3522 matches found
Chinese Breakthrough in Quantum Computing a Warning for Security Teams
China’s top quantum-computer researchers have reported that they have achieved quantum supremacy, i.e., the ability to perform tasks a traditional supercomputer cannot. And while it’s a thrilling development, the inevitable rise of quantum computing means security teams are one step closer to...
Iranian RANA Android Malware Also Spies On Instant Messengers
A team of researchers today unveiled previously undisclosed capabilities of an Android spyware implant—developed by a sanctioned Iranian threat actor—that could let attackers spy on private chats from popular instant messaging apps, force Wi-Fi connections, and auto-answer calls from specific...
Low: Red Hat Bug Fix Advisory: OpenShift Container Platform 4.4.31 packages update
Red Hat OpenShift Container Platform release 4.4.31 is now available with updates to packages and images that fix several bugs. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. This...
K7 Computing Total Security Security Vulnerabilities
K7 Computing Total Security is a suite of antivirus software for the Windows platform from K7 Computing, USA. A security vulnerability exists in versions prior to Quick Heal Total Security 19.0 that stems from the security of the sysinfo file through the explicit text ex...
Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.5.20 bug fix and golang security update
Red Hat OpenShift Container Platform release 4.5.20 is now available with updates to packages and images that fix several bugs. This release includes a security update for golang for Red Hat OpenShift Container Platform 4.5. Red Hat Product Security has rated this update as having a security impa...
Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.5.20 packages and golang security update
Red Hat OpenShift Container Platform release 4.5.20 is now available with updates to packages and images that fix several bugs. This release also includes a security update for golang for Red Hat OpenShift Container Platform 4.5.20. Red Hat Product Security has rated this update as having a...
The vulnerability of the Intel Computing Improvement Program’s data collection tool, related to access control deficiencies, allows unauthorized individuals to gain unauthorized access to protected information.
The vulnerability of the Intel Computing Improvement Program data collection tool is related to lack of access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
Don’t Let These Top Cloud Myths Hamper Your Business Decision-Making
The cloud remains a dominant technology innovation well into its second decade of existence. However, after all this time, certain cloud computing myths still creep into the minds of CIOs and other denizens of the corner office. For example, some business decision-makers feel the cloud is simply ...
Cisco Integrated Management Controller RCE (cisco-sa-ucs-api-rce-UXwpeDHd)
According to its self-reported version, Cisco Unified Computing System E-Series Software UCSE is affected by multiple remote code execution RCE vulnerabilities in the API subsystem due to improper boundary checks for certain user-supplied input. An unauthenticated, remote attacker can exploit...
CVE-2020-26933
Trusted Computing Group TCG Trusted Platform Module Library Family 2.0 Library Specification Revisions 1.38 through 1.59 has Incorrect Access Control during a non-orderly TPM shut-down that uses USEDAUSED. Improper initialization of this shut-down may result in susceptibility to a dictionary atta...
Design/Logic Flaw
Trusted Computing Group TCG Trusted Platform Module Library Family 2.0 Library Specification Revisions 1.38 through 1.59 has Incorrect Access Control during a non-orderly TPM shut-down that uses USEDAUSED. Improper initialization of this shut-down may result in susceptibility to a dictionary atta...
CVE-2020-26933
CVE-2020-26933 concerns the Trusted Computing Group TPM Library Family 2.0 (library revisions 1.38–1.59). The issue is an Incorrect Access Control during a non-orderly TPM shut-down that uses USE_DA_USED, where improper initialization may render the TPM vulnerable to a dictionary attack. The core...
CVE-2020-26933
Trusted Computing Group TCG Trusted Platform Module Library Family 2.0 Library Specification Revisions 1.38 through 1.59 has Incorrect Access Control during a non-orderly TPM shut-down that uses USEDAUSED. Improper initialization of this shut-down may result in susceptibility to a dictionary atta...
Brute forcing device passwords
When working with IoT and embedded systems, brute-force password guessing attacks are an effective tool to gain access. Over the years, I’ve learned some tips and tricks to make these attacks more effective. What is brute forcing? Very simply, it’s guessing passwords so that you can find a valid...
Botnet Attackers Turn to Vulnerable IoT Devices
The vast number of Internet-of-Things IoT devices are proving to be lucrative for botnet operators to carry out various attacks – from sending spam to launching harmful distributed denial-of-service DDoS attacks, according to Derek Manky, Chief of Security Insights & Global Threat Alliances at...
Intel Computing Improvement Program Access Control Error Vulnerability (CNVD-2020-66317)
Intel Computing Improvement Program is a software improvement program application from Intel Corporation USA. The program is used to collect information on computer function usage, component usage, operating system information, and more. An Access Control Error vulnerability exists in Intel...
CVE-2020-12308
Improper access control for the IntelR Computing Improvement Program before version 2.4.5982 may allow an unprivileged user to potentially enable information disclosure via network access...
Improper access control
Improper access control for the IntelR Computing Improvement Program before version 2.4.5982 may allow an unprivileged user to potentially enable information disclosure via network access...
CVE-2020-12308
CVE-2020-12308 affects Intel Computing Improvement Program before version 2.4.5982. The root cause is improper access control, potentially allowing an unprivileged user to disclose information via network access. The NVIDIA? (no) is not relevant. The advisory and multiple CNA sources corroborate ...