NSA Releases Advisory on Chinese State-Sponsored Actors Exploiting Publicly Known Vulnerabilities

The National Security Agency NSA has released a cybersecurity advisory on Chinese state-sponsored malicious cyber activity. This advisory provides 25 Common Vulnerabilities and Exposures CVEs known to be recently leveraged, or scanned-for, by Chinese state-sponsored cyber actors to enable...

October 13, 2020—KB4580345 (Monthly Rollup)

None None...

GHSA-F366-4RVV-95X2 Buffer overflow in deprecated USB HALs and stack overflow in USB enumeration

Impact 1 If an application is making use of the deprecated kit protocol HALs as the communication channel to the target device an attacker can masquerade as a device and return malformed packets of arbitrary length which the protocol stack will write to the stack. HALs intended for production use...

Internet Explorer help

None None...

SkyArk - Helps To Discover, Assess And Secure The Most Privileged Entities In Azure And AWS

SkyArk is a cloud security project with two mainscanning modules: 1. AzureStealth - Scans Azure environments 2. AWStealth - Scan AWS environments These two scanning modules will discover the most privileged entities in the target AWS and Azure. The Main Goal - Discover The Most Privileged Cloud...

Vulnerability of the Server component: The stored procedures of the MySQL Server database management system, which allow attackers to cause service interruptions.

The vulnerability of the MySQL Server component, specifically stored procedures, is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to cause service interruptions using the MySQL protocol...

ACSC Releases Cyber Criminal and APT Tradecraft Trends for 2019-2020

The Australian Cyber Security Centre ACSC has released a summary of trends for 2019-2020 outlining tactics, techniques, and procedures TTPs used by cyber criminals and advanced persistent threat APT groups to target Australian networks. ACSC uses the MITRE Adversarial Tactics, Techniques, and...

CVE-2020-6243

Under certain conditions, SAP Adaptive Server Enterprise XP Server on Windows Platform, versions 15.7, 16.0, does not perform the necessary checks for an authenticated user while executing the extended stored procedure, allowing an attacker to read, modify, delete restricted data on connected...

GaussDB: Enable PL Audit

If the audit level is set to 8, the parsing and execution of stored procedures are audited, for example, EXECUTE EXEC and CALL. In addition, the definitions of anonymous blocks in stored procedures are audited. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted fr...

UBUNTU-CVE-2020-2812

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Stored Procedure. Supported versions that are affected are 5.6.47 and prior, 5.7.29 and prior and 8.0.19 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple...

Support for Citrix ADC on Azure – Subscription license with hourly price

Citrix provides support for Citrix ADC Subscription based offering subscription license with hourly price on Azure. For builds greater than or equal to Build 13.0.67.43 To file a support case, you need to present support PIN code of Citrix ADC subscription based offering that you have deployed on...

CVE-2020-6187

SAP NetWeaver Guided Procedures, versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently validate an XML document input from a compromised admin, leading to Denial of Service...

CVE-2020-6187

SAP NetWeaver (Guided Procedures) is affected in versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, and 7.50 by a vulnerability where XML input from a compromised admin is not sufficiently validated, enabling Denial of Service. The CVE entry documents the root cause as inadequate validation of XML docu...

CVE-2020-6187: Improper Restriction of XML External Entity Reference

SAP NetWeaver Guided Procedures, versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently validate an XML document input from a compromised admin, leading to Denial of Service...

Huawei EulerOS: Security Advisory for ghostscript (EulerOS-SA-2019-1241)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SIM Hijacking

SIM hijacking -- or SIM swapping -- is an attack where a fraudster contacts your cell phone provider and convinces them to switch your account to a phone that they control. Since your smartphone often serves as a security measure or backup verification system, this allows the fraudster to take ov...

CISA Pushing U.S. Agencies to Adopt Vulnerability Disclosure Policies

The U.S. government’s cybersecurity agency has issued a draft directive mandating all agencies to develop vulnerability disclosure policies, which would give ethical hackers clear guidelines for submitting bugs found in government systems. Security experts hope that the directive will light a fir...

Changing security incident response by utilizing the power of the cloud—DART tools, techniques, and procedures: part 1

This is the first in a blog series discussing the tools, techniques, and procedures that the Microsoft Detection and Response Team DART use to investigate cybersecurity incidents at our customer organizations. Today, we introduce the team and give a brief overview of each of the tools that utiliz...

Using Machine Learning to Detect IP Hijacking

This is interesting research: In a BGP hijack, a malicious actor convinces nearby networks that the best path to reach a specific IP address is through their network. That's unfortunately not very hard to do, since BGP itself doesn't have any security procedures for validating that a message is...

New Presentation Template: Incident Response Reporting for Management

Every security professional knows it’s only a matter of time before their organization is breached. And even though most security-conscious organizations have implemented procedures and products to facilitate the incident response process, many security decision-makers find much more of a challen...