The U.S. Secret Service Selects Tom Kellermann to Serve on Inaugural Cyber Investigations Advisory Board

Cybersecurity has become a recurring global news headline. From ransomware to data breaches, cyberattacks continue to be one of the biggest threats to both the private and public sectors. Earlier this year, the FBI reported a 400 percent increase in cybercrime1. And for the public sector, this is...

Knight CMS of Taiyuan Xunyi Technology Co., Ltd. suffers from SQL injection vulnerability (CNVD-2020-58523)

Knight CMS is based on PHP + MYSQL as the core development of a set of free + open source professional recruitment system. Knight CMS is vulnerable to SQL injection. Attackers can use the vulnerability to obtain sensitive information in the database...

Critical Intel Active Management Technology Flaw Allows Privilege Escalation

Intel patched a critical privilege escalation vulnerability in its Active Management Technology AMT, which is used for remote out-of-band management of PCs. AMT is part of the Intel vPro platform Intel’s umbrella marketing term for its collection of computer hardware technologies and is primarily...

Speed 2 – The Poseidon Adventure – Part One

This post is a companion to the DEF CON 28 video available here This is a tale of how we tested a brand new cruise ship over the course of a week. TL;DR How fire zone safety design affects security When ballasting control goes wrong Where maritime tech providers let security down, badly Are IMO &...

Unauthorized Access Vulnerability in Terminal Security Management System (Skyrocket) of Chianxin Technology Group Co.

Chianxin Terminal Security Management System is an integrated terminal security product solution for government and enterprise units. Unauthorized access vulnerability exists in the Terminal Security Management System Tianrong of Chianxin Technology Group Corporation, which can be exploited by...

Security Bulletin: IBM SDK, Java Technology Edition Quarterly CPU - July 2020 - Includes Oracle July 2020 CPU affects IBM Tivoli Composite Application Manager for Transactions-Robotic Response Time

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 7 ,version 8, that is used by IBM Tivoli Composite Application Manager for Transactions - Robotic Response Time. These issues were disclosed as part of the IBM Java SDK updates in July 2020. Vulnerability...

Security Bulletin: Enterprise Content Management System Monitor is affected by a vulnerability in IBM® SDK Java™ Technology Edition

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 8 used by Enterprise Content Management System Monitor. Enterprise Content Management System Monitor has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2020-2830 DESCRIPTION: An unspecified...

CVE-2020-24158

360 Speed Browser 12.0.1247.0 has a DLL hijacking vulnerability, which can be exploited by attackers to execute malicious code. It is a dual-core browser owned by Beijing Qihoo Technology...

CVE-2020-24158

360 Speed Browser 12.0.1247.0 has a DLL hijacking vulnerability, which can be exploited by attackers to execute malicious code. It is a dual-core browser owned by Beijing Qihoo Technology...

Code injection

360 Speed Browser 12.0.1247.0 has a DLL hijacking vulnerability, which can be exploited by attackers to execute malicious code. It is a dual-core browser owned by Beijing Qihoo Technology...

CVE-2020-24158

CVE-2020-24158 affects 360 Speed Browser (version 12.0.1247.0) and is rooted in a DLL hijacking vulnerability. The available documents identify the affected product as a dual-core browser owned by Beijing Qihoo Technology and describe that exploitation enables attackers to execute malicious code....

CVE-2020-24158

360 Speed Browser 12.0.1247.0 has a DLL hijacking vulnerability, which can be exploited by attackers to execute malicious code. It is a dual-core browser owned by Beijing Qihoo Technology...

(Live) Webinar – XDR and Beyond with Autonomous Breach Protection

Anyone paying attention to the cybersecurity technology market has heard the term XDR - Extended Detection and Response. XDR is a new technology approach that combines multiple protection technologies into a single platform. All the analyst firms are writing about it, and many of the top...

Tackling Video Piracy Head-On

We are clearly in a "new" golden age of TV. Audiences around the world have never had so many viewing options available. This has led to a creative surge in new groundbreaking storytelling and entertainment as both broadcasters and digital giants try to maintain the loyalty of their viewers. This...

Live Webinar: XDR and Beyond

Anyone paying attention to the cybersecurity technology market has heard the term XDR – Extended Detection and Response. It’s a new technology approach that combines multiple protection technologies into a single platform. All the analyst firms are writing about it and many of the top cybersecuri...

Google and Apple Change Tactics on Contact Tracing Tech

The companies will handle more of the technology for notifying people who may have been exposed to the coronavirus. Privacy won't be affected, they say...

[SECURITY] Fedora 32 Update: batik-1.13-1.fc32

Batik is a Javatm technology based toolkit for applications that want to use images in the Scalable Vector Graphics SVG format for various purposes, such as viewing, generation or manipulation...

Security Bulletin: IBM SDK, Java Technology Edition Quarterly CPU - Apr 2020 - Includes CVE: CVE-2020-2781

Summary There are vulnerabilities in IBM Runtime Environments Java Technology Edition, Versions 7 and 8, IBM SDK, Java Technology Edition Quarterly CPU - Apr 2020 - Includes CVE: CVE-2020-2781 that affect IBM Sterling Transformation Extender. Vulnerability Details CVEID: CVE-2020-2805 DESCRIPTION...

Security Bulletin: Vulnerability in IBM Java SDK affect IBM Cloud Manager with OpenStack (CVE-2020-2654)

Summary A vulnerability in IBM® SDK Java™ Technology Edition, Version 7.0.10.50 used by IBM Cloud Manager with OpenStack. The issue is disclosed as a part of the IBM Java SDK updates in January 2020. Vulnerability Details CVEID: CVE-2020-2654 DESCRIPTION: An unspecified vulnerability in Java SE...

Security Bulletin: CVE-2020-2654 may affect IBM® SDK, Java™ Technology Edition for Content Collector for Email, Content Collector for File Systems, Content Collector for Microsoft SharePoint and Content Collector for IBM Connections

Summary CVE-2020-2654 was disclosed as part of the Oracle January 2020 Critical Patch Update. Vulnerability Details CVEID: CVE-2020-2654 DESCRIPTION: An unspecified vulnerability in Java SE related to the Java SE Libraries component could allow an unauthenticated attacker to cause a denial of...