed to providing social, personalized, service-oriented and small business management support for small and medium-sized enterprises SMEs. A logic flaw vulnerability exists in the management informationization practical traini...