5 Identity Threat Detection & Response Must-Haves for Super SaaS Security

Identity-based attacks are on the rise. Attackers are targeting identities with compromised credentials, hijacked authentication methods, and misused privileges. While many threat detection solutions focus on cloud, endpoint, and network threats, they overlook the unique risks posed by SaaS...

CVE-2017-7990: Cross-Site Request Forgery (CSRF)

The Reporting Module 1.12.0 for OpenMRS allows CSRF attacks with resultant XSS, in which administrative authentication is hijacked to insert JavaScript into a name field in webapp/reports/manageReports.jsp...

Ubuntu 14.04 LTS / 16.04 LTS : curl vulnerabilities (USN-3123-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3123-1 advisory. It was discovered that curl incorrectly reused client certificates when built with NSS. A remote attacker could possibly use this issue to...