Security Bulletin: A security vulnerability has been identified in IBM® General Parallel File System shipped with IBM PureData System for Operational Analytics (CVE-2015-1890)

Summary IBM General Parallel File System is shipped as a component of IBM PureData System for Operational Analytics. Information about a security vulnerability affecting IBM General Parallel File System has been published in a security bulletin. Vulnerability Details CVEID: CVE-2015-1890...

Security Bulletin: IBM PureData System for Operational Analytics is affected by multiple vulnerabilities in SSLv3 and OpenSSL

Summary The IBM PureData System for Operational Analytics is affected by multiple vulnerabilities in SSLv3 and OpenSSL. Vulnerability Details CVEID: CVE-2014-3566 DESCRIPTION: Multiple products could allow a remote attacker to obtain sensitive information, caused by a design error when using the...

Security Bulletin: IBM PureData for Operational Analytics A1791 is affected by the following OpenSSL vulnerabilities: CVE-2014-0076, CVE-2014-0195, CVE-2014-0224, CVE-2014-0221 and CVE-2014-3470

Summary Security vulnerabilities have been discovered in OpenSSL that were reported on June 5, 2014 by the OpenSSL Project. Vulnerability Details CVE-ID: CVE-2014-0076 DESCRIPTION: OpenSSL could allow a local attacker to obtain sensitive information, caused by an implementation error in ECDSA...

Details on Uzbekistan Government Malware: SandCat

Kaspersky has uncovered an Uzbeki hacking operation, mostly due to incompetence on the part of the government hackers. The group's lax operational security includes using the name of a military group with ties to the SSS to register a domain used in its attack infrastructure; installing Kaspersky...

Vulnerability of the Server component: The MySQL Server database management system’s DDL functions allow attackers to gain read access to data.

The vulnerability of the Server component: The DDL system for managing MySQL database servers has a vulnerability related to the lack of protection for operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to and read data...

Virus Bulletin 2019: Geost Android Botnet Goes After Millions of Euros

LONDON — A powerful Android botnet dubbed Geost has been spotted targeting Russian citizens, with the end goal of distributing a banking trojan to victims. The botnet has infected more than 800,000 Android devices, controlling several million Euros held in five banks, according to researchers fro...

New Research into Russian Malware

There's some interesting new research about Russian APT malware: The Russian government has fostered competition among the three agencies, which operate independently from one another, and compete for funds. This, in turn, has resulted in each group developing and hoarding its tools, rather than...

The FireEye OT-CSIO: An Ontology to Understand, Cross-Compare, and Assess Operational Technology Cyber Security Incidents

The FireEye Operational Technology Cyber Security Incident Ontology OT-CSIO While the number of threats to operational technology OT have significantly increased since the discovery of Stuxnet – driven by factors such as the growing convergence with information technology IT networks and the...

The vulnerability of the embedded web-server microprogramming software for Moxa PT-7528 and Moxa PT-7828 Ethernet switches allows attackers to disclose protected information.

The vulnerability of the embedded web-server microprogramming software for Moxa PT-7528 and Moxa PT-7828 switches is related to the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor to disclose the protected information remotely...

Security Bulletin: Multiple vulnerabilities in IBM® SDK, Java™ Technology Edition affect IBM Operational Decision Manager

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 7 and 8 that is used by IBM Operational Decision Manager ODM. These issues were disclosed as part of the IBM Java SDK updates in Apr 2019 and July 2019. Vulnerability Details If you run your own Java code usi...

Operational resilience begins with your commitment to and investment in cyber resilience

Operational resilience cannot be achieved without a true commitment to and investment in cyber resilience. Global organizations need to reach the state where their core operations and services won’t be disrupted by geopolitical or socioeconomic events, natural disasters, and cyber events if they...

Logic Flaw Vulnerability in Original Shopping Network App

The original shopping network app is the original shopping network for mobile users free customized shopping software, there are product search, browse, collection, shopping cart, place an order, mobile payment and other functions, you can through the mobile platform, always view the latest...

The vulnerability in the McAfee Web Gateway, related to the lack of protection for administrative data, allows attackers to disclose the protected information.

The vulnerability of the McAfee Web Gateway is related to the lack of protection for operational data. Exploiting this vulnerability allows a malicious actor to disclose protected information through a specially created web page...

The vulnerability of the Intelligent Infrastructure Management Interface for Server Management Platforms (IPMI) of the Cisco Integrated Management Controller software allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Intelligent Infrastructure Management Interface for Server Management Platforms IPMI of Cisco’s Integrated Management Controller lies in the lack of protection for operational data. Exploiting this vulnerability could allow an attacker operating remotely to gain...

The vulnerability of the Cisco Unified Communications Manager web framework allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Cisco Unified Communications Manager web framework is related to the lack of protection for operational data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information through a specially created...

List of Open Source C2 Post-Exploitation Frameworks

PenTestIT RSS Feed This post has been lying in my drafts for more than a year with edits all over. But two days ago, it was announced that Powershell Empire would no longer be supported by it's authors. Hence just like I curated a list of adversary emulation tools, I finalized this list of open...

The vulnerability of Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti-Virus, and Kaspersky Small Office Security lies in the lack of protection for operational data, allowing attackers to exploit this weakness to compromise the protected information.

The vulnerability of Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti-Virus, and Kaspersky Small Office Security lies in the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to...

The vulnerability of the Agent Handler component of the console for managing McAfee ePolicy Orchestrator integrated enterprise security solutions allows a perpetrator to disclose protected information.

The vulnerability of the Agent Handler component of the McAfee ePolicy Orchestrator console for managing enterprise security integrated solutions is related to the lack of protection for operational data. Exploiting this vulnerability could allow a malicious actor to disclose sensitive informatio...

The vulnerability of the IBM QRadar SIEM system for event collection and analysis lies in the lack of protection for operational data, allowing attackers to disclose the protected information.

The vulnerability of the IBM QRadar SIEM event collection and analysis system is related to the lack of protection for operational data. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...

Council of EU Law Enforcement Protocol improves cross-border cooperation

Last March, the Council of the European Union announced the new EU Law Enforcement Emergency Response Protocol to address the growing problem of planning and coordinating between governments, agencies, and companies when cyberattacks occur across international boundaries. Remember well-known...