Facial Recognition Has Already Reached Its Breaking Point

Facial recognition technology has proliferated unchecked in the US so far. Congress finally seems ready to do something about it...

Intel SCS Discovery Utility Privilege Permission and Access Control Issues Vulnerability

Intel SCS Discovery Utility is a utility program from Intel Corporation USA for obtaining detailed data about Intel AMT. The Intel SCS Discovery Utility is vulnerable to a privilege permission and access control issue. The vulnerability stems from a lack of effective privilege permission and acce...

File Upload Vulnerability in Cheng Technologies CMS

Xi'an Zhicheng Information Technology Co., Ltd. is one of the ICP/ISP enterprises in Shaanxi Province that can operate value-added telecommunication business directly assessed by the Ministry of Industry and Information Technology and approved by Shaanxi Provincial Communication Administration...

Intel AMT Subsystem Input Validation Error Vulnerability

Intel Active Management Technology AMT is a set of hardware-based computer remote active management technology software from Intel Intel. An input validation error vulnerability exists in a subsystem in Intel AMT. The vulnerability originates from a network system or product that does not properl...

Intel AMT Subsystem Input Validation Error Vulnerability (CNVD-2019-27317)

Intel Active Management Technology AMT is a set of hardware-based computer remote active management technology software from Intel Intel. An input validation error vulnerability exists in a subsystem in Intel AMT. The vulnerability originates from a network system or product that does not properl...

Intel ACU Wizard Privilege License and Access Control Issues Vulnerability

Intel ACU Wizard is an AMT configuration utility program from Intel Corporation USA. Intel ACU Wizard is vulnerable to a privilege permission and access control issue. The vulnerability stems from a lack of effective privilege permission and access control measures in a networked system or produc...

Celebrating the Next Generation of Technology Innovators

At Trend Micro, it’s our mission to secure the connected world. However, we want to go beyond the boundaries of the cybersecurity industry to support and learn from the technology innovators of tomorrow. That’s what our venture arm, Trend Forward Capital, is all about. As part of these efforts, w...

WEBINAR: How to Get Enterprise Cyber Security for your Mid-Sized Organization

High-quality cybersecurity posture is typically regarded as the exclusive domain of the large and heavy resourced enterprises – those who can afford a multi-product security stack and a skilled security team to operate it. This implies a grave risk to all organizations who are not part of this...

4 Common Misconceptions About Threat Hunting

Editor’s Note: Sam Bocetta, a guest author on the Carbon Black blog, is a freelance journalist specializing in U.S. diplomacy and national security, with emphases on technology trends in cyber warfare, cyber defense, and cryptography. Looking for cyber threats isn't new, but threat hunting as a...

Prosoft Technology RLX2 Communications Adapter

Binary data 202.prm...

SQL Injection Vulnerability in Nanjing Minggu Technology Co.

Nanjing Minggu Technology Co., Ltd. is engaged in software development, network marketing and enterprise network informatization solutions. A SQL injection vulnerability exists in the website building system of Nanjing Minggu Technology Co. An attacker can use this vulnerability to obtain sensiti...

ZombieLoad Pioneer: The Story Behind Intel’s Latest Side Channel Flaw

The release of a new speculative execution vulnerability called ZombieLoad last week follows a similar disclosure path as Meltdown and Spectre. Threatpost caught up with one of the researchers behind the discovery of ZombieLoad to find out how. ZombieLoad was discovered and reported by Michael...

SQL injection vulnerability exists in ne***.asp page of Zhuzhou Window Information Network Culture Technology Co.

Zhuzhou window information network culture technology limited company engaged in software development, network marketing and enterprise network informatization solutions. Zhuzhou Window Information Network Culture Technology Co., Ltd. station building system ne.asp page SQL injection vulnerabilit...

CVE-2019-0092

Insufficient input validation vulnerability in subsystem for IntelR AMT before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 may allow an unauthenticated user to potentially enable escalation of privilege via physical access...

Why You Should Pick a Leader for Your Enterprise Email Security

Email is a mature technology, but threats targeting email are evolving and getting more sophisticated. 97%1 of ransomware attacks come from email. That’s why there are so many email security vendors and solutions in the market offering different types of technologies and coverages. Picking the be...

Intel ZombieLoad Side-Channel Attack: 10 Takeaways

Intel on Tuesday revealed a new class of speculative execution vulnerabilities, dubbed Microarchitectural Data Sampling MDS, which impact all its modern CPUs. The flaws all ultimately depend on different ways of executing side channel attacks to siphon data from impacted systems – and result in...

Decentralized identity and the path to digital privacy

Security is the central challenge of the digital age. Our digital lives have moved into the cloud. People now use multiple devices to connect to multiple applications through many different networks. Just about everything is connected to the internet, where threats remain constant and evolving. I...

SQL injection vulnerability in the id parameter of the ne***.asp page of the website builder system of Chengdu Power Infinite Technology Co.

Chengdu Power Unlimited Technology Co., Ltd. is an Internet company that builds marketing websites and Internet marketing services for small and medium-sized enterprises. Chengdu Power Infinite Technology Co., Ltd. building system ne.asp page id parameter exists SQL injection vulnerability, an...

CVE-2019-9861

Due to the use of an insecure RFID technology MIFARE Classic, ABUS proximity chip keys RFID tokens of the ABUS Secvest FUAA50000 wireless alarm system can easily be cloned and used to deactivate the alarm system in an unauthorized way...

Design/Logic Flaw

Due to the use of an insecure RFID technology MIFARE Classic, ABUS proximity chip keys RFID tokens of the ABUS Secvest FUAA50000 wireless alarm system can easily be cloned and used to deactivate the alarm system in an unauthorized way...