Microsoft Edge Information Disclosure Vulnerability (CNVD-2019-42798)

Microsoft Edge is a web browser from Microsoft USA that is the default browser that comes with the Windows 10 operating system. An information disclosure vulnerability exists in Microsoft Edge. An attacker can exploit this vulnerability with the help of memory addresses of created objects to obta...

Adobe Acrobat and Reader Untrusted pointer dereference (APSB19-07: CVE-2019-7054)

A vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Adobe Acrobat and Reader Buffer Errors (APSB19-07: CVE-2019-7085)

A vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Adobe Acrobat and Reader Untrusted pointer dereference (APSB19-07: CVE-2019-7076)

A vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Adobe Acrobat and Reader Untrusted pointer dereference (APSB19-07: CVE-2019-7051)

A vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Adobe Acrobat and Reader Double Free (APSB19-07: CVE-2019-7080)

A vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Adobe Acrobat and Reader Untrusted pointer dereference (APSB19-07: CVE-2019-7042)

A vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Adobe Acrobat and Reader Untrusted pointer dereference (APSB19-07: CVE-2019-7046)

A vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Adobe Acrobat and Reader Buffer Errors (APSB19-07: CVE-2019-7020)

A vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Microsoft’s Cyber Defense Operations Center shares best practices

Today, a single breach, physical or virtual, can cause millions of dollars of damage to an organization and potentially billions in financial losses to the global economy. Each week seems to bring a new disclosure of a cybersecurity breach somewhere in the world. As we look at the current state o...

Huawei Router Authentication Bypass (CVE-2014-5395)

A vulnerability exists in Huawei router. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Incident Response In The Public Eye

Cyberattacks happen constantly. Every day organizations are attackers online whether they realize it or not. Most of these attacks are passing affairs. The mere fact that systems are on to the internet makes them a target of opportunity. For the most part, these attacks are non-events. Security...

Adobe Acrobat and Reader Untrusted pointer dereference (APSB18-41: CVE-2018-16004)

A vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Adobe Acrobat and Reader Untrusted pointer dereference (APSB18-41: CVE-2018-19720)

A vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Banks Attacked through Malicious Hardware Connected to the Local Network

Kaspersky is reporting on a series of bank hacks -- called DarkVishnya -- perpetrated through malicious hardware being surreptitiously installed into the target network: In 2017-2018, Kaspersky Lab specialists were invited to research a series of cybertheft incidents. Each attack had a common...

Trend Micro IWSVA Parameter Command Injection - Ver2

A vulnerability exists in Trend Micro. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

HPE System Management Homepage Issue (CVE-2017-12544) - Ver2

A vulnerability exists in HPE System Management Homepage. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

CVE-2018-1799: Undefined Security Weakness

IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server 9.7, 10.1, 10.5, and 11.1 could allow a local unprivileged user to overwrite files on the system which could cause damage to the database. IBM X-Force ID: 149429...

ThreatList: 1 Out of 5 Would Ditch a Business After a Data Breach

About a fifth of Americans would ditch a business in the wake of a major data breach, new research has found. In a survey of 2,000 adult consumers across the United States by PCI Pal, almost half 44 percent of them have personally suffered the negative consequences of a security breach or hack. S...

rpm4 -- regression in -setperms, -setugids and -restore

rpm4 reports: Regression in -setperms, -setugids and -restore Note that this update can not automatically fix possible damage done by using -setperms, -setugids or -restore with rpm 4.14.2, it merely fixes the functionlity itself. Any damage needs to be investigated and fixed manually, such as...