Implementing Risk-Based Vulnerability Discovery and Remediation

In this day and age, vulnerabilities in software and systems pose a considerable danger to businesses, which is why it is essential to have an efficient vulnerability management program in place. To stay one step ahead of possible breaches and reduce the damage they may cause, it is crucial to...

CISA updates ransomware guidance

The Cybersecurity and Infrastructure Security Agency CISA has updated its StopRansomware guide to account for the fact that ransomware actors have accelerated their tactics and techniques since the original guide was released in September of 2020. The StopRansomware guide is set up as a one-stop...

cloudsolutionit.com.au Cross Site Scripting vulnerability OBB-2829960

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

WordPress Integrate Google Drive – Complete Google Drive Cloud Solution For WordPress plugin < 1.1.0 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Integrate Google Drive – Complete Google Drive Cloud Solution For WordPress plugin versions 1.1.0. Solution Update the WordPress Integrate Google Drive – Complete Google Drive Cloud Solution For WordPress plugin to the latest...

Cloud Lookup (and Bypass)

This module can be useful if you need to test the security of your server and your website behind a solution Cloud based. By discovering the origin IP address of the targeted host. More precisely, this module uses multiple data sources in order ViewDNS.info, DNS enumeration and Censys to collect...

Microsoft to Require Multi-Factor Authentication for Cloud Solution Providers

It might be difficult to fathom how this isn't already mandatory, but Microsoft Corp. says it will soon force all Cloud Solution Providers CSPs that help companies manage their Office365 accounts to use multi-factor authentication. The move comes amid a noticeable uptick in phishing and malware...

Breach at Cloud Solution Provider PCM Inc.

A digital intrusion at PCM Inc., a major U.S.-based cloud solution provider, allowed hackers to access email and file sharing systems for some of the company's clients, KrebsOnSecurity has learned. El Segundo, Calif. based PCM NASDAQ:PCMI is a provider of technology products, services and solutio...

CISO series: Build in security from the ground up with Azure enterprise

As an executive security advisor at Microsoft and a former CISO, I meet with other CISOs every week to discuss cybersecurity, cloud architecture, and sometimes everything under the sun regarding technology. During these discussions with CISOs and other senior security executives of large...

10 Endpoint Security Problems Solved by the Cloud – Identifying Problems

Last week we looked at how the cloud keeps your endpoints from becoming sluggish and pointed out why it is uniquely positioned to predict new threats. This week, we’re going to examine why the cloud outperforms traditional antivirus when it comes to identifying problems. Can't Fix What You Can't...

10 Endpoint Security Problems Solved by the Cloud – Managing Multiple Agents

So far in this blog series, we’ve discussed the state of endpoint security, and the challenges of keeping systems up to date and integrating multiple products. This installment will take a look at how the cloud solves our third challenge: managing multiple agents. Too Much To Keep Track Of A good...

IBM WebSphere Cast Iron Solution XML External Entity Injection Vulnerability

IBM WebSphere Cast Iron Solution is a cloud-based solution from IBM USA. It enables organizations to connect their hybrid public cloud, private cloud and on-premise application environments. An XML external entity injection vulnerability exists in IBM WebSphere Cast Iron Solution. A remote attack...

CVE-2016-5850

Cross-site scripting XSS vulnerability in the volume backup service module in Huawei Public Cloud Solution before 1.0.5 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-5850

Cross-site scripting XSS vulnerability in the volume backup service module in Huawei Public Cloud Solution before 1.0.5 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-5850

CVE-2016-5850 affects Huawei Public Cloud Solution (volume backup service module) prior to 1.0.5. The vulnerability is an XSS issue exploitable by remote authenticated users via unspecified vectors to inject scripts/HTML; advisory HWPSIRT-2016-06017 notes updates to fix the problem. If exploited,...