2022 Threat Predictions

Trellix 2022 Threat Predictions By Trellix · January 19, 2022 Ransomware, nation states, social media, and a shifting reliance on a remote workforce made headlines in 2021, proving that bad actors only continue to rise to the challenge. Defiantly, they thwart solution stacks and gain momentum eac...

2022 Threat Predictions

Trellix 2022 Threat Predictions By Trellix · January 19, 2022 Ransomware, nation states, social media, and a shifting reliance on a remote workforce made headlines in 2021, proving that bad actors only continue to rise to the challenge. Defiantly, they thwart solution stacks and gain momentum eac...

At Request of U.S., Russia Rounds Up 14 REvil Ransomware Affiliates

The Russian government said today it arrested 14 people accused of working for "REvil," a particularly aggressive ransomware group that has extorted hundreds of millions of dollars from victim organizations. The Russian Federal Security Service FSB said the actions were taken in response to a...

Apache Guacamole Information Disclosure Vulnerability (CNVD-2022-04988)

Apache Guacamole is a clientless remote desktop gateway from the Apache Foundation in the United States. The product supports protocols such as VNC, RDP, and SSH. A security vulnerability exists in Apache Guacamole 1.3.0, which stems from the fact that Apache Guacamole 1.3.0 and earlier versions...

Apache Parquet Input Validation Error Vulnerability

Apache Parquet is a columnar storage format from the Apache Foundation in the United States. It can be used in any project in the Hadoop ecosystem. An input validation error vulnerability exists in Apache Parquet, which stems from the product's Parquet-MR not validating Parquet files. An attacker...

IBM Business Automation Workflow Cross-Site Scripting Vulnerability (CNVD-2022-14710)

IBM Business Automation Workflow is a suite of workflow automation solutions from IBM USA. The product is mainly used for workflow management, compliance management, and features workflow visibility and scalability. A cross-site scripting vulnerability exists in IBM Business Automation Workflow,...

Apache Solr Input Validation Error Vulnerability

Apache Solr is the United States Apache Apache Foundation of a search server based on Lucene a full-text search engine. The product supports level search , vertical search , highlighting search results and so on. Apache Solr has a security vulnerability that can be exploited by an attacker to gai...

Information Disclosure

atomix is vulnerable to information disclosure. An attacker can access sensitive information when a malicious Atomix node queries distributed variable primitives containing the primitive lists that ONOS nodes use to share important states...

Garrett Metal Detectors 缓冲区错误漏洞

Garrett Metal Detectors is a walk-in metal detector from Garrett, U.S.A. Garrett Metal Detectors is vulnerable to a buffer overflow vulnerability that can be exploited by attackers to cause a stack buffer overflow...

IBM Business Automation Workflow Cross-Site Scripting Vulnerability (CNVD-2021-101696)

IBM Business Automation Workflow is a workflow automation solution from IBM Corporation of the United States. The product is primarily used for workflow management, compliance management, and has features such as workflow visibility and scalability.IBM Business Automation Workflow has a cross-sit...

Convergence Ahoy: Get Ready for Cloud-Based Ransomware

The two types of cyberattacks that have dominated the news over the past year have been ransomware, and software and service supply-chain attacks. The former have mainly been perpetrated by criminal enterprises looking to turn a quick profit. In contrast, the latter attacks have primarily been th...

CVE-2020-35214

An issue in Atomix v3.1.5 allows a malicious Atomix node to remove states of ONOS storage via abuse of primitive operations...

CVE-2020-35215

An issue in Atomix v3.1.5 allows attackers to access sensitive information when a malicious Atomix node queries distributed variable primitives which contain the entire primitive lists that ONOS nodes use to share important states...

CVE-2020-35214

An issue in Atomix v3.1.5 allows a malicious Atomix node to remove states of ONOS storage via abuse of primitive operations...

The vulnerability of Juniper Networks’ Junos OS, related to insufficient handling of exceptional states, allows a attacker to trigger a service failure.

The vulnerability of Juniper Networks’ Junos OS is related to insufficient handling of exceptional states. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Immediate Steps to Strengthen Critical Infrastructure against Potential Cyberattacks

In light of persistent and ongoing cyber threats, CISA urges critical infrastructure owners and operators to take immediate steps to strengthen their computer network defenses against potential cyberattacks. CISA has released CISA Insights: Preparing For and Mitigating Potential Cyber Threats to...

Hillrom Welch Allyn Cardio Products

1. EXECUTIVE SUMMARY CVSS v3 8.1 ATTENTION: Exploitable remotely Vendor: Hillrom Equipment: Welch Allyn Cardio Products Vulnerability: Authentication Bypass Using an Alternate Path or Channel 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to access...

CVE-2021-25525

Improper check or handling of exception conditions vulnerability in Samsung Pay US only prior to version 4.0.65 allows attacker to use NFC without user recognition...

IBM Cognos Analytics has an unspecified vulnerability (CNVD-2021-95245)

IBM Cognos Analytics is a suite of business intelligence software from IBM Corporation of the United States. The software includes reports, dashboards and scorecards, and can assist companies in adjusting their decisions by analyzing content such as key factors and key people. IBM Cognos Analytic...

The vulnerability of Juniper Networks’ Junos OS routers of the MX series lies in insufficient checking of unusual or exceptional states, allowing attackers to trigger a service failure.

The vulnerability of Juniper Networks’ Junos OS routers of the MX series is related to insufficient checking of unusual or exceptional states during packet processing on MS-MPC/MS-MIC. Exploiting this vulnerability can allow a malicious actor to cause service failures...