734 matches found
CVE-2021-24084
Windows Mobile Device Management Information Disclosure Vulnerability...
CVE-2021-24084 Windows Mobile Device Management Information Disclosure Vulnerability
...
The vulnerability of Windows Mobile Device Management for Windows operating systems allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of Windows Mobile Device Management for Windows operating systems lies in the lack of protection for mission-critical data. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...
SOAR Tools: What to Look for When Investing in Security Automation Tech
Security orchestration and automation SOAR refers to a collection of software solutions and tools that organizations can leverage to streamline security operations in three key areas: threat and vulnerability management, incident response, and security-operations automation. From a single platfor...
Windows Mobile Device Management Information Disclosure Vulnerability
...
Microsoft Windows Mobile Device Management Information Disclosure Vulnerability
Microsoft Windows Mobile Device Management is a Microsoft software service for Windows devices that supports interaction with mobile devices. An information disclosure vulnerability exists in Microsoft Windows Mobile Device Management. The following products and editions are affected:Windows 10...
PT-2021-2081
Name of the Vulnerable Software and Affected Versions: Windows versions prior to the fixed version Windows 10 version 1809 and later versions Description: A vulnerability in the Windows Mobile Device Management service is related to the lack of protection for service data. Exploitation of this...
360 F5 Input Validation Error Vulnerability
The 360 F5 is a smartphone device from the Chinese company 360. The 360F5 3.1.3.64296 and lower suffers from an Input Authentication Error vulnerability that stems from a specific illegal 802.11 Null Data Frame, which causes other wireless terminals to disconnect from the wireless connection in...
How COVID-19 Reinforced the Need for Mobile Device Management
How many of you got that call at the beginning of the pandemic to make your company’s workforce 100% capable for remote work? How many of you had no idea how to make that happen, seemingly and sometimes literally overnight? How many of you were already prepared for such an event? Remote workforce...
Top Security Recommendations for 2021
Happy HaXmas! We hope everyone is having a wonderful holiday season so far. This year has been wild and unpredictable, and has brought unique risks and threats to the forefront of business activities. So, to help everyone stay safer in 2021, the Strategic Advisory Services team here at Rapid7 is...
Common Security Misconfigurations and Their Consequences
Everyone makes mistakes. That one sentence was drummed into me in my very first job in tech, and it has held true since then. In the cybersecurity world, misconfigurations can create exploitable issues that can haunt us later - so let's look at a few common security misconfigurations. The first o...
US Schools Are Buying Cell Phone Unlocking Systems
Gizmodo is reporting that schools in the US are buying equipment to unlock cell phones from companies like Cellebrite: Gizmodo has reviewed similar accounting documents from eight school districts, seven of which are in Texas, showing that administrators paid as much $11,582 for the controversial...
CVE-2020-35555
An issue was discovered on LG mobile devices with Android OS 10 software. When a dual-screen configuration is supported, the device does not lock upon disconnection of a call with the cover closed. The LG ID is LVE-SMP-200027 December 2020...
LG mobile security breach
LG mobile is a mobile device from LG Corporation A security vulnerability exists in LG mobile devices with Android OS 8.0, 8.1, 9.0, and 10 software that originates from a WebView SSL error handling...
Critical MobileIron RCE Flaw Under Active Attack
Advanced persistent threat APT groups are actively exploiting a vulnerability in mobile device management security solutions from MobileIron, a new advisory warns. The issue in question CVE-2020-15505 is a remote code-execution flaw. It ranks 9.8 out of 10 on the CVSS severity scale, making it...
CVE-2020-27747
An issue was discovered in Click Studios Passwordstate 8.9 Build 8973.If the user of the system has assigned himself a PIN code for entering from a mobile device using the built-in generator 4 digits, a remote attacker has the opportunity to conduct a brute force attack on this PIN code. As resul...
Code injection
An issue was discovered in Click Studios Passwordstate 8.9 Build 8973.If the user of the system has assigned himself a PIN code for entering from a mobile device using the built-in generator 4 digits, a remote attacker has the opportunity to conduct a brute force attack on this PIN code. As resul...
New Report on Police Decryption Capabilities
There is a new report on police decryption capabilities: specifically, mobile device forensic tools MDFTs. Short summary: its not just the FBI that can do it. This report documents the widespread adoption of MDFTs by law enforcement in the United States. Based on 110 public records requests to...
How Police Can Crack Locked Phones—and Extract Information
A report finds 50,000 cases where law enforcement agencies turned to outside firms to bypass the encryption on a mobile device...
Providing Security and Acceleration of Single Page Applications
HTTP/2 + gRPC and protobuf Today many digital transformation and DevOps teams have been tasked with building applications that will enhance their customer’s digital experience. The goal, to make the user experience smoother, faster and less impeded by transactional and security controls, is a cor...