2004 matches found
Security Bulletin: IBM Maximo Asset Management is vulnerable to cross-site scripting (CVE-2020-4223)
Summary IBM Maximo Asset Management is vulnerable to cross-site scripting. Vulnerability Details CVEID: CVE-2020-4223 DESCRIPTION: IBM Maximo Asset Management is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the...
Cisco Talos replacing all mentions of 'blacklist,' 'whitelist'
There are many ways to respond to injustice, both large and small, but each response is important. While we acknowledge it is a small change, Cisco Talos is moving to replace our use of the terms "blacklist" and "whitelist" with "block list" and "allow list.” Even though these terms are commonly ...
What's the Best Approach to SSO and Consumer Session Management for Your Businesses?
If you want to see an argument break out among identity professionals, mention single sign-on SSO and consumer session management. As fast as this technology's evolved is as fast as it's become one of the most contentiously debated topics in the field. As a senior customer identity and access...
Tycoon Ransomware Banks on Unusual Image File Tactic
A new ransomware strain called Tycoon is seeking to wheel and deal its way into the Windows and Linux worlds, using a little-known Java image format as part of its kill chain. The ransomware is housed in a trojanized version of the Java Runtime Environment JRE, according to researchers at...
Intel Thunderbolt Vulnerabilities - Lenovo Support US
No description provided...
Synaptics Fingerprint Vulnerabilities - Lenovo Support US
No description provided...
Synaptics Fingerprint Vulnerabilities - Lenovo Support US
Lenovo Security Advisory: LEN-31372 Potential Impact: Information disclosure, privilege escalation Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2019-18618, CVE-2019-18619 Summary Description: Synaptics reported the following vulnerabilities in Synaptics Fingerprint drivers:...
AMI MegaRAC SP-X BMC Redfish Authentication Bypass - Lenovo Support US
No description provided...
Intel CSME, SPS, TXE, AMT and DAL Advisory - Lenovo Support US
No description provided...
Multi-vendor BIOS Security Vulnerabilities (June 2020) - Lenovo Support US
Lenovo Security Advisory: LEN-30042 Potential Impact: Privilege escalation, denial of service, information disclosure Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2020-0528, CVE-2020-0529, CVE-2020-8320, CVE-2020-8321, CVE-2020-8322, CVE-2020-8323, CVE-2020-8333, CVE-2020-833...
Multi-vendor BIOS Security Vulnerabilities (June 2020) - Lenovo Support US
No description provided...
Intel Special Register Buffer Data Sampling Advisory - Lenovo Support US
Lenovo Security Advisory: LEN-30043 Potential Impact: Information disclosure Severity: Medium Scope of Impact: Industry-wide CVE Identifier: CVE-2020-0543 Summary Description: Intel reported potential security vulnerabilities in some Intel Processors that may allow information disclosure. This...
Respect and Equal Protection For Everyone
We are profoundly distressed by the racism, bigotry and violence committed against people of color in our society and by public institutions. Here at Akamai, we have no tolerance for discrimination. We value our diversity. It is a strength of our organization. And in a moment when many people are...
old.soft-industry.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1173559 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
The DHS Prepares for Attacks Fueled by 5G Conspiracy Theories
The claim that 5G can spread the coronavirus has led to dozens of cell-tower burnings in Europe. Now, the US telecom industry is on alert as well...
Going dark: encryption and law enforcement
UPDATE, 05/22/2020: In the advent of the EARN IT Act, the debate on government subversion of encryption has reignited. Given that the material conditions of the technology have not changed, and the arguments given in favor of the bill are not novel, we've decided to republish the following blog...
Iranian APT Group Targets Governments in Kuwait and Saudi Arabia
Today, cybersecurity researchers shed light on an Iranian cyber espionage campaign directed against critical infrastructures in Kuwait and Saudi Arabia. Bitdefender said the intelligence-gathering operations were conducted by Chafer APT also known as APT39 or Remix Kitten, a threat actor known fo...
Remote Workforce is NOT the New Norm, but “Secure Work Anywhere” Should Be
Secure Work Anywhere SWA is a new term for an old idea that is quickly becoming an industry standard. The overall principles of SWA are not new, but the risks associated with increased rates of workers connecting from potentially unsecure networks highlight the importance of those principles now...
Cloud Industry CMS suffers from SQL injection vulnerability (CNVD-2020-32828)
Yunye CMS enterprise building system is developed by php + mysql a set of open source CMS dedicated to small and medium-sized enterprise website construction. Yunye CMS SQL injection vulnerability , attackers can use the vulnerability to obtain database sensitive information...
Policy Compliance Library Updates, May 2020
Qualys’ library of built-in policies makes it easy to comply with the security standards and regulations that are most commonly used and adhered to. Qualys provides a wide range of policies, including many that have been certified by CIS as well as the ones based on security guidelines from OS an...