@amitport/useful (>=0.5.0, <=0.5.2), @arivazhagan/demo-project (1.0.1) +966 more potentially affected by CVE-2019-10768 via angular (>=1.0.8, <=1.7.8)

angular NPM version =1.0.8, =0.5.0, =0.0.8, =2.3.0, =1.5.8, =2.8.3-2, =0.1.0, =1.0.0, =0.0.7, =0.0.1, =0.2.24, =0.0.1, =0.0.1, =0.0.5, =0.1.7 and more Source cves: CVE-2019-10768 Source advisory: OSV:GHSA-89MQ-4X47-5V83...

November 19, 2019—KB4525251 (Preview of Monthly Rollup)

None None...

Google Enlists Help to Fight Bad Android Apps

After years of unsuccessfully battling malware and bad apps in the Google Play store and on more than 2.5 billion Android devices, Google is finally doing something about it. The tech giant this week unveiled an alliance with three companies with specific expertise in endpoint security to help...

@amitport/useful (>=0.5.0, <=0.5.2), @arivazhagan/demo-project (1.0.1) +835 more potentially affected by CVE-2019-10768 via angular (>=1.4.0, <=1.7.8)

angular NPM version =1.4.0, =0.5.0, =0.0.8, =2.3.0, =1.5.8, =2.8.3-2, =0.1.0, =1.0.0, =0.0.7, =0.0.1, =0.2.24, =0.0.1, =0.0.1, =0.0.5, =0.1.7 and more Source cves: CVE-2019-10768 Source advisory: SNYK:JS-ANGULAR-534884...

CVE-2013-5123

The mirroring support -M, --use-mirrors in Python Pip before 1.5 uses insecure DNS querying and authenticity checks which allows attackers to perform man-in-the-middle attacks...

Akamai Identified as a Leader Among Zero Trust Providers by Independent Research Firm

We are pleased to share that Akamai has been identified as a Leader in The Forrester Wave™: Zero Trust eXtended Ecosystem Platform Providers, Q4 2019. In the report, Forrester evaluated how each vendor's portfolio maps and delivers on specific components of the Zero Trust eXtended ZTX framework...

How to Scale Addressable Advertising with Low Latency for Live Streaming

Written by: David Springfall, Founder and CTO of Yospace Under David's technical and strategic leadership, Yospace pioneered server-side ad insertion and established itself as the global leader in OTT stream monetisation. The Yospace technology supports full one-to-one personalisation and provide...

Russian APT Map Reveals 22,000 Connections Between 2000 Malware Samples

Though Russia still has an undiversified and stagnant economy, it was one of the early countries in the world to realize the value of remotely conducted cyber intrusions. In recent years, many Russia hacking groups have emerged as one of the most sophisticated nation-state actors in cyberspace,...

IoT Security Challenges in a 5G Era: Expert Advice

When it comes to what we can expect with 5G mobile networks, they promise a more IoT friendly ecosystem, with vast improvements over the current capabilities of the 4G. Providing ultra low-latency and exponentially faster throughput along with sensors that will boast a 10-year battery life 5G pav...

WordPress companion-sitemap-generator plugin cross-site request forgery vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. companion-sitemap-generator is a sitemap plugin used in it. A cross-site request forgery vulnerability exists in the WordPress...

Announcing 2019 MSRC Most Valuable Security Researchers

Earlier today we announced MSRC’s 2018-2019 Most Valuable Security Researchers at Black Hat. The following 75 researchers hail from all corners of the world and possess varied experience and skills, yet all of them have contributed to securing the Microsoft’s customers and the broader ecosystem...

[SECURITY] Fedora 30 Update: matrix-synapse-1.2.1-1.fc30

Matrix is an ambitious new ecosystem for open federated Instant Messaging a nd VoIP. Synapse is a reference "homeserver" implementation of Matrix from the core development team at matrix.org, written in Python/Twisted. It is inten ded to showcase the concept of Matrix and let folks see the spec i...

Fedora Update for matrix-synapse FEDORA-2019-80f1943143

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

It’s Official – The Way We Recognize Our Security Researchers

We deeply appreciate the partnership of the many talented security researchers who report vulnerabilities to Microsoft through Coordinated Vulnerability Disclosure. We pay bounties for research in key areas, and each year at Black Hat USA, we’ve recognized the most impactful researchers helping t...

Agent Smith Malware Infects 25M Android Phones to Push Rogue Ads

Researchers are warning of a new breed of Android malware, dubbed “Agent Smith,” that they claim has infected 25 million handsets in order to replace legitimate apps with doppelgangers that display rogue ads. The malware is tied to a China-based firm, according to Check Point researchers, and is...

amethyst_derive (>=0.4.0, <=0.5.0), amethyst_test (>=0.2.0, <=0.3.0) +81 more potentially affected by unknown CVE via boxfnonce (>=0.0.3, <=0.1.1)

boxfnonce CARGO version =0.0.3, =0.4.0, =0.2.0, =0.1.0, =0.2.5, =0.5.0, =0.3.1, =0.2.0, =0.5.0, =0.0.0, =3.0.0, =0.1.3, =0.0.1, =0.4.0, =0.5.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2019-0040...

@allenbrowntech/lemon-lui (>=1.0.1, <=2.0.0), @angular-template/ng1-build (>=2.0.0-beta.1, <=2.0.0-beta.6) +738 more potentially affected by unknown CVE via underscore.string (>=3.0.3, <=3.3.4)

underscore.string NPM version =3.0.3, =1.0.1, =2.0.0-beta.1, =0.0.1, =0.0.1, =1.2.0, =1.0.0, =1.1.1, =2.0.0-beta.1, =0.7.8, =0.3.0, =0.7.0-alpha.5e822d8d, =1.0.0, =1.0.0, =1.1.4 and more Source cves: unknown CVE Source advisory: OSV:GHSA-V2P6-4MP7-3R9V...

@gkatsev/grunt-harp (>=0.18.0, <=0.19.0), @mobify/documentation-theme (>=1.11.3, <=2.0.0-preview.2-dev) +21 more potentially affected by CVE-2019-5438 via harp (>=0.9.5, <=0.32.0)

harp NPM version =0.9.5, =0.18.0, =1.11.3, =1.11.3, =0.0.3, =0.0.8-pre2, =0.0.1, =0.0.1, =0.0.1-1, =0.0.1, =0.1.0, =0.1.0, =0.2.9 - n-p-m 1.1.0 and more Source cves: CVE-2019-5438 Source advisory: OSV:GHSA-6FMM-47QC-P4M4...

@aabenoja/karma-phantomjs-launcher (0.2.1), @aabenoja/phantomjs (2.0.0) +183 more potentially affected by unknown CVE via npmconf (>=2.0.9, <=2.1.2)

npmconf NPM version =2.0.9, =0.1.28, =1.2.6, =2.7.2, =4.5.201902251314, =1.5.0-alpha.1, =5.0.201901071713, =5.0.201812141540, =1.0.1-server20190117165116, =1.0.201901260938, =1.0.3, =2.0.0, =2.2.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-57CF-349J-352G...

Ensuring security of your Microsoft Teams apps with Microsoft Cloud App Security

Apps in Microsoft Teams allow you to leverage additional capabilities, enhance your experience, and make Teams work for you by adding your favorite Microsoft and third-party services. Today, hundreds of ecosystem apps provide a great way to enhance and customize Teams, but to enable applications...