October 17, 2017—KB4043961 (OS Build 16299.19)

None None...

October 17, 2017—KB4041688 (OS Build 14393.1794)

None None...

October 10, 2017—KB4041676 (OS Build 15063.674)

None None...

Equifax Website Hacked To Deliver Malware-bearing Flash Update

By Waqas In May 2017, the website of renowned credit reporting service This is a post from HackRead.com Read the original post: Equifax Website Hacked To Deliver Malware-bearing Flash Update...

psad - Intrusion Detection and Log Analysis with iptables

The Port Scan Attack Detector psad is a lightweight system daemon written in is designed to work with Linux iptables/ip6tables/firewalld firewalling code to detect suspicious traffic such as port scans and sweeps, backdoors, botnet command and control communications, and more. It features a set o...

Stable Channel Updates for Chrome OS

The Stable channel has been updated to 61.0.3163.113 Platform version: 9765.76.0 for most Chrome OS devices . This build contains a number of bug fixes, security updates, and feature enhancements. Systems will be receiving updates over the next several days. Some highlights of these changes are:...

Tor: Content spoofing on

Vulnerability description not provided...

JasperSoft JasperReports 4.7 Password Disclosure

Credits: Joshua Platz aka Binary1985 + CVE ID: CVE-2017-14941 + Website: https://github.com/binary1985 + Source: https://raw.githubusercontent.com/binary1985/VulnerabilityDisclosure/master/JasperSoft%20JasperReports%20-%204.7%20-%20CVE-2017-14941 Vendor: ==========================...

Dell EMC VNX Monitoring and Reporting Scheduler Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Dell EMC VNX Monitoring and Reporting. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within...

FTC Releases Alerts on Protecting Against Identity Theft

The Federal Trade Commission FTC has released two alerts to educate consumers on recommended protections against identity theft after the recent data breach at Equifax. Users should consider placing security freezes with the three major credit reporting agencies: Equifax, Transunion, and Experian...

Tor: Tor Project - Full Path Disclosure

Vulnerability description not provided...

September 19, 2017—KB4038803 (Preview of Monthly Rollup)

None None...

IBM Lifecycle Query Engine of Jazz Reporting Service Information Disclosure Vulnerability

IBM Lifecycle Query Engine of Jazz Reporting Service is a lifecycle query engine for Jazz Reporting Service from IBM, USA. A security vulnerability exists in IBM Lifecycle Query Engine of Jazz Reporting Service versions 6.0 through 6.0.4. An attacker could exploit the vulnerability to obtain...

Three Ways to Use Data Classification Scan Results

In July we launched Classifier, a free data classification tool that allows you to quickly and easily uncover sensitive data in your databases. Since its launch, the tool has been widely used around the globe, which comes as no surprise given the heightened focus on data protection. Furthermore,...

CVE-2017-1490

An unspecified vulnerability in the Lifecycle Query Engine of Jazz Reporting Service 6.0 through 6.0.4 could disclose highly sensitive information...

CVE-2017-1490

An unspecified vulnerability in the Lifecycle Query Engine of Jazz Reporting Service 6.0 through 6.0.4 could disclose highly sensitive information...

CVE-2017-1490

The IBM Security Bulletin documents CVE-2017-1490 as a vulnerability in the Lifecycle Query Engine (LQE) shipped with Jazz Reporting Service, affecting Jazz Reporting Service versions 6.0–6.0.4 and capable of disclosing highly sensitive information. Remediation is patch-based: apply 6.0.2-Rationa...

CVE-2017-1490

An unspecified vulnerability in the Lifecycle Query Engine of Jazz Reporting Service 6.0 through 6.0.4 could disclose highly sensitive information...

CVE-2017-8702

Windows Error Reporting WER in Microsoft Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows an attacker to gain greater access to sensitive information and system functionality, due to the way that WER handles and executes files, aka "Windows Elevation of Privilege Vulnerability"...

CVE-2017-8702

Windows Error Reporting WER in Microsoft Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows an attacker to gain greater access to sensitive information and system functionality, due to the way that WER handles and executes files, aka "Windows Elevation of Privilege Vulnerability"...