CISA Warns of High-Severity Flaws in Schneider and GE Digital's SCADA Software

The U.S. Cybersecurity and Infrastructure Security Agency CISA last week published an industrial control system ICS advisory related to multiple vulnerabilities impacting Schneider Electric's Easergy medium voltage protection relays. "Successful exploitation of these vulnerabilities may disclose...

WordPress Easy Digital Downloads – Courses plugin <= 0.1.0 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Easy Digital Downloads – Courses plugin versions = 0.1.0. Solution Update the WordPress Easy Digital Downloads – Courses plugin to the latest available version at least 0.1.1...

WordPress Accessibility Checker by Equalize Digital plugin < 1.2.8 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Accessibility Checker by Equalize Digital plugin versions 1.2.8. Solution Update the WordPress Accessibility Checker by Equalize Digital plugin to the latest available version at least 1.2.8...

WordPress Accessibility Checker by Equalize Digital plugin < 1.2.8 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Accessibility Checker by Equalize Digital plugin versions 1.2.8. Solution Update the WordPress Accessibility Checker by Equalize Digital plugin to the latest available version at least 1.2.8...

WordPress Bulk Edit Easy Digital Downloads – Fast Bulk Creator plugin < 1.0.49 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Bulk Edit Easy Digital Downloads – Fast Bulk Creator plugin versions 1.0.49. Solution Update the WordPress Bulk Edit Easy Digital Downloads – Fast Bulk Creator plugin to the latest available version at least 1.0.49...

WordPress Import Holded for WooCommerce or Easy Digital Downloads plugin <= 1.4 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Import Holded for WooCommerce or Easy Digital Downloads plugin versions = 1.4. Solution Update the WordPress Import Holded for WooCommerce or Easy Digital Downloads plugin to the latest available versi...

WordPress Google Sheet Connector for Easy Digital Downloads plugin <= 1.2 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Google Sheet Connector for Easy Digital Downloads plugin versions = 1.2. Solution Update the WordPress Google Sheet Connector for Easy Digital Downloads plugin to the latest available version at least...

WordPress Google Sheet Connector for Easy Digital Downloads plugin <= 1.2 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Google Sheet Connector for Easy Digital Downloads plugin versions = 1.2. Solution Update the WordPress Google Sheet Connector for Easy Digital Downloads plugin to the latest available version at least 1.3...

WordPress WooCommerce Checkout For Digital Goods plugin <= 3.6.3 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress WooCommerce Checkout For Digital Goods plugin versions = 3.6.3. Solution Update the WordPress WooCommerce Checkout For Digital Goods plugin to the latest available version at least 3.6.4...

WordPress Bulk Edit Easy Digital Downloads – Fast Bulk Creator plugin < 1.0.49 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Bulk Edit Easy Digital Downloads – Fast Bulk Creator plugin versions 1.0.49. Solution Update the WordPress Bulk Edit Easy Digital Downloads – Fast Bulk Creator plugin to the latest available version at...

WordPress Easy Digital Downloads – Courses plugin <= 0.1.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Easy Digital Downloads – Courses plugin versions = 0.1.0. Solution Update the WordPress Easy Digital Downloads – Courses plugin to the latest available version at least 0.1.1...

WordPress WooCommerce Checkout For Digital Goods plugin <= 3.6.3 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress WooCommerce Checkout For Digital Goods plugin versions = 3.6.3. Solution Update the WordPress WooCommerce Checkout For Digital Goods plugin to the latest available version at least 3.6.4...

WordPress Import Holded for WooCommerce or Easy Digital Downloads plugin <= 1.4 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Import Holded for WooCommerce or Easy Digital Downloads plugin versions = 1.4. Solution Update the WordPress Import Holded for WooCommerce or Easy Digital Downloads plugin to the latest available version at least 2.0...

CVE-2021-25636

LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alteration of the document occurred since the last signing and that the signature is valid. An Improper Certificate Validation vulnerability in LibreOffice allowed an attacker to...

CVE-2021-25636

LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alteration of the document occurred since the last signing and that the signature is valid. An Improper Certificate Validation vulnerability in LibreOffice allowed an attacker to...

Input validation

LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alteration of the document occurred since the last signing and that the signature is valid. An Improper Certificate Validation vulnerability in LibreOffice allowed an attacker to...

CVE-2021-25636

LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alteration of the document occurred since the last signing and that the signature is valid. An Improper Certificate Validation vulnerability in LibreOffice allowed an attacker to...

UBUNTU-CVE-2021-25636

LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alteration of the document occurred since the last signing and that the signature is valid. An Improper Certificate Validation vulnerability in LibreOffice allowed an attacker to...

Microsoft Security delivers new multicloud capabilities

In times of great change, challenges and opportunities can be found in many directions. This is certainly true in IT and cybersecurity. Today, while navigating a pandemic, frequent supply chain shocks, and global talent shortages, organizations around the world are forced to confront sophisticate...

A New Cybersecurity “Social Contract”

The US National Cyber Director Chris Inglis wrote an essay outlining a new social contract for the cyber age: The United States needs a new social contract for the digital age -- one that meaningfully alters the relationship between public and private sectors and proposes a new set of obligations...