Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with Asset and Service Management (CVE-2021-20480)

Summary IBM WebSphere Application Server is shipped as a component of Maximo Asset Management, Maximo Industry Solutions including Maximo for Nuclear Power, Maximo for Transportation, Maximo for Life Sciences, Maximo for Oil and Gas, and Maximo for Utilities, Maximo Adapter for Primavera,...

Dolby DAX2 API Vulnerability - Lenovo Support US

No description provided...

Gambling, Streaming Traffic Up During Men's College Basketball Tourney

Baylor wasn't the only big winner in the 2021 men's college basketball tournament. Gambling industry-related web traffic delivered by Akamai jumped 31% over the category average for all of Q4 2020 on March 31st. That was the day after the field of four finalists - Baylor, Houston, Gonzaga and UCL...

Gambling, Streaming Traffic Up During Men's College Basketball Tourney

Gambling industry-related web traffic delivered by Akamai jumped 31% over the category average for all of Q4 2020 on March 31st...

PYSA, the ransomware attacking schools

The education sector’s cybersecurity problem has compounded in the last few months. A recent warning from the FBI, in mid-March, put schools in the US and UK on notice of increased attacks from the threat actors behind the PYSA ransomware. If this is the first time you’ve heard of this family, re...

APT10: sophisticated multi-layered loader Ecipekac discovered in A41APT campaign

Why is the campaign called A41APT? In 2019, we observed an APT campaign targeting multiple industries, including the Japanese manufacturing industry and its overseas operations, that was designed to steal information. We named the campaign A41APT not APT41 which is derived from the host name...

Weak password vulnerability in NR235P of Shenzhen Leike Industry Co.

The NR235P is a small business equipment type broadband router. A weak password vulnerability exists in the NR235P of Shenzhen Leike Industrial Co. An attacker can utilize the weak password to log into the backend and obtain sensitive information...

Weak password vulnerability in NR285P of Shenzhen Leike Industry Co.

The NR285P is a customized router for medium-sized businesses and the education industry. Shenzhen Leike Industry Co. Ltd NR285P has a weak password vulnerability that can be exploited by attackers to obtain sensitive information...

Weak password vulnerability in NR208 of Shenzhen Leike Industry Co.

NR218 is a router from Shenzhen Leike Industrial Co. Shenzhen Leike Industrial Co., Ltd NR208 suffers from a weak password vulnerability that can be exploited by attackers to obtain sensitive information...

Weak password vulnerability in NR255P of Shenzhen Leike Industry Co.

NR255P is a new generation of high-performance QOS router developed by Shenzhen Lei Ke Industry Co., Ltd. which is specially tailored for small businesses, tiny Internet cafes and rental houses. Shenzhen Leike Industry Co., Ltd NR255P has a weak password vulnerability, which can be exploited by...

Weak password vulnerability in NR285G of Shenzhen Leike Industry Co.

NR285G is a router from Shenzhen Leike Industrial Co. Ltd. The NR285G suffers from a weak password vulnerability that can be exploited by an attacker to obtain sensitive information...

Weak password vulnerability in NR238 of Shenzhen Leike Industry Co.

NR238 is a router from Shenzhen Leike Industrial Co. Ltd. The NR238 suffers from a weak password vulnerability that can be exploited by an attacker to obtain sensitive information...

Women in Security Part 5: Meet Lavine Oluoch, Threat Analyst

This post is part of our Women’s History Month series - follow along with us on Twitter @VMwareCarbonBlack In continued celebration of Women’s History Month, we are excited to bring you our next featured security expert as a part of our six-part Women in Security series. Throughout March, we are...

Women in Security Part 4: Meet Jan Lawford, Senior Director of EMEA Security Sales

This post is part of our Women’s History Month series - follow along with us on Twitter @VMwareCarbonBlack As we continue to celebrate Women’s History Month, we are honored to share the stories of women in our VMware Security Business Unit, including members of our team and customers alike. By...

VMware Carbon Black Ranks Among Top 10 of 100 Cybersecurity Companies by the University of San Diego

We are proud to announce that VMware Carbon Black has been ranked within the top 10 organizations on the University of San Diego Cybersecurity Team’s annual list of the Top 100 Cybersecurity Companies of 2020. The annual list of cybersecurity companies highlights the most influential players in a...

Security Bulletin: Multiple security vulnerabilties have been identified in IBM DB2 shipped with IBM Maximo Asset Management

Summary IBM DB2 is shipped as a component of IBM Maximo Asset Management. Information about the security vulnerability affecting IBM DB2 has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and...

Trend Micro + ROS-I: Building a more secure future

Trend Micro joins ROS-I Consortium to help accelerate the secure development of robotic Industry 4.0 applications...

Arbitrary File Download Vulnerability in WiseStar Universal Collection Management System

Huixing Software Technology Co., Ltd. specializes in the development of software for the water industry. It has developed a series of management software for the water industry: Huixing Water Charge Management System, Huixing Water Business Management Information System, Huixing Water Expansion a...

[SECURITY] Fedora 33 Update: containerd-1.4.4-1.fc33

Containerd is an industry-standard container runtime with an emphasis on simplicity, robustness and portability. It is available as a daemon for Lin ux and Windows, which can manage the complete container lifecycle of its host system: image transfer and storage, container execution and supervisio...

CVE-2021-21334

CVE-2021-21334 affects containerd’s CRI plugin: when multiple containers/pods are launched from the same image, containers may receive incorrect environment variables shared across them, potentially exposing sensitive data. The issue is fixed in containerd versions 1.3.10 and 1.4.4; affected envi...