Are You Promoting Security Fluency in your Organization?

Migrating to the cloud is hard. The PowerPoint deck and pretty architectures are drawn up quickly but the work required to make the move will take months and possibly years. The early stages require significant effort by teams to learn new technologies the cloud services themselves and new ways o...

Principles of a Cloud Migration

Development and application teams can be the initial entry point of a cloud migration as they start looking at faster ways to accelerate value delivery. One of the main things they might use during this is “Infrastructure as Code,” where they are creating cloud resources for running their...

PT-2020-14430 · Centos · Centos Web Panel

Name of the Vulnerable Software and Affected Versions: CentOS Web Panel version cwp-e17.0.9.8.923 Description: This issue allows remote attackers to execute arbitrary code on affected installations. Authentication is not required to exploit this issue. The flaw exists within the ajax migration...

PT-2020-14424 · Centos · Centos Web Panel

Name of the Vulnerable Software and Affected Versions: CentOS Web Panel version cwp-e17.0.9.8.923 Description: This issue allows remote attackers to execute arbitrary code on affected installations. Authentication is not required to exploit this issue. The flaw exists within the ajax migration...

PT-2020-20009 · Ruby On Rails +3 · Rails +3

Name of the Vulnerable Software and Affected Versions: Rails versions prior to 6.0.3.2 Description: A denial of service issue exists that allows an untrusted user to run any pending migrations on a Rails app running in production. This issue enables an attacker to execute migrations that are...

How to Switch to Signal and Bring All your Texts With You

Thinking of boosting your SMS security by switching to Signal? These tips make sure your messages come with you—even to a new phone...

CVE-2019-20855

An issue was discovered in Mattermost Server before 5.16.1, 5.15.2, 5.14.5, and 5.9.6. It allows attackers to obtain sensitive information local files during legacy attachment migration...

CVE-2019-20855

An issue was discovered in Mattermost Server before 5.16.1, 5.15.2, 5.14.5, and 5.9.6. It allows attackers to obtain sensitive information local files during legacy attachment migration...

Design/Logic Flaw

An issue was discovered in Mattermost Server before 5.16.1, 5.15.2, 5.14.5, and 5.9.6. It allows attackers to obtain sensitive information local files during legacy attachment migration...

CVE-2019-20855

An issue was discovered in Mattermost Server before 5.16.1, 5.15.2, 5.14.5, and 5.9.6. It allows attackers to obtain sensitive information local files during legacy attachment migration...

CVE-2019-20855

Mattermost Server contains an information disclosure flaw in legacy attachment migration affecting versions before 5.16.1, 5.15.2, 5.14.5, and 5.9.6. The issue allows an attacker to obtain sensitive local files due to improper handling during migration. The connected documents confirm the affecte...

Product update: Virtuozzo Hybrid Server 7.0 Update 14 (7.0.14-249)

The Update 14 for Virtuozzo Hybrid Server 7.0 introduces new features and provides stability and usability bug fixes. It also introduces a new kernel 3.10.0-1127.8.2.vz7.151.14. Vulnerability id: PSBM-103700 VM migration by a non-root user could fail. Vulnerability id: PSBM-102841 Misconfiguring...

Product release: Virtuozzo Hybrid Infrastructure 3.5 Update 4 (3.5.4-24)

This update provides a new feature as well as bug fixes and improvements. Vulnerability id: VSTOR-33730 Nodes may be shown as offline in admin panel after releasing a failed CS disk. Vulnerability id: VSTOR-33712 False positive "Node is offline" alerts may appear. Vulnerability id: VSTOR-33672 Th...

CVE-2020-9858

A dynamic library loading issue was addressed with improved path searching. This issue is fixed in Windows Migration Assistant 2.2.0.0 v. 1A11. Running the installer in an untrusted directory may result in arbitrary code execution...

CVE-2020-9858

A dynamic library loading issue was addressed with improved path searching. This issue is fixed in Windows Migration Assistant 2.2.0.0 v. 1A11. Running the installer in an untrusted directory may result in arbitrary code execution...

Code injection

A dynamic library loading issue was addressed with improved path searching. This issue is fixed in Windows Migration Assistant 2.2.0.0 v. 1A11. Running the installer in an untrusted directory may result in arbitrary code execution...

CVE-2020-9858

A dynamic library loading issue was addressed with improved path searching. This issue is fixed in Windows Migration Assistant 2.2.0.0 v. 1A11. Running the installer in an untrusted directory may result in arbitrary code execution...

CVE-2020-9858

CVE-2020-9858 relates to Apple Windows Migration Assistant. It describes a dynamic library loading issue in the Windows Installer component; running the installer from an untrusted directory could allow arbitrary code execution. The vulnerability is addressed in Windows Migration Assistant versio...

(RHSA-2020:2332) Low: Red Hat Satellite 5 - End Of Life Notice

After May 31, 2020, as per the life-cycle support policy for Red Hat Satellite, Red Hat will discontinue technical support services as well as software maintenance services for all Red Hat Satellite and Proxy versions 5.8 or older on Red Hat Enterprise Linux 6. The listed versions will exit the...

(RHSA-2020:2331) Low: Red Hat Satellite Proxy 5 - End Of Life Notice

After May 31, 2020, as per the life-cycle support policy for Red Hat Satellite Proxy, Red Hat will discontinue technical support services as well as software maintenance services for all Red Hat Satellite and Proxy versions 5.8 or older on Red Hat Enterprise Linux 6. The listed versions will exit...