Insider Risks In the Work-From-Home World

The employee who exfiltrated data after being fired. The employees who exposed 250 million customer records. The employee who stole trade secrets to get a leg up in his next job because hey, after all, it’s “his” work that he’s taking, right? Those are our traditional notions of insider risk and...

Unauthorized Access Vulnerability in AXIS M3114 Network Camera

Axis is an IT company that specializes in providing web video solutions. An unauthorized access vulnerability exists in AXIS M3114 Network Camera, which can be exploited by attackers to obtain sensitive information...

Post-it 5.0.1 - Denial of Service Exploit

Exploit Title: Post-it 5.0.1 - Denial of Service PoC Author: Geovanni Ruiz Download Link: https://apps.apple.com/es/app/post-it/id920127738 Version: 5.0.1 Category: DoS iOS Vulnerability Post-it is vulnerable to a DoS condition when a long list of characters is being used when creating a note:...

Post-it 5.0.1 - Denial of Service (PoC)

Exploit Title: Post-it 5.0.1 - Denial of Service PoC Date: 06-14-2021 Author: Geovanni Ruiz Download Link: https://apps.apple.com/es/app/post-it/id920127738 Version: 5.0.1 Category: DoS iOS Vulnerability Post-it is vulnerable to a DoS condition when a long list of characters is being used when...

Post-it 5.0.1 Denial Of Service

Exploit Title: Post-it 5.0.1 - Denial of Service PoC Date: 06-14-2021 Author: Geovanni Ruiz Download Link: https://apps.apple.com/es/app/post-it/id920127738 Version: 5.0.1 Category: DoS iOS Vulnerability Post-it is vulnerable to a DoS condition when a long list of characters is being used when...

Unauthorized Access Vulnerability in AXIS P1357 Network Camera

Axis is an IT company that specializes in providing web video solutions. An unauthorized access vulnerability exists in the AXIS P1357 Network Camera, which can be exploited by attackers to obtain sensitive information...

Unauthorized Access Vulnerability in AXIS 211W Network Camera

Axis is an IT company that specializes in providing web video solutions. An unauthorized access vulnerability exists in AXIS 211W Network Camera, which can be exploited by attackers to obtain sensitive information...

Unauthorized Access Vulnerability in Axis 205 Network Camera

Axis is an IT company that specializes in providing web video solutions. An unauthorized access vulnerability exists in Axis 205 Network Camera, which can be exploited by attackers to obtain sensitive information...

Unauthorized Access Vulnerability in Axis 221 Network Camera

Axis is an IT company that specializes in providing web video solutions. An unauthorized access vulnerability exists in Axis 221 Network Camera, which can be exploited by attackers to obtain sensitive information...

Unauthorized Access Vulnerability in Axis M1011-W Network Camera

Axis is an IT company that specializes in providing web video solutions. An unauthorized access vulnerability exists in Axis M1011-W Network Camera, which can be exploited by attackers to obtain sensitive information...

Unauthorized Access Vulnerability in Axis 206 Network Camera

Axis is an IT company that specializes in providing web video solutions. An unauthorized access vulnerability exists in Axis 206 Network Camera, which can be exploited by attackers to obtain sensitive information...

Unauthorized Access Vulnerability in Axis M1011 Network Camera

Axis is an IT company that specializes in providing web video solutions. An unauthorized access vulnerability exists in Axis M1011 Network Camera, which can be exploited by attackers to obtain sensitive information...

Dell OpenManage Enterprise OS Command Injection Vulnerability

Dell OpenManage Enterprise is an easy-to-use, one-to-many system management console for IT infrastructure management from Dell, Inc. Dell OpenManage Enterprise-Modular is vulnerable to an operating system command injection vulnerability that could be exploited by an attacker to bypass restriction...

JBS Paid $11M to REvil Gang Even After Restoring Operations

JBS Foods paid the equivalent of $11 million in ransom after a cyber-attack that forced the company to shut down some operations in the United States and Australia over the Memorial Day weekend. The company made the payment to cybercriminals to ensure the protection of its data and mitigate any...

June Patch Tuesday: Internet Explorer Finally Laid to Rest

The June 2021 Patch Tuesday cycle offers good news to both IT and website administrators...

Logic Flaw Vulnerability in Techland MADP2.0 Mobile Financial Development Platform

Beijing Techland Software System Co., Ltd. is a banking IT solution provider. A logic flaw vulnerability exists in the Techland MADP2.0 mobile financial development platform. An attacker can utilize the vulnerability to add arbitrary users...

Command Execution Vulnerability in H3C SecPath Operations Audit System

Xinhua San Technology Co., Ltd. is a new IT solution provider, committed to become the most trusted partner for customers' business innovation and digital transformation. The main products are routers, big data, switches, IoT, cloud computing, servers and so on. A command execution vulnerability...

Unspecified Vulnerability in RSA Archer

RSA Archer is an enterprise IT governance and compliance governance product from RSA UK. A security vulnerability exists in RSA Archer between versions 6.4 and 6.9 that stems from a malicious attack capable of accessing Tableau workbook files, which can be exploited by an attacker to gain access ...

Understanding the threat landscape and risks of OT environments

The security community is continuously changing, growing, and learning from each other to better position the world against cyber threats. In the latest Voice of the Community blog series post, Microsoft Product Marketing Manager Natalia Godyla talks with Chris Sistrunk, Technical Manager in...

Understanding the threat landscape and risks of OT environments

The security community is continuously changing, growing, and learning from each other to better position the world against cyber threats. In the latest Voice of the Community blog series post, Microsoft Product Marketing Manager Natalia Godyla talks with Chris Sistrunk, Technical Manager in...