Command Execution Vulnerability in Renzi Audit Gateway

Ltd. is the most comprehensive provider of large-scale cyberspace security protection solutions in China. A command execution vulnerability exists in the Renzihang Audit Gateway, which can be exploited by an attacker to execute arbitrary commands...

Swiss Army knife For Information Security: What is Comprehensive Protection?

Written by Sergey Ozhegov, CEO of SearchInform In the early days of information security, we used to rely on antivirus and firewall in our arsenal. Once I even “caught” a leak with the help of the firewall logs: I noticed an atypically large data upload and found out that the user was uploading...

Unspecified Vulnerability in Oracle E-Business Suite (CNVD-2021-37724)

Oracle E-Business Suite is an extension of the original Application ERP, including ERP Enterprise Resource Planning, HR Human Resource Management, CRM Customer Relationship Management and so on, a collection of management software, is a seamless integration of a management suite. Oracle General...

Weak Password Vulnerability in H3C Switch S5120-28P-HPWR-SI Management Platform

Xinhua San Technologies Co., Ltd. has a full range of overall digital infrastructure capabilities in computing, storage, networking, 5G, security, etc., and provides one-stop digital solutions including cloud computing, big data, artificial intelligence, industrial internet, information security,...

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with Asset and Service Management (CVE-2021-26296)

Summary IBM WebSphere Application Server is shipped as a component of Maximo Asset Management, Maximo Industry Solutions including Maximo for Nuclear Power, Maximo for Transportation, Maximo for Life Sciences, Maximo for Oil and Gas, and Maximo for Utilities, Maximo Adapter for Primavera,...

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with Asset and Service Management (CVE-2021-20480)

Summary IBM WebSphere Application Server is shipped as a component of Maximo Asset Management, Maximo Industry Solutions including Maximo for Nuclear Power, Maximo for Transportation, Maximo for Life Sciences, Maximo for Oil and Gas, and Maximo for Utilities, Maximo Adapter for Primavera,...

Information leakage vulnerability in the website building system of Gongyi Tongchuang Network Technology Service Co.

Gongyi Tongchuang Network Technology Service Co., Ltd. is a company specializing in providing comprehensive, thoughtful and professional Internet solutions, providing website construction, small program production, network promotion, jitterbug filming and production, foreign trade promotion,...

Weak Password Vulnerability in NBR Routers at Riptide Networks Inc.

Riptide Networks, Inc. is a data communications solutions provider. A weak password vulnerability exists in the NBR routers of Ruijie Networks Corporation, which can be exploited by attackers to obtain sensitive information...

A Quick Look Into Cloud Workload Protection Platforms (CWPPs)

The cloud security solutions market is growing rapidly, and there are many types of solutions to support your specific business needs. But figuring out the right tool—let alone the right type of tool—can be difficult. Gartner has five security archetypes that fall under the broader cloud security...

MDR Vendor Must-Haves, Part 4: Ingestion of Authentication Data Across Local, Domain, and Cloud Sources

This blog post is part of an ongoing series about evaluating Managed Detection and Response MDR providers. For more insights, check out our guide, “10 Things Your MDR Service Must Do.” There isn’t a single threat or breach that doesn’t involve attackers using legitimate credentials to cause harm...

SAP warns of malicious activity targeting unpatched systems

A timely warning to keep systems patched has appeared, via a jointly-released report from Onapsis and SAP. The report details how threat actors are “targeting and potentially exploiting unprotected mission-critical SAP applications”. Some of the vulnerabilities used were weaponised fewer than 72...

KODAK Lookout Converged Video System has a file upload vulnerability.

Ltd. is a leading provider of video and security products and solutions. A file upload vulnerability exists in the KODAK Lookout Converged Video System, which can be exploited by attackers to execute arbitrary commands...

How To Defend the Extended Network Against Web Risks

Smart cybercriminals are going after web servers and browsers, more so than after individuals. Unfortunately, these types of attacks often go ignored, as they’re harder to test for in terms of pen-testing. With much of the world now working remotely, this threat has intensified. Attackers use...

A Quick Look Into Cloud Security Posture Management (CSPM)

The cloud security solutions market is growing rapidly, and there are many types of solutions to support your specific business needs. But figuring out the right tool—let alone the right type of tool—can be difficult. Gartner has five security archetypes that fall under the broader cloud security...

Ubiquiti All But Confirms Breach Response Iniquity

For four days this past week, Internet-of-Things giant Ubiquiti did not respond to requests for comment on a whistleblowers allegations the company had massively downplayed a "catastrophic" two-month breach ending in January to save its stock price, and that Ubiquitis insinuation that a third-par...

AM Live Vulnerability Management Conference Part 1: Full video in Russian + Timecodes in English

Hello all! 2 weeks ago I participated in the best online event fully dedicated to Vulnerability Management in Russia. It was super fun and exciting. Thanks to all the colleagues and especially to Lev Paley for the great moderation! I have talked out completely. Everything I wanted and the way I...

BlueVoyant optimizes customer security with Microsoft security services

This blog post is part of the Microsoft Intelligent Security Association MISA guest blog series. Learn more about MISA. What a year it has been. The rapid and unexpected transition to work from home is one of the biggest issues affecting companies of all sizes and industries in 2020. As companies...

How to Vaccinate Against the Poor Password Policy Pandemic

Data breaches remain a constant threat, and no industry or organization is immune from the risks. From Fortune 500 companies to startups, password-related breaches continue to spread seemingly unchecked. As a result of the volume of data breaches and cybersecurity incidents, hackers now have acce...

Linux Distribution Coverage Extended Across the VMware Carbon Black Cloud

In 2020, a record 56 new Linux malware families were discovered. We are now seeing this trend continue into the new year with the latest discovery of RedXOR, believed to be formulated by Chinese nation-state actors targeting RedHat Enterprise Linux RHEL. With organizations hyper-accelerating thei...

YMBCMS suffers from SQL injection vulnerability (CNVD-2021-26017)

YMBCMS website management system also known as YMBCMS is one of the independent research and development products of Hebei OuRunTianTeng YMBCMS network studio.YMBCMS set computer station, cell phone station, WeChat public platform, small program, APP in one, shared space, data synchronization, is...