HPSBHF03638 rev. 4 - Intel 2019.2 IPU BIOS Security Updates

Potential Security Impact Escalation of Privilege, Denial of Service, Information Disclosure. Source: HP, HP Product Security Response Team PSRT Reported by: Intel VULNERABILITY SUMMARY Multiple security vulnerabilities have been identified by Intel. Intel is releasing updates for BIOS, Voltage...

How Do We Bring Equality to Data Ownership and Usage?

Computational biologist Laura Boykin says scientists are “asleep at the wheel”; activist Malkia Devich-Cyril says citizens also need to pressure technology companies to change...

Microsegmentation and Isolation: 2 Essential Strategies in Zero-Trust Security

The headlines over the past few years have been consistent – enterprises are pouring more and more money into cybersecurity countermeasures. Indications are that 2020 will be no different, with reports that nearly three quarters of CISOs plan to ask their CFOs for increased cybersecurity investme...

CVE-2019-2302

CVE-2019-2302 describes an integer overflow in Snapdragon firmware when processing a vendor command with a corrupted channel count, which can escalate to a heap overflow. Affected are numerous Qualcomm/Snapdragon products (e.g., APQ8017, APQ8053, APQ8096AU, MDM9xxx, SDM/SM series, QCA/QCN/QCS, SD...

Cisco Small Business RV016, RV042, RV042G, and RV082 Routers Issues

Cisco firmware for certain Cisco Small Business RV Series Routers is affected by the following issues: Certificate and key issued to QNO Technology Hardcoded password hashes Multiple vulnerabilities in third-party software TPS components Certificate and Key Issued to QNO Technology An X.509...

Smartwares HOME easy 1.0.9 - Database Backup Information Disclosure

Smartwares HOME easy 1.0.9 - Database Backup Information Disclosure Title: Smartwares HOME easy 1.0.9 - Database Backup Information Disclosure Author: LiquidWorm Date: 2019-11-05 Vendor: Smartwares Product web page: https://www.smartwares.eu Affected version: =1.0.9 Advisory ID: ZSL-2019-5541...

Smartwares HOME easy 1.0.9 - Client-Side Authentication Bypass Vulnerability

Exploit for hardware platform in category web applications Exploit Title: Smartwares HOME easy 1.0.9 - Client-Side Authentication Bypass Author: LiquidWorm Vendor: Smartwares Product web page: https://www.smartwares.eu Affected version: =1.0.9 Advisory ID: ZSL-2019-5540 Advisory URL:...

Obfuscation as a Privacy Tool

This essay discusses the futility of opting out of surveillance, and suggests data obfuscation as an alternative. We can apply obfuscation in our own lives by using practices and technologies that make use of it, including: The secure browser Tor, which among other anti-surveillance technologies...

How adversaries use politics for compromise

By Nick Biasini and Edmund Brumaghin. Executive Summary With the U.S. presidential primaries just around the corner, even malware authors can't help but get behind the frenzy. Cisco Talos recently discovered several malware distribution campaigns where the adversaries were utilizing the names and...

Smartwares HOME easy v1.0.9 Client-Side Authentication Bypass

Summary Home Easy/Smartwares are a range of products designed to remotely control your home using wireless technology. Home Easy/Smartwares is very simple to set up and allows you to operate your electrical equipment like lighting, appliances, heating etc. Description HOME easy suffers from...

Intel CSME, Server Platform Services, Trusted Execution Engine, Intel Active Management Technology and Dynamic Application Loader Vulnerabilities - Lenovo Support US

Lenovo Security Advisory: LEN-27716 Potential Impact: Privilege escalation, denial of service, information disclosure Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2019-0131, CVE-2019-0165, CVE-2019-0166, CVE-2019-0168, CVE-2019-0169, CVE-2019-11086, CVE-2019-11087,...

Intel CSME, Server Platform Services, Trusted Execution Engine, Intel Active Management Technology and Dynamic Application Loader Vulnerabilities - Lenovo Support US

No description provided...

Chengdu Silo Technology Co., Ltd. mall system has a logic flaw vulnerability

Chengdu Silo Technology Co., Ltd. is a well-known professional Internet infrastructure service operator in Chengdu and a leading e-commerce informationization operation service provider in China. Chengdu Silo Technology Co., Ltd. mall system has a logic flaw vulnerability that can be exploited by...

SQL Injection Vulnerability in Website Building System of Wuhan Bajie Group Information Technology Co.

Wuhan Bajie Group Information Technology Co., Ltd. is a company that provides integrated solutions of development, operation, training and promotion for enterprises. There is a SQL injection vulnerability in the website building system of Wuhan Bajie Group Information Technology Co., Ltd, which c...

SQL Injection Vulnerability in Website Building System of Guangzhou HYU Network Technology Co.

Guangzhou HY Network Technology Co., Ltd. is a comprehensive enterprise specializing in providing customers with a series of corporate services such as website, mailbox, advertising, software, finance and tax. Guangzhou Hopeful Network Technology Co., Ltd. website building system has SQL injectio...

Customer Experience and IT

Earlier this month, Akamai participated in CX Day, a global event dedicated to the customer experience. This was our first time celebrating, and I was lucky enough to join my fellow leaders for the event. I got my start at Akamai in Professional Services, so CX has always been central to my work,...

Leading Web Domain Name Registrars Disclose Data Breach

Another day, another massive data breach—this time affecting a leading web technology company, as well as both of its subsidiaries, from where millions of customers around the world have purchased domain names for their websites. The world's top domain registrars Web.com, Network Solutions, and...

One Stop Technology website builder system suffers from SQL injection vulnerability

One Stop Technology formerly Fuyang Tongtou.com, specializing in tourism enterprises to provide tourism network marketing one-stop service, we only focus on the tourism industry network marketing services, is the tourism network marketing one-stop service platform. There is a SQL injection...

Facebook Sues NSO Group Over Alleged WhatsApp Hack

Facebook has filed a lawsuit against Israeli company NSO Group, creator of the Pegasus spyware, alleging that it was behind the massive WhatsApp hack earlier this year. In May 2019, a zero-day vulnerability was found in WhatsApp’s messaging platform, exploited by attackers who were able to inject...

Security Bulletin: Vulnerabilities in IBM SDK, Java Technology Edition Quarterly CPU - Jul 2019 - Includes Oracle Jul 2019 CPU

Summary There are vulnerabilities in IBM SDK, Java Technology Edition Quarterly CPU - Jul 2019 - Includes Oracle Jul 2019 CPU used by IBM Streams. IBM Streams has addressed the applicable CVEs. Vulnerability Details CVE-2019-2769 CVSS 5.3DescriptionA flaw in the java.util component allows an...