blackrosesolutions.co.uk Improper Access Control vulnerability OBB-2414205

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Threat landscape for industrial automation systems, H2 2021

2021 is the second year we have spent living and working in the pandemic. By 2021 everyone got used to pandemic limitations – industrial organization employees and IT security professionals and threat actors. If we compare the numbers from 2020 and 2021, we see that 2021 looks more stable,...

Keep Solutions Archeevo 安全漏洞

Keep Solutions Archeevo is a phase of document management software from Keep Solutions, Portugal. Keep archives organizations in all functional areas, covering activities from file description to productivity management. A security vulnerability exists in Keep Solutions Archeevo that could be...

Wuhan Jin Tongfang Technology Co., Ltd. monthly care ERP management platform has logic flaws vulnerability

Wuhan Jin Tongfang Technology Co., Ltd. is a company that provides informatization solutions for the mother and child service industry. There is a logic flaw vulnerability in the monthly care ERP management platform of Wuhan Golden Tongfang Technology Co. Ltd. that can be exploited by an attacker...

IBM Maximo Anywhere Information Disclosure Vulnerability (CNVD-2022-56488)

IBM Maximo Anywhere is a set of next-generation mobile solutions built on the IBM Worklight platform from IBM U.S. IBM Maximo Anywhere has an information disclosure vulnerability that could be exploited by attackers to obtain sensitive information...

4 best practices to implement a comprehensive Zero Trust security approach

Today’s threat actors don’t see barriers, they see opportunities. As the old firewalls protecting the corporate network become obsolete amid the rush to adopt a hybrid workspace, implementing Zero Trust security has become an imperative across all sectors, both public and private. During this tim...

The Unbearable Lightness of Unaudited Supply Chains

An acute need expressed by a majority of CISOs at a roundtable in Italy sparks an idea to use one of our lesser-known compliance apps to manage supply chain security assurance efforts. In the 1984 novel The Unbearable Lightness of Being, author Milan Kundera ponders the fleeting nature of man’s...

Code Execution Vulnerability in Damon Database Management System

Wuhan Damon Database Co., Ltd. is a company dedicated to the research, development, sales and service of database management systems and big data platforms, as well as can provide users with full-stack data products and solutions. A code execution vulnerability exists in the Damon Database...

ns3.affinitywebsolutions.co.uk Cross Site Scripting vulnerability OBB-2368408

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

What’s Next in Security from Microsoft

One of the biggest challenges in security today is complexity. Not only is there an ever-growing number of threats, but many organizations are defending their companies with a patchwork of security solutions that don’t work well together. This piecemeal approach is costly, less secure, and hinder...

What’s Next in Security from Microsoft

One of the biggest challenges in security today is complexity. Not only is there an ever-growing number of threats, but many organizations are defending their companies with a patchwork of security solutions that don’t work well together. This piecemeal approach is costly, less secure, and hinder...

ns3.affinitywebsolutions.co.uk Cross Site Scripting vulnerability OBB-2367575

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Microsoft Dynamics Elevation of Privilege Vulnerability

Microsoft Dynamics is a suite of ERP business solutions for multinational companies from Microsoft Corporation USA. The product includes financial management, production management and business intelligence management, etc. An elevation of privilege vulnerability exists in Microsoft Dynamics GP. ...

Microsoft Dynamics GP欺骗漏洞

Microsoft Dynamics is a suite of ERP business solutions for multinational companies from the United States-based Microsoft Corporation Microsoft. The product includes financial management, production management and business intelligence management, etc. Microsoft Dynamics GP has a spoofing...

Microsoft Dynamics GP Elevation of Privilege Vulnerability (CNVD-2022-22722)

Microsoft Dynamics is a set of ERP business solutions for multinational companies from the US company Microsoft Microsoft. The product includes financial management, production management and business intelligence management, etc. Microsoft Dynamics GP has an elevation of privilege vulnerability,...

Cyber Signals: Defending against cyber threats with the latest research, insights, and trends

We’re excited to introduce Cyber Signals, a cyber threat intelligence brief informed by the latest Microsoft threat data and research. This content, which will be released quarterly, offers an expert perspective into the current threat landscape, discussing trending tactics, techniques, and...

5 reasons endpoint security agents are not enough

In this post, we discuss five security limitations of endpoint security agents and also explain how adding agentless solutions can improve your cloud environment security...

Dozens of Security Flaws Discovered in UEFI Firmware Used by Several Vendors

As many as 23 new high severity security vulnerabilities have been disclosed in different implementations of Unified Extensible Firmware Interface UEFI firmware used by numerous vendors, including Bull Atos, Fujitsu, HP, Juniper Networks, Lenovo, among others. The vulnerabilities reside in Insyde...

Living Off the Land: How to Defend Against Malicious Use of Legitimate Utilities

Living-off-the-land binaries LOLBins are no joke: Cyberattackers have been increasingly making use of them to hide their malicious work from security solutions. It’s time for threat hunters and IT security staff to familiarize themselves with how these are used in the attack chains of some of the...

Build a privacy-resilient workplace with Microsoft Priva

Today, we celebrate international Data Privacy Day. This day reminds us of the importance of respecting privacy, safeguarding data, and enabling trust. However, annual reminders are insufficient to drive material change, which can be seen in the effectiveness rates of one-off trainings. According...