483 matches found
#CbChats: Rick McElroy Talks About the Mental Health Side of Cybersecurity
Rick McElroy, security strategist for Carbon Black, has more than 17 years of information security experience educating and advising organizations on reducing their risk posture and tackling tough security challenges. He has performed services for the U.S. Department of Defense, and has held...
Cloud Security Suite - One stop tool for auditing the security posture of AWS infrastructure
One stop tool for auditing the security posture of AWS. Pre-requisites Python 2.7 pip git Installation git clone https://github.com/SecurityFTW/cs-suite.git cd cs-suite/ sudo python setup.py Note - Generate a set of ReadOnly AWS keys which the tool will ask to finish the installation process...
5 Steps to a High-Speed SOC
Your endpoints don’t just live within the safety of your corporate network—they’re out in the wild exposed to millions of new threats every day. With non-malware attacks on the rise that are even harder to detect than traditional malware, security professionals are realizing it is no longer a...
PhpCollab 2.5.1 SQL Injection Vulnerability
Exploit for php platform in category web applications CVE-2017-6089 PhpCollab 2.5.1 Multiple SQL Injections unauthenticated Description PhpCollab is an open source web-based project management system, that enables collaboration across the Internet. SQL injections The phpCollab code does not...
neutralposture.com XSS vulnerability
Vulnerable URL: http://www.neutralposture.com/site/products.php?cat=04!%22%3E%3Csvg%20onload=confirm%28%22openbugbounty%22%29%3E Details: Description| Value ---|--- Patched:| Yes, at 27.11.2017 Latest check for patch:| 27.11.2017 23:25 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...
Attacking Critical Infrastructure: The Evolution Of Kinetic Warfare
I said earlier in 2017 I believed it was quite possible that during the year a major cyberattack will occur in either the United States, the United Kingdom, or another friendly country that will require a response equivalent to a kinetic attack. In other words, a cyberattack will occur that will ...
neutralposture.com XSS vulnerability
Vulnerable URL: http://neutralposture.com/site/products.php?cat=d3v2%22%3E%3Cimg%20sRc=l%20oNerrOr=prompt%28%27OPENBUGBOUNTY%27%29%20x%3E Details: Description| Value ---|--- Patched:| Yes, at 27.11.2017 Latest check for patch:| 27.11.2017 09:42 GMT Vulnerability type:| XSS Vulnerability status:|...
Is Your Security Team Setup To Fail?
The ingredients for strong cybersecurity aren’t a secret. In fact, they haven’t changed significantly over the past 20 years—the ingredients are available to almost every organization out there. On the surface, doing security isn’t that hard: | Patch quickly and frequently. Use reasonable securit...
Sabre Corp. Investigating Breach of Reservation System
Travel services company Sabre Corp., acknowledged this week that it’s in the middle of investigating a data breach in its Hospitality Solutions reservation system that may have spilled personally identifiable information and payment card data belonging to its customers. The Texas-based company...
IT Asset Inventory Systems and CMDBs: A Marriage Made in InfoSec Heaven
A key capability of an IT asset inventory system is being able to exchange data with CMDBs Configuration Management Databases. In fact, a common misconception is that organizations with CMDBs don’t need an IT asset inventory system because their functions overlap. While they have similar roles,...
M-Trends 2017: A View From the Front Lines
Every year Mandiant responds to a large number of cyber attacks, and 2016 was no exception. For our M-Trends 2017 report, we took a look at the incidents we investigated last year and provided a global and regional the Americas, APAC and EMEA analysis focused on attack trends, and defensive and...
FedRAMP Readiness Assessment Report (RAR) template launched
As part of the FedRAMP Accelerated process, cloud service providers CSPs can now complete a Readiness Assessment Report RAR to demonstrate their readiness for the FedRAMP process. The RAR is required for CSPs pursuing the FedRAMP JAB approval route. CSPs should also consider having a Readiness...
A year of Windows kernel font fuzzing #1: the results
Posted by Mateusz Jurczyk of Google Project Zero This post series is about how we used at-scale fuzzing to discover and report a total of 16 vulnerabilities in the handling of TrueType and OpenType fonts in the Windows kernel during the last year. In part 1 here, we present a general overview of...
Uber: Stored XSS in developer.uber.com
An attacker can make a series of requests to https://uber.readme.io/ that will result in permanent defacement/stored XSS of all the documentation pages on https://developer.uber.com/ I'm not entirely sure if this is in scope, but it could definitely have a major impact on developer.uber.com so I...
The vulnerability of the Cisco AnyConnect Secure Mobility Client’s cryptographic protection mechanism allows attackers to enhance their privileges.
The vulnerability of the Posture module, which is part of the Cisco Identity Services Engine ISE of the Cisco AnyConnect Secure Mobility Client encryption protection tool, is related to access control deficiencies. Exploiting this vulnerability can allow an intruder, operating locally, to increas...
Apple Mac OS X Gatekeeper Bypass
Gatekeeper is Mac OS X’s guardian against rogue applications and malware sneaking into Apple’s famous walled garden. It’s also been a favorite target of researchers and advanced attackers desperate to gain control of Apple devices. Tomorrow at Virus Bulletin in Prague, researcher Patrick Wardle,...
Cisco AnyConnect Secure Mobility Client Posture Module Elevation of Privilege Vulnerability
Cisco AnyConnect Secure Mobility Client is a set of next-generation VPN clients from Cisco. The client enables remote users to securely connect to the Cisco ASA 5500 device via SSL VPN. A privilege extraction vulnerability exists in Cisco AnyConnect Secure Mobility Client version 4.0 64, which...
Design/Logic Flaw
The Posture module for Cisco Identity Services Engine ISE, as distributed in Cisco AnyConnect Secure Mobility Client 4.064, allows local users to gain privileges via unspecified commands, aka Bug ID CSCut05797...
CVE-2015-0755
The CVE-2015-0755 entry concerns Cisco Identity Services Engine (ISE) Posture module in Cisco AnyConnect Secure Mobility Client 4.0(64). The vulnerability is an elevation of privilege due to insufficient access controls in the Posture module, allowing an authenticated, local attacker to run arbit...
CVE-2015-0755
The Posture module for Cisco Identity Services Engine ISE, as distributed in Cisco AnyConnect Secure Mobility Client 4.064, allows local users to gain privileges via unspecified commands, aka Bug ID CSCut05797...