Lucene search
+L

4747 matches found

The Hacker News
The Hacker News
added 2017/06/01 8:57 a.m.22 views

OneLogin Password Manager Hacked; Users’ Data Can be Decrypted

Do you use OneLogin password manager? If yes, then immediately change all your account passwords right now. OneLogin, the cloud-based password management and identity management software company, has admitted that the company has suffered a data breach. The company announced on Thursday that it h...

6.5AI score
SaveExploits0
Imperva Blog
Imperva Blog
added 2017/05/25 3:26 p.m.29 views

Protect Against WannaCry with Deception-Based Ransomware Detection

The WannaCry ransomware attack caught the world off guard—and may have even literally left some crying. The attack infected more than 230,000 computers in 150 countries by encrypting data on networked machines and demanding payments in Bitcoin. According to Malwarebytes researchers, the attack...

7AI score
SaveExploits0
Trend Micro Simply Security
Trend Micro Simply Security
added 2017/05/25 1:48 p.m.20 views

WannaCry Highlights Major Security Shortcomings Ahead of GDPR D-Day

For all the panic it caused, WannaCry looks finally to have been contained by organisations round the globe. But this isn’t the time to forget about it and move on. There are valuable lessons to be learned about this attack, why it was so successful and what can be done to prevent it happening...

6.6AI score
SaveExploits0
Microsoft KB
Microsoft KB
added 2017/05/23 12:0 a.m.36 views

Update Rollup 13 for System Center 2012 R2 Data Protection Manager

Update Rollup 13 for System Center 2012 R2 Data Protection Manager Introduction This article describes the issues that are fixed in Update Rollup 13 for Microsoft System Center 2012 R2 Data Protection Manager. It also contains the installation instructions for this update. Note Existing Data...

6.4AI score
SaveExploits0
OSV
OSV
added 2017/05/22 1:29 a.m.4 views

CVE-2017-6642

A vulnerability in the web interface of Cisco Remote Expert Manager Software 11.0.0 could allow an unauthenticated, remote attacker to access sensitive information on an affected system. The vulnerability exists because the affected software does not sufficiently protect sensitive data when...

5.3CVSS5.9AI score0.02663EPSS
SaveExploits0References2
Qualys Blog
Qualys Blog
added 2017/05/17 4:0 p.m.45 views

For GDPR Readiness, You Need Visibility into Your IT Assets

The looming deadline for complying with the EU’s General Data Protection Regulation GDPR is shining the spotlight on a foundational InfoSec best practice: A comprehensive IT asset inventory. The reason: GDPR places strict requirements on the way a business handles the personally identifiable...

6.5AI score
SaveExploits0
CISA
CISA
added 2017/05/09 12:0 a.m.9 views

FTC Announces Resource for Small Business Owners

The Federal Trade Commission FTC has released an announcement about its new website devoted to protecting small businesses. This resource aims to help business owners avoid scams, protect their computers and networks, and keep their customers' and employees' data safe. Business owners and other...

6.9AI score
SaveExploits0References3
Lenovo
Lenovo
added 2017/05/08 12:0 a.m.94 views

Lenovo Active Protection System Privilege Escalation - us

Lenovo Security Advisory: LEN-13637 Potential Impact: Privilege Escalation or Denial of Service Severity: High Scope of Impact: Lenovo-specific CVE Identifier: CVE-2017-3740 Summary Description: During an internal assessment, a local privilege escalation vulnerability was identified in Lenovo...

4.9CVSS5.8AI score0.00335EPSS
SaveExploits0
Lenovo
Lenovo
added 2017/05/08 12:0 a.m.23 views

Lenovo Active Protection System Privilege Escalation - Lenovo Support US

No description provided...

5.7AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2017/05/04 12:0 a.m.9 views

The vulnerability of the Android operating system, which allows a violator to compromise data privacy

The vulnerability of the Mediaserver application for the Android operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to compromise data confidentiality through a local malware application...

