PT-2019-15385

Name of the Vulnerable Software and Affected Versions Symantec Messaging Gateway versions prior to 10.7.3 Description The issue is related to a server-side request forgery SSRF exploit. This type of issue can allow an attacker to send crafted requests from the backend server of a vulnerable web...

PT-2019-15384

Name of the Vulnerable Software and Affected Versions Symantec Messaging Gateway versions prior to 10.7.3 Description The issue is related to a cross-site scripting XSS exploit, which can enable attackers to inject client-side scripts into web pages viewed by other users. This type of issue can...

PT-2019-15383

Name of the Vulnerable Software and Affected Versions Symantec Messaging Gateway versions prior to 10.7.3 Description The issue is a privilege escalation problem, where an attacker may try to compromise the software to gain elevated access to normally protected resources. Recommendations For...

Fedora Update for rabbitmq-server FEDORA-2019-74d2feb5be

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 31 Update: rabbitmq-server-3.7.22-1.fc31

RabbitMQ is an implementation of AMQP, the emerging standard for high performance enterprise messaging. The RabbitMQ server is a robust and scalable implementation of an AMQP broker...

[SECURITY] Fedora 30 Update: rabbitmq-server-3.7.22-1.fc30

RabbitMQ is an implementation of AMQP, the emerging standard for high performance enterprise messaging. The RabbitMQ server is a robust and scalable implementation of an AMQP broker...

Symantec Messaging Gateway Multiple Issues

SUMMARY Symantec has released an update to address issues that were discovered in the Symantec Messaging Gateway SMG product. AFFECTED PRODUCTS Symantec Messaging Gateway SMG --- CVE | Affected Versions | Remediation CVE-2019-18377 CVE-2019-18378 CVE-2019-18379 | Prior to 10.7.3 | Upgrade to 10.7...

NSO Group President Defends Controversial Tactics

In a rare public appearance by Shiri Dolev, the president of the secretive NSO Group Technologies, the company leader vented over what she called “false myths” about the firm. Dolev also took indirect aim at secure messaging platforms, offered by the likes of Facebook, explaining surveillance...

systemd: systemd-resolved allows unprivileged users to configure DNS

An improper authorization flaw was discovered in systemd-resolved in the way it configures the exposed DBus interface org.freedesktop.resolve1. An unprivileged local attacker could call all DBus methods, even when marked as privileged operations. An attacker could abuse this flaw by changing the...

Bumble: Reflected XSS

The researcher has found an XSS when sending messages through our service...

Threat Source newsletter (Nov. 7, 2019)

Newsletter compiled by Jon Munshaw. Welcome to this week’s Threat Source newsletter — the perfect place to get caught up on all things Talos from the past week. The only news we’re going to cover this week is the biggest news we’ve had in a while. Tuesday, we announced that Cisco Incident Respons...

Why Many People Got Mysterious Valentine’s Day Texts Today

The issue was reportedly caused by a maintenance update made to “messaging platforms of multiple carriers in the US."...

WhatsApp's Case Against NSO Group Hinges on a Tricky Legal Argument

The Facebook-owned messaging company is taking on a notorious malware vendor in what could be an uphill battle...

Verizon, AT&T, Sprint and T-Mobile to replace SMS with RCS Messaging in 2020

Mobile carriers in the United States will finally offer a universal cross-carrier communication standard for the next-generation RCS messaging service that is meant to replace SMS and has the potential to change the way consumers interact with brands for years to come. All major United States...

Verizon, AT&T, Sprint and T-Mobile to replace SMS with RCS Messaging in 2020

Mobile carriers in the United States will finally offer a universal cross-carrier communication standard for the next-generation RCS messaging service that is meant to replace SMS and has the potential to change the way consumers interact with brands for years to come. All major United States...

CVE-2019-9699

Symantec Messaging Gateway prior to 10.7.0, may be susceptible to an information disclosure issue, which is a type of vulnerability that could potentially allow unauthorized access to data...

CVE-2019-9699

Symantec Messaging Gateway prior to 10.7.0, may be susceptible to an information disclosure issue, which is a type of vulnerability that could potentially allow unauthorized access to data...

Information disclosure

Symantec Messaging Gateway prior to 10.7.0, may be susceptible to an information disclosure issue, which is a type of vulnerability that could potentially allow unauthorized access to data...

CVE-2019-9699

Symantec Messaging Gateway prior to 10.7.0, may be susceptible to an information disclosure issue, which is a type of vulnerability that could potentially allow unauthorized access to data...

CVE-2019-9699

CVE-2019-9699 affects Symantec Messaging Gateway (SMG) 10.x prior to 10.7.0. The issue is an information-disclosure vulnerability that could allow unauthorized data access. Remediation is to upgrade to SMG version 10.7.0 (per vendor advisories). Several connected sources confirm the affected prod...