Intel® Xeon® 6 processor E-Cores with Alias Checking Trusted Module Advisory

Summary: A potential security vulnerability in Alias Checking Trusted Module for some Intel® Xeon® 6 processor Efficient-Cores E-Cores may allow escalation of privilege. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-20004...

The Pall Mall Pact and why it matters

The US State Department reportedly plans to sign an international agreement designed to govern the use of commercial spyware known as the Pall Mall Pact. The Pall Mall Pact, formally known as the Pall Mall Process, was initiated by France and the United Kingdom in February 2024. The goal of the...

Intel® OpenVINO™ Software Advisory

Summary: Potential security vulnerabilities in some Intel® OpenVINO™ software may allow denial of service, information disclosure. Intel is releasing sotfware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2023-25080 Description: Protection mechanism failur...

You Are a Woman in Tech: Own Your Voice

...

Intel Unite® Android App Advisory

Summary: Potential security vulnerabilities in the Intel Unite® android application may allow information disclosure. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2023-32609 Description: Improper access control in the Intel...

Malicious Package

This package has been identified as malicious. Attackers are using these packages in an ongoing supply chain attack to execute arbitrary code, likely when they are installed. Please read the references for more information...

Oracle WebLogic Server vulnerability added to CISA list as “known to be exploited”

On May 1, 2023 the Cybersecurity and Infrastructure Security Agency CISA added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. This means that Federal Civilian Executive Branch FCEB agencies are obliged to remediate the...

Fighting mercenaries with the Cybersecurity Tech Accord

Trend Micro co-Authors Cyber Mercenary Principles to help guide the technology industry and others in dealing with the growing market of cyber mercenaries...

PresentMon Advisory

Summary: A potential security vulnerability in the PresentMon software maintained by Intel® may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-26086 Description: Uncontrolled search path element i...

CVE-2021-44345

Beijing Wisdom Vision Technology Industry Co., Ltd One Card Integrated Management System 3.0 is vulnerable to SQL Injection...

CVE-2021-44345

Beijing Wisdom Vision Technology Industry Co., Ltd One Card Integrated Management System 3.0 is vulnerable to SQL Injection (CVE-2021-44345). The root cause described by CNVD/CNNVD entries is the application's lack of validation of external input in SQL statements, enabling an attacker to execute...

Intel® Trace Analyzer and Collector Advisory

Summary: Potential security vulnerabilities in the Intel® Trace Analyzer and Collector may allow denial of service or information disclosure. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2022-21133 Description: Out-of-bounds re...

2021.2 IPU - Intel® Processor Shared Resource Advisory

Summary: A potential security vulnerability in some Intel® Processors may allow information disclosure. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2021-0145 Description: Improper initialization of shared resources in some IntelR...

Note to Self: Create Non-Exhaustive List of Competitors

What was the best news you heard so far this month? Mine was learning that KrebsOnSecurity is listed as a restricted competitor by Gartner Inc. NYSE:IT -- a $4 billion technology goliath whose analyst reports can move markets and shape the IT industry. Earlier this month, a reader pointed my...

Toward Inclusive Language in Software

Akamai opposes racism in all its forms and is committed to providing an inclusive, fair, and respectful environment for both our customers and our employees. As part of this commitment, we are joining other technology-industry leaders in removing biased, oppressive, and racially insensitive...

Intel® EMA Advisory

Summary: Potential security vulnerabilities in the Intel® Endpoint Management Assistant EMA may allow escalation of privilege or information disclosure. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2020-12315 Description: Path...

Apple Knocked Off Perch as Most Imitated Brand for Phishing Attacks

Google and Amazon overtook Apple in the second quarter Q2 of 2020 as the brand most spoofed by attackers to lure people into falling for phishing attacks. The leaderboard change is likely due to activity related to the COVID-19 pandemic, according to new research. While the number of so-called...

Respect and Equal Protection For Everyone

We are profoundly distressed by the racism, bigotry and violence committed against people of color in our society and by public institutions. Here at Akamai, we have no tolerance for discrimination. We value our diversity. It is a strength of our organization. And in a moment when many people are...

In Conversation: Career Development as a Parent

Technology can only continue to thrive with the direct influence of those involved in its evolution. When the experiences of those people are broad, the tech industry benefits from the diversity of what they bring to the table. At Akamai,...

Intel® Graphics Performance Analyzer for Linux Advisory

Summary: A potential security vulnerability in Intel® Graphics Performance Analyzer for Linux may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2019-0158 Description: Insufficient path checking in the...