4.3CVSS6.3AI score0.00597EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2017/05/04 12:0 a.m.12 views

The vulnerability of the Android operating system, which allows a violator to compromise data privacy

The vulnerability of the libskia service in the Android operating system is related to the lack of protection for service-related data. Exploiting this vulnerability allows a malicious actor to compromise data confidentiality through a local malware application...

4.3CVSS6.3AI score0.00541EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2017/05/04 12:0 a.m.7 views

The vulnerability of the Android operating system, which allows a violator to compromise data privacy

The vulnerability of the libmpeg2 service in the Mediaserver application of the Android operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to compromise data privacy through the use of a local malware application...

4.3CVSS6.2AI score0.00597EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2017/05/04 12:0 a.m.8 views

The vulnerability of the Android operating system, which allows a perpetrator to gain access to the data of the previous owner

The vulnerability of the Android operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to the data of the previous owner, as a result of resetting the settings to the factory defaults...

4.3CVSS6.3AI score0.00479EPSS
SaveExploits0References3Affected Software1
ThreatPost
ThreatPost
added 2017/04/27 2:27 p.m.12 views

Chrome to Mark More HTTP Pages 'Not Secure'

Google began in January flashing warnings in the Chrome address bar that a page was “Not Secure” if password or payment card data fields were present. “Since the change in Chrome 56, there has been a 23 percent reduction in the fraction of navigations to HTTP pages with password or credit card...

SaveExploits0References8
BDU FSTEC
BDU FSTEC
added 2017/04/27 12:0 a.m.9 views

The vulnerabilities in programs for viewing and editing PDF files such as Adobe Reader, Adobe Acrobat Document Cloud, Adobe Reader Document Cloud, and Adobe Acrobat allow attackers to trigger a memory leak.

The vulnerabilities of PDF viewing and editing programs such as Adobe Reader, Adobe Acrobat Document Cloud, Adobe Reader Document Cloud, and Adobe Acrobat are related to the lack of protection for sensitive data. Exploiting these vulnerabilities can allow a malicious actor to trigger a memory lea...

4.3CVSS7AI score0.04107EPSS
SaveExploits0References4Affected Software2
Imperva Blog
Imperva Blog
added 2017/04/26 3:30 p.m.18 views

3 Steps to Protecting Sensitive Data

Cyber criminals, compromised insiders, malicious users, hacktivists. It seems like everyone is getting in on the threat game. In fact, despite efforts to prevent them, last year the U.S. experienced a 40% increase in data breaches according to a report by the Identity Theft Resource Center and...

6.6AI score
SaveExploits0
ThreatPost
ThreatPost
added 2017/04/26 11:39 a.m.14 views

Lack of Security Talent Afflicts Health Care

BOSTON—Reality has bitten healthcare hard in the last year, with dire vulnerabilities in medical devices bubbling to the surface, malware infections affecting patient care at a number of facilities, and the realization that nowhere is the lack of information security professionals more pressing...

7.4AI score
SaveExploits0References7
BDU FSTEC
BDU FSTEC
added 2017/04/20 12:0 a.m.13 views

The vulnerability of the Mac OS X operating system, which allows a perpetrator to obtain confidential information

The vulnerability of the Hypervisor component in the Mac OS X operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an intruder, acting locally, to obtain confidential information using uncertain vectors...

2.1CVSS7.2AI score0.00335EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2017/04/20 12:0 a.m.9 views

The vulnerability of the iOS operating system allows a hacker to obtain an Apple ID identifier.

The vulnerability of the iOS operating system’s Accounts component is related to the lack of protection for service data. Exploiting this vulnerability could allow a local attacker to obtain an Apple ID, by taking advantage of authentication vulnerabilities during a quick screen lock in iCloud...

2.1CVSS5.8AI score0.00369EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2017/04/20 12:0 a.m.7 views

The vulnerability of the Mac OS X operating system, which allows a perpetrator to obtain confidential information

The vulnerability of the iBooks component in the Mac OS X operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to obtain confidential information through a URL in the iBooks file...

4.3CVSS5.8AI score0.01226EPSS
SaveExploits1References4Affected Software1
Rows per page
Query Builder