SAP Web Intelligence BI LaunchPad Cross-Site Scripting Vulnerability

SAP Web Intelligence BI LaunchPad is a Java- or HTML-based user interface for use in BusinessObjects tools from SAP, Germany. The product is mainly used to perform analytical reporting and data analysis. A cross-site scripting vulnerability in SAP Web Intelligence BI LaunchPad versions 4.10 and...

SAP Manufacturing Integration and Intelligence Cross-Site Request Forgery Vulnerability

SAP Manufacturing Integration and Intelligence MII,xMII is a set of Germany's SAP SAP will be the core of the manufacturing system and enterprise process integration platform system. The system supports the creation of manufacturing engineering, manufacturing execution and enterprise workflow...

Ex-US Intelligence Agent Charged With Spying and Helping Iranian Hackers

The United States Department of Justice has announced espionage charges against a former US Air Force intelligence officer with the highest level of top-secret clearance for providing the Iranian government classified defense information after she defected to Iran in 2013. Monica Elfriede Witt ,...

TAU Threat Intelligence Notification: New macOS Malware Variant of Shlayer (OSX) Discovered

Carbon Black’s Threat Analysis Unit TAU recently discovered a new variant of a family of macOS malware which was first discovered in February of 2018 by researchers from Intego. TAU has obtained new samples of this malware and observed downloads of the malware from multiple sites, primarily...

Security Bulletin: A Security Vulnerability has been Identified in Websphere Application Server Shipped with Predictive Customer Intelligence (CVE-2018-10237)

Summary Websphere Application Server is shipped with Predictive Customer Intelligence. Information about a security vulnerability affecting Websphere Application Server has been published in a security bulletin. Vulnerability Details Please consult the security bulletin Security Bulletin: Potenti...

Cisco Unified Intelligence Center Cross-Site Scripting Vulnerability (CNVD-2020-14718)

Cisco Unified Intelligence Center is the United States Cisco Cisco company's set of Web-based reporting platform. The platform provides reports related to business data and call center data presentation capabilities. A cross-site scripting vulnerability exists in Cisco Unified Intelligence Center...

Why the US Needs a Strategy for AI

Opinion: With its American AI Initiative, the White House is devoting funding, research, and data infrastructure to boosting our prowess in artificial intelligence...

Cross site scripting

A vulnerability in the web-based management interface of Cisco Unified Intelligence Center Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface of an affected system. The vulnerability is due to insufficient inpu...

CVE-2019-1670

A vulnerability in the web-based management interface of Cisco Unified Intelligence Center Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface of an affected system. The vulnerability is due to insufficient inpu...

CVE-2019-1670

Cisco Unified Intelligence Center Software contains a web-interface cross-site scripting (XSS) vulnerability (CVE-2019-1670) due to insufficient input validation. An unauthenticated, remote attacker could lure a user into clicking a link, enabling arbitrary requests to be submitted to the affecte...

Trend Micro Security’s 2019 Release Protects You Better Than Ever Against Ransomware, Coin-mining, Banking, and E-Commerce Threats

2019 has barely gotten started, but by Q4 of 2018 Trend Micro had already seen a 956% increase in coin-mining malware detections for the year-to-date—right alongside the persistent threat of ransomware and online banking and e-commerce hacks designed to steal your identity or your money. Folks ca...

CVE-2019-1670: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Unified Intelligence Center Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface of an affected system. The vulnerability is due to insufficient inpu...

Cisco Unified Intelligence Center Software Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Unified Intelligence Center Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface of an affected system. The vulnerability is due to insufficient inpu...

Modern Cybercrime: It Takes a Village

LAS VEGAS – Contrary to the pop-culture image of the hoodie-clad lone hacker with mad keyboard “skillz” siphoning off funds and making people’s lives miserable with a few lines of brilliant code, increasingly cybercrime “takes a village”. The true face of cybercrime today is a more democratic one...

PT-2019-1375

Name of the Vulnerable Software and Affected Versions Cisco Unified Intelligence Center Software affected versions not specified Description The issue is related to insufficient input validation of a user-supplied value in the web-based management interface, which could allow an unauthenticated,...

Public-Interest Tech at the RSA Conference

Our work in cybersecurity is inexorably intertwined with public policy and­ -- more generally­ -- the public interest. It's obvious in the debates on encryption and vulnerability disclosure, but it's also part of the policy discussions about the Internet of Things, cryptocurrencies, artificial...

CB Customer Spotlight: Q&A with Ritter Insurance Marketing’s Dan McLellan

Dan McLellan is a Network Support Specialist at Ritter Insurance Marketing, and uses the Carbon Black community to increase his security knowledge and share information with his colleagues. Having access to insights from other security professionals has not only shortened the time he spends tryin...

Oracle Business Intelligence Enterprise Edition Analytics Server Data Manipulation

The vulnerability of the Analytics Server component of the Oracle Business Intelligence Enterprise Edition software from Oracle Fusion Middleware is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to modify, add,...

Oracle E-Business Intelligence Overview Page Data Modification

The vulnerability of the sub-component’s overview page/report rendering in Oracle E-Business Intelligence, a system for automating business processes within the Oracle E-Business Suite, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating...

Cisco Unified Intelligence Center Cross-Site Request Forgery Vulnerability (CNVD-2019-02751)

Cisco Unified Intelligence Center is the United States Cisco Cisco company's set of Web-based reporting platform. The platform provides a comprehensive display of report-related business data and call center data and other functions. A cross-site request forgery vulnerability exists in the...