RHEL 7 : sos-collector (RHSA-2018:3663)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2018:3663 advisory. sos-collector is a utility that gathers sosreports from multi-node environments. sos-collector facilitates data collection for support cases and it c...

The vulnerability of the syntactic analyzer in LQS files of data collection and process automation monitoring tools like LAquis SCADA allows a perpetrator to execute arbitrary code.

The vulnerability of the data collection and industrial automation control tool LAquis SCADA is related to insufficient verification of the name of the path to the catalog. Exploiting this vulnerability could allow a malicious actor to execute arbitrary codes remotely...

The vulnerability of the LAquis SCADA data collection and process control tool, related to buffer overflow in memory, allows a intruder to execute arbitrary code.

The vulnerability of the data collection and industrial automation control tool LAquis SCADA is related to buffer overflow attacks. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

The vulnerability of the syntactic analyzer in LQS files of data collection and process automation monitoring tools like LAquis SCADA allows a perpetrator to execute arbitrary code.

The vulnerability of the LQS syntax analyzer in data collection files and in LAquis SCADA, a tool for industrial automation control, is related to the use of pointers. Exploiting this vulnerability could allow an attacker operating remotely to execute arbitrary code...

The vulnerability of the syntactic analyzer in LQS files of data collection and process automation monitoring tools like LAquis SCADA allows a perpetrator to execute arbitrary code.

The vulnerability of the LQS syntax analyzer in data collection files and in the LAquis SCADA system for process automation control is related to buffer overflow in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

General Motors collected location & radio listening habits data of 90,000 drivers

By Waqas The listening habits of around 90,000 drivers of General Motors in Chicago and Los Angeles were monitored by the company for three months in 2017 under its radio-tracking program. The Detroit Free Press reported later released a report that General Motors was involved in targeted...

Are the Police Using Smart-Home IoT Devices to Spy on People?

IoT devices are surveillance devices, and manufacturers generally use them to collect data on their customers. Surveillance is still the business model of the Internet, and this data is used against the customers' interests: either by the device manufacturer or by some third party the manufacture...

BloodHound Ingestor

This module will execute the BloodHound C Ingestor aka SharpHound to gather sessions, local admin, domain trusts and more. With this information BloodHound will easily identify highly complex attack paths that would otherwise be impossible to quickly identify within an Active Directory environmen...

The 4 Core Pillars of Endpoint Security

Cb Connect is always an exciting time for me. At Cb Connect 2017, we unveiled our vision for the Cb Predictive Security Cloud PSC. Over the past year, this platform has expanded and grown to provide better prevention, detection and response for our global customers. Today, at CbConnect18, we...

Adding Cb ThreatHunter to the Cb Predictive Security Cloud (PSC)

This is another big day for Carbon Black. Earlier, we announced Cb ThreatHunter, our newest offering on the Cb Predictive Security Cloud PSC, which delivers powerful threat hunting and incident response IR capabilities to the platform. The announcement of Cb ThreatHunter, which will be the fourth...

FLIR Systems FLIR Thermal Traffic Cameras RTSP Stream Disclosure

FLIR Systems FLIR Thermal Traffic Cameras RTSP Stream Disclosure Vendor: FLIR Systems, Inc. Product web page: https://www.flir.com Affected firmware version: V1.01-0bb5b27 TrafiOne Codename: TrafiOne E1.00.09 TI BPL2 EDGE Codename: TIIP4EDGE V1.02.P01 TI x-stream Codename: TIIP2 V1.05.P01 ThermiC...

The vulnerability of the Intel Computing Improvement Program’s data collection tool, caused by privilege management errors, allows a perpetrator to execute arbitrary code with administrator privileges.

The vulnerability of the Intel Computing Improvement Program’s data collection tool is caused by privilege management errors. Exploiting this vulnerability could allow a attacker to execute arbitrary code with administrator privileges...

Fuji Electric V-Server Integer Overflow Vulnerability

Fuji Electric V-Server VPR is a data collection software from Fuji Electric Japan. An integer overflow vulnerability exists in Fuji Electric V-Server VPR 4.0.3.0 and earlier versions. A remote attacker could exploit this vulnerability to execute code...

Fuji Electric V-Server Buffer Overflow Vulnerability

Fuji Electric V-Server VPR is a data collection software from Fuji Electric Japan. A heap buffer overflow vulnerability exists in Fuji Electric V-Server VPR 4.0.3.0 and earlier versions. A remote attacker could exploit this vulnerability to execute code...

Microsoft Windows: Configure Connected User Experiences and Telemetry

With this policy setting, you can forward Connected User Experience and Telemetry requests to a proxy server. If you enable this policy setting, you can specify the FQDN or IP address of the destination device within your organization SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptio...

Apple Removes Several Trend Micro Apps For Collecting MacOS Users' Data

Apple has removed almost all popular security apps offered by well-known cyber-security vendor Trend Micro from its official Mac App Store after they were caught stealing users' sensitive data without their consent. The controversial apps in question include Dr Cleaner, Dr Cleaner Pro, Dr...

Answers to Your Questions on Our Apps in the Mac App Store

Updated Oct. 4; please scroll down for latest information. Reports that Trend Micro is “stealing user data” and sending them to an unidentified server in China are absolutely false. Trend Micro has completed an initial investigation of a privacy concern related to some of its macOS consumer...

7-Technologies IGSS Vulnerabilities

Overview This advisory is a follow-up to ICS-ALERT-11-080-03 7-Technologies IGSS Vulnerabilities, published on the ICS-CERT Web site on March 20, 2011. An independent researcher has identified eight vulnerabilities in 7-Technologies 7T IGSS SCADA human-machine interface HMI application. Each of t...

We know what your kids did this summer

For many kids and teenagers, summer is all about ditching school books in favor of hobbies and fun. Every year we release a report on children's interests, as reflected in their online activity. This summer, we investigated what they prefer in their free time. The Parental Control module in...

A week in security (August 20 – August 26)

Last week on Labs, we took a look at insider threats, doubled back on the privacy of search browser extensions, profiled green card scams, revisited Defcon badgelife, and talked about what happens to a user's accounts when they die. Other cybersecurity news There was an archiving error in Twitch...