2389 matches found
Important: Red Hat Security Advisory: Red Hat build of OpenTelemetry 3.4 release
A new version of Red Hat build of OpenTelemetry has been released Red Hat build of OpenTelemetry is a collection of tools, APIs, and SDKs. You use it to instrument, generate, collect, and export telemetry data metrics, logs, and traces for analysis in order to understand your software's performan...
Malicious code in @shadowbyte/checkout-telemetry-agent (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3309a46cb7d7602b6b36a782d12752e0b69f409896afc9dd2d9fa4925d65b4a6 The OpenSSF Package Analysis project identified '@shadowbyte/checkout-telemetry-agent' @ 1.0.4 npm as malicious. It is considered malicious...
Improper Check for Unusual or Exceptional Conditions
Overview nipype is a Neuroimaging in Python: Pipelines and Interfaces Affected versions of this package are vulnerable to Improper Check for Unusual or Exceptional Conditions that sends it into a retry loop when the eTelemetry server is unavailable, which may block or delay responses to other...
The vulnerability of the Ruijie Reyee OS operating system is related to the use of a initially dangerous function, which allows attackers to execute arbitrary commands.
The vulnerability of the Ruijie Reyee OS operating system is related to the use of a initially dangerous function. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands by sending a specially created malicious MQTT message...
The vulnerability of the MQTT operating system broker of Ruijie Reyee OS allows a hacker to expose user credentials.
The vulnerability of the MQTT broker operating system in Ruijie Reyee OS is related to the use of weak credentials. Exploiting this vulnerability can allow a malicious actor to obtain access to the credentials...
drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported
...
CVE-2024-45722
Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x uses weak credential mechanism that could allow an attacker to easily calculate MQTT credentials...
Expanded SOC Coverage Into AWS Environments with Rapid7 MXDR
Co-athored by Mikayla Wyman and Ryan Blanchard As organizations increasingly rely on AWS for scalability and innovation, the complexity of securing these environments grows. AWS offers a robust set of native services and a comprehensive ecosystem, but managing security signals and responding to...
Horns&Hooves campaign delivers NetSupport RAT and BurnsRAT
Recent months have seen a surge in mailings with lookalike email attachments in the form of a ZIP archive containing JScript scripts. The script files – disguised as requests and bids from potential customers or partners – bear names such as "Запрос цены и предложения от Индивидуального...
Malicious code in omigo-data-analytics (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 ae4cfba5955464b4ebdf67da4386ccc25b7431d6dfc11e70146b23c0a8185860 The package looks like a beginning for a further work. In fact, the uploader has shortly published a few similar packages appearing to be e.g. an integration f...
MAL-2024-12318 Malicious code in omigo-data-analytics (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 ae4cfba5955464b4ebdf67da4386ccc25b7431d6dfc11e70146b23c0a8185860 The package looks like a beginning for a further work. In fact, the uploader has shortly published a few similar packages appearing to be e.g. an integration f...
APT trends report Q3 2024
Kaspersky's Global Research and Analysis Team GReAT has been releasing quarterly summaries of advanced persistent threat APT activity for over seven years now. Based on our threat intelligence research, these summaries offer a representative overview of what we've published and discussed in more...
Understanding the Citrix Telemetry Service
Understanding the Citrix Telemetry Service The Citrix Telemetry Service plays a crucial role in maintaining and optimizing the user experience of Citrix products. This feature is designed to collect diagnostic, performance, and usage data from Citrix products back to Citrix. The information...
Unlock 24/7 SOC Coverage: Rapid7 MXDR Now Supports with Microsoft Security Products
In today’s complex threat landscape, organizations need every advantage at their disposal to stay secure–starting with maximizing the tools they already have within their ecosystem. With the launch of Rapid7 MXDR’s SOC support for key Microsoft security products, we’re making it possible for...
The vulnerability of the software for managing and monitoring remote devices in telemetry and telemechanics systems, related to deficiencies in the deserialization mechanism, allows a perpetrator to execute arbitrary code.
The vulnerability of software for managing and monitoring remote objects in telemetry and telemechanics systems is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code with SYSTEM privileges by sending specially...
K000148488: MySQL vulnerabilities CVE-2024-21243 and CVE-2024-21237
Security Advisory Description CVE-2024-21243 Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Telemetry. Supported versions that are affected are 8.4.2 and prior and 9.0.1 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access...
SUSE-SU-2024:3937-1 Security update for go1.23-openssl
This update for go1.23-openssl fixes the following issues: This update ships go1.23-openssl version 1.23.2.2. jscSLE-18320 - go1.23.2 released 2024-10-01 includes fixes to the compiler, cgo, the runtime, and the maps, os, os/exec, time, and unique packages. go69119 os: double close pidfd if calle...
Vulnerability of the MySQL Server component: The Telemetry feature of the MySQL Server management system allows a hacker to gain unauthorized access to protected information.
The vulnerability of the MySQL Server component relates to insufficient protection of operational data due to incorrect validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information using the MySQL network...
Vulnerability of the MySQL Server component: The Telemetry feature of the MySQL Server management system allows a hacker to gain unauthorized access to protected information.
The vulnerability of the MySQL Server component relates to insufficient protection of operational data due to incorrect validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information using the MySQL network...
Malicious code in aria-web-telemetry (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 16ad0cfe7b7d9636482741603c31ea841100db6c7a18a17bf08ecbafc906fd7d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...