15044 matches found
How to Cultivate a Security-first Approach to Your Business
Businesses of all types and sizes are struggling with complexity. They?re addressing hybrid workforces that need to be secured, digital transformation programs, geographic regulations and data laws, industry regulations, and the list goes on. In the midst of this complexity, organizations have to...
nss: Memory corruption in decodeECorDsaSignature with DSA signatures (and RSA-PSS)
A remote code execution flaw was found in the way NSS verifies certificates. This flaw allows an attacker posing as an SSL/TLS server to trigger this issue in a client application compiled with NSS when it tries to initiate an SSL/TLS connection. Similarly, a server application compiled with NSS,...
USN-5168-1 nss vulnerability
Tavis Ormandy discovered that NSS incorrectly handled verifying DSA/RSA-PSS signatures. A remote attacker could use this issue to cause NSS to crash, resulting in a denial of service, or possibly execute arbitrary code...
Capcom Arcade Stadium’s record player numbers blamed on card mining
Some of my favourite retro video games are making waves on Steam, but not in the way you might think. Classics such as Strider, Ghosts n’ Goblins, and more are all available as content for Capcom Arcade Stadium. This is an emulator which lets you play 31 arcade games from the 80s/90s. The games...
UBUNTU-CVE-2021-43527
NSS Network Security Services versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap overflow when handling DER-encoded DSA or RSA-PSS signatures. Applications using NSS for handling signatures encoded within CMS, S/MIME, PKCS \7, or PKCS \12 are likely to be impacted. Applications using N...
USN-5165-1 linux-oem-5.14 vulnerabilities
It was discovered that the NFC subsystem in the Linux kernel contained a use-after-free vulnerability in its NFC Controller Interface NCI implementation. A local attacker could possibly use this to cause a denial of service system crash or execute arbitrary code. CVE-2021-3760 It was discovered...
It’s a Wrap! QSC 2021 Las Vegas Laid Out Problems, Solutions and Innovation
Although organizations have made moves toward it for years, digital transformation, in a way, has only just begun. The pandemic may have accelerated migration to the cloud but going forward business will drive continued transformation—and innovation. But to get the most out of the investments in...
ICO challenges adtech to step up privacy protection
The UK Information Commissioners Office ICO wants the advertising industry to come up with new initiatives that address the risks of adtech, and take account of data protection requirements from the outset. The ICO is an independent body set up to uphold information rights. The technology that is...
CronRAT: A New Linux Malware That's Scheduled to Run on February 31st
Researchers have unearthed a new remote access trojan RAT for Linux that employs a never-before-seen stealth technique that involves masking its malicious actions by scheduling them for execution on February 31st, a non-existent calendar day. Dubbed CronRAT, the sneaky malware "enables server-sid...
Weak Password Vulnerability in Cyber-Sign's NetSign Digital Signature System
Ltd. is the earliest professional vendor engaged in the research, development and application of PKI technology in China. A weak password vulnerability exists in the NetSign digital signature system, which can be exploited by attackers to obtain sensitive information...
Arbitrary File Read Vulnerability in Cyber-Sign's NetSign Digital Signature System
Ltd. is the earliest professional vendor engaged in the research, development and application of PKI technology in China. There is an arbitrary file reading vulnerability in the NetSign digital signature system, which can be exploited by an attacker to read server files...
Huawei Emui and Magic UI bypass vulnerability
Huawei Emui is a mobile operating system developed on Android. magic Ui is a mobile operating system developed on Android. a bypass vulnerability exists in Huawei Emui and Magic UI. The vulnerability stems from an invalid digital balance setting in maintenance mode. An attacker could exploit the...
MVP Health Care secures member portal access with Microsoft Azure Active Directory B2C
Hello! I’m Sue Bohn, Microsoft Vice President of Program Management for Identity and Network Access. In today’s Voice of the Customer blog post, Chief Technology Officer and Chief Information Security Officer David Swits of MVP Health Care shares how Microsoft Azure Active Directory B2C helped th...
MVP Health Care secures member portal access with Microsoft Azure Active Directory B2C
Hello! I’m Sue Bohn, Microsoft Vice President of Program Management for Identity and Network Access. In today’s Voice of the Customer blog post, Chief Technology Officer and Chief Information Security Officer David Swits of MVP Health Care shares how Microsoft Azure Active Directory B2C helped th...
CVE-2021-37032
There is a Bypass vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause Digital Balance to fail to work...
CVE-2021-37032
There is a Bypass vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause Digital Balance to fail to work...
CVE-2021-37032
There is a Bypass vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause Digital Balance to fail to work...
Security feature bypass
There is a Bypass vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause Digital Balance to fail to work...
CVE-2021-37032
CVE-2021-37032 is described in connected CNVD/RH/NVD entries as a bypass vulnerability in Huawei Emui/Magic UI. The root cause is an invalid digital balance setting in maintenance mode, enabling a bypass that can cause Digital Balance to become inoperable on affected Huawei smartphones. Public de...
