CVE-2023-25822

creationtimestamp| type| source ---|---|--- 2023-10-09 18:15:57+00:00| seen| https://t.me/cibsecurity/71843...

How to Protect Against Data Lake Hacking

Data lakes, or centralized repositories for large-scale data, are a popular solution for data storage, and there are good reasons for that. Data lakes are flexible and cost-effective, as they allow many object formats and multiple query engines, and there is no need to manage or pay for resources...

CVE-2023-42455 Wazuh vulnerable to user privilege escalation

Wazuh is a security detection, visibility, and compliance open source project. In versions 4.4.0 and 4.4.1, it is possible to get the Wazuh API administrator key used by the Dashboard using the browser development tools. This allows a logged user to the dashboard to become administrator of the AP...

CVE-2023-42455

Summary: CVE-2023-42455 affects Wazuh 4.4.0 and 4.4.1, where a logged-in dashboard user can obtain the Wazuh API administrator key via browser developer tools, potentially granting API administrator access regardless of dashboard-role privileges. The issue is resolved in version 4.4.2. Notes from...

WEBIGniter v28.7.23 File Upload - Remote Code Execution

Title: WEBIGniter v28.7.23 File Upload - Remote Code Execution Author: nu11secur1ty Date: 09/04/2023 Vendor: https://webigniter.net/ Software: https://webigniter.net/demo Reference: https://portswigger.net/web-security/file-upload Description: The media function suffers from file upload...

The vulnerability of the Protection Agent component in Watchguard Endpoint Protection’s Detection and Response (EPDR) and Panda Adaptive Defense 360 (Panda AD360) allows attackers to enhance their privileges.

The vulnerability of the Protection Agent component in Watchguard Endpoint Protection, Detection and Response EPDR, and Panda Adaptive Defense 360 Panda AD360 is related to access control deficiencies. Exploiting this vulnerability can allow attackers to enhance their privileges by sending...

PT-2023-13523 · Lenovo · Thinkpad X13 Gen3 +1

Name of the Vulnerable Software and Affected Versions: ThinkPad T14s Gen 3 affected versions not specified ThinkPad X13 Gen3 affected versions not specified Description: A vulnerability was reported that could cause the BIOS tamper detection mechanism to not trigger under specific circumstances,...

Rhysida Ransomware

Rhysida Ransomware By Alexandre Mundo, Max Kersten, and Leandro Velasco · October 9, 2023 New ransomware victims are made every day by ransom gangs with a variety of ransomware malware families, one of which is the Rhysida ransomware family. Within this blog, an anonymised version of an attack by...

What’s New in Rapid7 Detection & Response: Q3 2023 in Review

This post takes a look at some of the investments we've made throughout Q3 2023 to our Detection and Response offerings to provide advanced DFIR capabilities with Velociraptor, more flexibility with custom detection rules, enhancements to our dashboard and log search features, and more. Stop...

A Cybersecurity Risk Assessment Guide for Leaders

Cybersecurity risk assessment provides the continuous asset detection, analysis, prioritization, and risk scoring needed to keep pace with a continuously growing digital attack surface...

WatchGuard EPDR Security Vulnerability

WatchGuard EPDR is an application from WatchGuard USA, Inc. prevents, detects and responds to any type of known and unknown malware as well as fileless and malware-free attacks. A security vulnerability exists in WatchGuard EPDR version 8.0.21.0002, which stems from a weak implementation of...

PT-2023-20554 · Watchguard · Watchguard Epdr

Name of the Vulnerable Software and Affected Versions: WatchGuard EPDR version 8.0.21.0002 Description: An issue was discovered in WatchGuard EPDR, where it is possible to bypass the defensive capabilities by adding a registry key as SYSTEM. Recommendations: For WatchGuard EPDR version 8.0.21.000...

Security Bulletin: Cross-Site Scripting Attacks (XSS) on Service Portal

Summary The Service Portal web application delivers data to its users along with other trusted dynamic content, without validating it. The regex-based input HTML replacement may turn sanitized code into un-sanitized code. Vulnerability Details Refer to the security bulletins listed in the...

Cisco Adaptive Security Appliance Detection

Binary data ciscoasadetect.nbin...

Sophos Intercept X Detection and Status

Binary data sophosinterceptxwinstatus.nbin...

SUSE SLES15 Security Update : kernel (Live Patch 13 for SLE 15 SP4) (SUSE-SU-2023:3922-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3922-1 advisory. This update for the Linux Kernel 5.14.21-1504002466 fixes several issues. The following security issues were fixed: - CVE-2023-3776: Fixed...

CVE-2023-33106

creationtimestamp| type| source ---|---|--- 2023-10-03 19:17:46+00:00| exploited| Telegram/Rxu4zo-zqPtpxwJhXuMIjF4FHa6XqkwC7R1LNZHIISepQ 2023-10-03 19:23:21+00:00| exploited| https://t.me/KomunitiSiber/881 2023-10-04 10:12:19+00:00| exploited| https://t.me/kasperskyb2b/917 2023-10-04...

CVE-2023-4929

creationtimestamp| type| source ---|---|--- 2023-10-03 18:46:19+00:00| seen| https://t.me/cibsecurity/71510...

Proactively Prevent Breaches with Expanded Endpoint Protection in Rapid7 MDR

Working with thousands of security and risk professionals across the globe, we know that complexity is the top challenge SOCs are facing today. As the attack surface rapidly expands, security teams need more effective ways to keep pace with digital transformation and get out of the cycle of...

Unlock Broader Detections and Forensics with Velociraptor in Rapid7 XDR

Nearly 70% of companies that are breached are likely to get breached again within twelve months CPO. Effective remediation and addressing attacks at the root is key to staying ahead of threats and recurring breaches on the endpoint. Strong Digital Forensics and Incident Response DFIR ready to go...