PT-2019-15264

Name of the Vulnerable Software and Affected Versions Trend Micro Deep Security as a Service affected versions not specified Description A privilege escalation issue exists in the Quick Setup cloud formation template of Trend Micro Deep Security as a Service. This could allow an authenticated...

CVE-2019-18191: Incomplete Cleanup

A privilege escalation vulnerability in the Trend Micro Deep Security as a Service Quick Setup cloud formation template could allow an authenticated entity with certain unrestricted AWS execution privileges to escalate to full privileges within the target AWS account...

Cisco Acquires OpenDNS for $635 Million

Cisco continues to spend on security, today announcing its intent to acquire San Francisco-based OpenDNS for $635 million. OpenDNS’ domain name system and cloud-based security services bring threat data collected from those platforms to Cisco’s security offerings. “To build on Cisco’s advanced...

Android Malware Installs Pirated Assassin's Creed App

A pirated version of the Assassin’s Creed application for Android is bundled with malware according to the security-as-as-service from Zscaler. Assassin’s Creed is a popular, open-world series of adventure games available in various iterations on the XBOX, PlayStation, PC and other gaming...

McAfee Security-as-a-Service ActiveX控件远程命令执行漏洞

BUGTRAQ ID: 51397 McAfee Security-as-a-Service是云综合性保护解决方案。 McAfee SaaS的ActiveX控件在实现上存在安全漏洞，MyCioScan.Scan.ShowReport在没有验证的情况下直接执行了传递到函数的命令，远程攻击者可利用此漏洞执行任意代码。 0 McAfee Security-as-a-Service 厂商补丁： McAfee ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.mcafee.com/...

McAfee SaaS MyCioScan ShowReport Remote Command Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "McAfee SaaS...

TPTI-11-12: McAfee SaaS MyAsUtil5.2.0.603.dll SecureObjectFactory Instantiation Design Flaw Remote Code Execution Vulnerability

TPTI-11-12: McAfee SaaS MyAsUtil5.2.0.603.dll SecureObjectFactory Instantiation Design Flaw Remote Code Execution Vulnerability http://dvlabs.tippingpoint.com/advisory/TPTI-11-12 August 8, 2011 -- CVSS: 8.3, AV:N/AC:M/Au:N/C:P/I:P/A:C -- Affected Vendors: McAfee -- Affected Products: McAfee...

TPTI-11-13: McAfee SaaS myCIOScn.dll Scan Method Script Injection Remote Code Execution Vulnerability

TPTI-11-13: McAfee SaaS myCIOScn.dll Scan Method Script Injection Remote Code Execution Vulnerability http://dvlabs.tippingpoint.com/advisory/TPTI-11-13 August 8, 2011 -- CVSS: 9, AV:N/AC:L/Au:N/C:P/I:P/A:C -- Affected Vendors: McAfee -- Affected Products: McAfee Security-as-a-Service --...

McAfee Security-as-a-Service ActiveX code execution

Insecure methods in MyAsUtil5.2.0.603.dll, myCIOScn.dll...

Paul Judge on Cloud Security and Security as a Service

In the debut episode of the Digital Underground Podcast, Dennis Fisher talks to Paul Judge, founder and CTO of Purewire, about the security of cloud computing services, reputation systems and the growing threat of social networks. Subscribe to the Digital Underground podcast on...